4012725cebf551e43304c093d941597a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4012725cebf551e43304c093d941597a_JaffaCakes118
Size

664KB
MD5

4012725cebf551e43304c093d941597a
SHA1

ad6994fbf6c338838e8a4bc6f6084595d2172fa6
SHA256

247f5625abf8a9486c882cfcdf48f0c00eff4452d5c08c506893f0f74ca3453f
SHA512

fdb14bd9a0db027afc516faa1098d78e85905fc0198bd3670d7b8215480971c5084ee4db36271dcfd39dde01edd7a235cb8fdc7a3a0263cda6a282824ad4e396
SSDEEP

12288:GyBpx95PULr+YjK0tOKUn57lykmBbgt6+yo4dE2gi3WxbII4uZ+dgP00wnE3CXnS:GyF3PUvnm4mqk7t6E4dE2gi7btdg/wnC

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4012725cebf551e43304c093d941597a_JaffaCakes118

Files

4012725cebf551e43304c093d941597a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 21KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 337KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 300KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE