2dbcbe74ed35506ffd66cdb632094a01_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2dbcbe74ed35506ffd66cdb632094a01_JaffaCakes118
Size

397KB
MD5

2dbcbe74ed35506ffd66cdb632094a01
SHA1

2a2824f11d8363d71fce53f69c0c4666cc525888
SHA256

ac25a587bb80a122deb68c60c200234d353cf4d1fb7f1ed81859c8c83f9bbbb8
SHA512

0493c87ff2580c2c0bbf17aecc97eda507dbd5537859093b4052728da56e3f2f3a1d3563654f96ed642d1d2f3c484c32dfc81c636ca1ee5fd6c5c720ee78301e
SSDEEP

6144:dU3B/hRqnNAT0Na2P3vYm9Alv30s/7JX/6lt0R05psI:dEB/fuNW+Im9uvv9/MY+7

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dbcbe74ed35506ffd66cdb632094a01_JaffaCakes118

Files

2dbcbe74ed35506ffd66cdb632094a01_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 50KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 166KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 163KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE