2dd7dd61ac5350650161077c43a91dac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2dd7dd61ac5350650161077c43a91dac_JaffaCakes118
Size

151KB
MD5

2dd7dd61ac5350650161077c43a91dac
SHA1

db04e8b70cf476651bf0edbb2b9d8e7d7fc70320
SHA256

976d1ced331f5dea609ca9800a29ba36f15bf7d85fd63e1dcb4bb0b0ac2f77ad
SHA512

ba33e24e5a79372d9e0871036e681e0093fb6f168962e1094ed98cd5cd073ef184cfb135df8161b3ad03a5847023cd16c3a3c70ac15bbebdbc9a5c4b0f3ef14d
SSDEEP

3072:VgxR6ef9IVbGxZ57A3U7lBFkCF037JTT3QCRNjIdJ5AhGXXPPj:VkUbsZxA3U7l8CFu3VL0dJ1

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dd7dd61ac5350650161077c43a91dac_JaffaCakes118

Files

2dd7dd61ac5350650161077c43a91dac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 78KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE