3bc5c1400318d3d8186a48f5926890ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3bc5c1400318d3d8186a48f5926890ae_JaffaCakes118
Size

170KB
MD5

3bc5c1400318d3d8186a48f5926890ae
SHA1

61b5f97faedf65f6621676de35cf2686a9f40c25
SHA256

2afb6997e354dc62844e5f2f931d9f9efceafd6964f88368b0a88e9e09b8d6d8
SHA512

7e97935b0f1d18b5abe85f026fd6f4055f7ea0f969addb8c8fdd041b8bfb65c32b38f97fe96d8fb1be3488c355dc7f0d30931a2861ba5aaa698760a924c5b7ce
SSDEEP

3072:lr7eWn3FR3ZqzPs3CIvNUWfnDydJgbQcoNK9VpAtJdOj4OjU:lXTowC8UYCuPoNK9QPMj4OA

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bc5c1400318d3d8186a48f5926890ae_JaffaCakes118

Files

3bc5c1400318d3d8186a48f5926890ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 22KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 104KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE