390fcb59de536108d1acb9c3426e9deb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

390fcb59de536108d1acb9c3426e9deb_JaffaCakes118
Size

327KB
MD5

390fcb59de536108d1acb9c3426e9deb
SHA1

b1a61f0fe496b1c37b2e8ea45c5489996a60c6c3
SHA256

ce39f47c61ca3f2d32627baad703421162483708a2aaf87372e36a2780feed3c
SHA512

69f5dd318c49027af95506a9b6386db8b7ff951b5165526b7ef35fdb65ce7c5b8d7cff88c13434e807bf9a9d429665a1502723369550efaad8baa3c4e58588fa
SSDEEP

6144:jDGbdUxSImUw4ZPjv3ufPU0VX7cIdWi6/R0MKEppTOTjIUf0Y344XsJvwzL:jDGbexSIVw44HlXJdQ/RBKEppTqSYrpz

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
390fcb59de536108d1acb9c3426e9deb_JaffaCakes118

Files

390fcb59de536108d1acb9c3426e9deb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 229KB - Virtual size: 492KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 38KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 19KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE