2eebac6b3171b751befce6f290b47932_JaffaCakes118

General

Target
2eebac6b3171b751befce6f290b47932_JaffaCakes118
Size 637KB
Sample240709-ehx4javemn
SHA256 a9d5b6a08b07bdf2d4e3014c3333448be496a9dd7f8f5dead87cff943a13b5ad
MD5 2eebac6b3171b751befce6f290b47932
SHA1 ee73bb33386924f46d0abeb7d9690afe0f1bbe06
SHA512 c1d366af2d545b90f168cb7e6d78ed4402073499d4588f4e5405a3cc5b9cba0fdcac93f138a97e02e3e83a1f4d9d66b950074a554243d5deeaf36e6abe13a233
SSDEEP 12288:jf5Kdv0xr1bFwajgUOkDLUCsKBhHapjKA4FCGXQsIlZvE8f7dS9+H1TrWqt:z5Kdar1bua7OudsKT+jZGCCONz8013Wm
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

aspackv2

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2eebac6b3171b751befce6f290b47932_JaffaCakes118

SHA256 a9d5b6a08b07bdf2d4e3014c3333448be496a9dd7f8f5dead87cff943a13b5ad
MD5 2eebac6b3171b751befce6f290b47932
SHA1 ee73bb33386924f46d0abeb7d9690afe0f1bbe06
SHA512 c1d366af2d545b90f168cb7e6d78ed4402073499d4588f4e5405a3cc5b9cba0fdcac93f138a97e02e3e83a1f4d9d66b950074a554243d5deeaf36e6abe13a233
SSDEEP 12288:jf5Kdv0xr1bFwajgUOkDLUCsKBhHapjKA4FCGXQsIlZvE8f7dS9+H1TrWqt:z5Kdar1bua7OudsKT+jZGCCONz8013Wm
MD5 SHA1 SHA512 SSDEEP

ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1835009

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths