3c3cfc347bfcd89ee253696a8a73ad58_JaffaCakes118 | Triage

Sharing

General

Target

3c3cfc347bfcd89ee253696a8a73ad58_JaffaCakes118
Size

786KB
MD5

3c3cfc347bfcd89ee253696a8a73ad58
SHA1

4e85e3fb7d761e8b3843fbc3db8ad35bdb19042d
SHA256

9cb31a6a5438b8ffab3c4bfb2e757172831f829c4e68743992ed1e2bfd3f8200
SHA512

195d88175706a21129597eed440dfa8fcc7b832b0a097680b716fda82ed49191e28c34f43d295f5eacfb48e4ec0d61f2dfa0bd16ccd2753e36de70d60d9aeec9
SSDEEP

12288:wu+f5gOGWXeiAa4ey3HtzUakSKR8kb/ieqd4OlNovSAA11tMZxhpAtfBi:h8ka4TH5kSqHbLaNov6zcoq

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c3cfc347bfcd89ee253696a8a73ad58_JaffaCakes118

Files

3c3cfc347bfcd89ee253696a8a73ad58_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 240KB - Virtual size: 548KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 425KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 19KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 84KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE