3e1c77c99204dda543802c2e1307fccf_JaffaCakes118

General

Target

3e1c77c99204dda543802c2e1307fccf_JaffaCakes118
Size

436KB
MD5

3e1c77c99204dda543802c2e1307fccf
SHA1

06fe615b9669cd5170c56f250917e962a14fd63a
SHA256

b5ac7ea7f2e92142b7b294e05579a284d35df5014d8344b17636fafc08ca3f62
SHA512

75be88fc5c38f94ec013b30e5737625a7f927e71d6105b03210e8bfd2a1b348e8ba1f7f158b7bc8a1a06e90377ed09d0eb48841436c44d5caa63c199449521df
SSDEEP

12288:SiQsCebEBbbaoeXDNaY1KCR7cC4FvWYkDQd2tgBOrQK+16o:DbEB3zeXhV1zR7J4Fv+DA2tgWQBso

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 2 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
static1/unpack001/759_OldSchoolHackRC/OldSchoolHack RC4/SchoolHackCoD4MultiRC3.exe	aspack_v212_v242
static1/unpack001/759_OldSchoolHackRC/OldSchoolHack RC4/SchoolHackCoD4MultiRC4.exe	aspack_v212_v242

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/759_OldSchoolHackRC/OldSchoolHack RC4/SchoolHackCoD4MultiRC3.exe
unpack001/759_OldSchoolHackRC/OldSchoolHack RC4/SchoolHackCoD4MultiRC4.exe

Files

3e1c77c99204dda543802c2e1307fccf_JaffaCakes118
.rar
759_OldSchoolHackRC/OldSchoolHack RC4/Hot keys , Горячие клавиши.txt
759_OldSchoolHackRC/OldSchoolHack RC4/SchoolHackCoD4MultiRC3.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Exports

Exports

@@Main@Finalize
@@Main@Initialize
__GetExceptDLLinfo
___CPPdebugHook
_oshcod4

Sections

.text
Size: 187KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

oshcod4
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
759_OldSchoolHackRC/OldSchoolHack RC4/SchoolHackCoD4MultiRC4.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Exports

Exports

@@Main@Finalize
@@Main@Initialize
__GetExceptDLLinfo
___CPPdebugHook
_oshcod4

Sections

.text
Size: 187KB - Virtual size: 464KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

oshcod4
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

.text Size: 187KB - Virtual size: 460KB

.data Size: 9KB - Virtual size: 64KB

.tls Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.idata Size: 3KB - Virtual size: 12KB

.edata Size: 512B - Virtual size: 4KB

.rsrc Size: 6KB - Virtual size: 88KB

.reloc Size: - Virtual size: 32KB

oshcod4 Size: 76KB - Virtual size: 76KB

.adata Size: - Virtual size: 4KB

Headers

File Characteristics

Exports

Exports

Sections

.text Size: 187KB - Virtual size: 464KB

.data Size: 9KB - Virtual size: 64KB

.tls Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.idata Size: 3KB - Virtual size: 12KB

.edata Size: 512B - Virtual size: 4KB

.rsrc Size: 6KB - Virtual size: 88KB

.reloc Size: - Virtual size: 32KB

oshcod4 Size: 76KB - Virtual size: 76KB

.adata Size: - Virtual size: 4KB

.text
Size: 187KB - Virtual size: 460KB

.data
Size: 9KB - Virtual size: 64KB

.tls
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 3KB - Virtual size: 12KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 6KB - Virtual size: 88KB

.reloc
Size: - Virtual size: 32KB

oshcod4
Size: 76KB - Virtual size: 76KB

.adata
Size: - Virtual size: 4KB

.text
Size: 187KB - Virtual size: 464KB

.data
Size: 9KB - Virtual size: 64KB

.tls
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 3KB - Virtual size: 12KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 6KB - Virtual size: 88KB

.reloc
Size: - Virtual size: 32KB

oshcod4
Size: 76KB - Virtual size: 76KB

.adata
Size: - Virtual size: 4KB