3dc9130661a573998696eb75454f7c9e_JaffaCakes118 | Triage

Sharing

General

Target

3dc9130661a573998696eb75454f7c9e_JaffaCakes118
Size

514KB
MD5

3dc9130661a573998696eb75454f7c9e
SHA1

8be5e8203d873fa1b8bde9cebfa541e4ea262e74
SHA256

b91372a247e099da75ce685e9cd14445038445456138b8424f733214a7993922
SHA512

bd61259b9c6d012a694260e5501051c3306a60a0b8d27cf063687798784afffaafcba3fa5fbe2beaba237c6a41aa2f7871f32024b1c80441de80297ec132bddb
SSDEEP

12288:/5lnPEkPyjwlgHllOrsdNahNlOWfg77eEXh84zCw:x6kPyp/OrGMXlFgbR84J

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
static1/unpack001/XUNXINGTONG/XUNXINGTONG.EXE	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/XUNXINGTONG/XUNXINGTONG.EXE

Files

3dc9130661a573998696eb75454f7c9e_JaffaCakes118
.rar
XUNXINGTONG/155绿色软件站.url
.url
XUNXINGTONG/TVlist.dat
XUNXINGTONG/XUNXINGTONG.EXE
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 279KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 95KB - Virtual size: 884KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
XUNXINGTONG/xx32.jpg
.jpg
XUNXINGTONG/xxt_itv.jpg
.jpg
XUNXINGTONG/软件说明.txt