3dcda70de56a3e8149ae36a7999fb1cd_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3dcda70de56a3e8149ae36a7999fb1cd_JaffaCakes118
Size

183KB
MD5

3dcda70de56a3e8149ae36a7999fb1cd
SHA1

38127ac78d1835b0d1a1d2cec6edc70f459fce6a
SHA256

b98635dd3097803dde0ab0d0bf1b7cc1dfabbb941ddf6be8d6b85bf93724abcd
SHA512

142e2869d56b7f8c062c79fa5ec649f86375b324c2f7798d2016a990349914ba3ebe45c66c5d2c5185320ca963d9e399ccd8c54b4dfe5e229a007e748797b5ee
SSDEEP

3072:P4U6ms5AggEapglj6A90jRIj6adUmBrDYo5GHzQDN9S4zQ58lpcvhuhB0up:b7ET16HDadF5GHe9pQ58lpcvhmB

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dcda70de56a3e8149ae36a7999fb1cd_JaffaCakes118

Files

3dcda70de56a3e8149ae36a7999fb1cd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.$whfg6
Size: 1KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.$vdvtx
Size: - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bqzrzt
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ajmc81
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.077wps
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vaqzb8
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.o879v6
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.debug
Size: - Virtual size: 3.0MB

.adata
Size: - Virtual size: 428KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.loader
Size: 171KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

.$whfg6 Size: 1KB - Virtual size: 24KB

.$vdvtx Size: - Virtual size: 176B

.bqzrzt Size: - Virtual size: 2KB

.ajmc81 Size: - Virtual size: 1KB

.077wps Size: - Virtual size: 8B

.vaqzb8 Size: - Virtual size: 24B

.o879v6 Size: - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 108KB

.debug Size: - Virtual size: 3.0MB

.adata Size: - Virtual size: 428KB

.loader Size: 171KB - Virtual size: 176KB

.aspack Size: 9KB - Virtual size: 12KB

.adata Size: - Virtual size: 4KB

.$whfg6
Size: 1KB - Virtual size: 24KB

.$vdvtx
Size: - Virtual size: 176B

.bqzrzt
Size: - Virtual size: 2KB

.ajmc81
Size: - Virtual size: 1KB

.077wps
Size: - Virtual size: 8B

.vaqzb8
Size: - Virtual size: 24B

.o879v6
Size: - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 108KB

.debug
Size: - Virtual size: 3.0MB

.adata
Size: - Virtual size: 428KB

.loader
Size: 171KB - Virtual size: 176KB

.aspack
Size: 9KB - Virtual size: 12KB

.adata
Size: - Virtual size: 4KB