40c92f90a2625431921b9c4ae9c74026_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

40c92f90a2625431921b9c4ae9c74026_JaffaCakes118
Size

2.8MB
MD5

40c92f90a2625431921b9c4ae9c74026
SHA1

927fb985d911b34c221e64bf7dc6bdb1e28385d5
SHA256

e6b6644243ee561b6c388581f42117c317967ffa5cf12080838e61e89f98b7ec
SHA512

98b255b601800b1124e2950d5e64e726ddd306e18e9cae6e2d361f067be45821408798744f543d02bebcd386acf3a40c36881586f3b6f948c111b5e5bf8ac877
SSDEEP

49152:QCDlkLo7oM5Zfr3363u2eINYvQkfc3nAnoAamVJjHOpYfN354P3PHRJ8W9+c:AOoMI7jOjk3AnHnfNOJ8UX

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
static1/unpack002/smart_avatark/vksa.exe	aspack_v212_v242

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2 Vkontakte Smart Avatark/2 Vkontakte Smart Avatark .exe
unpack001/2 Vkontakte Smart Avatark/WinrRarSerialInstall.exe
unpack002/smart_avatark/vksa.exe

Files

40c92f90a2625431921b9c4ae9c74026_JaffaCakes118
.zip
2 Vkontakte Smart Avatark/2 Vkontakte Smart Avatark .exe
.exe windows:4 windows x86 arch:x86

6039c26165040db47e28057ca34786ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

srand
memcmp
strcat
isdigit
isspace
memcpy
rename
memset
_EH_prolog
__CxxFrameHandler
strcmp
strncpy
strstr
strcpy
rand
abs
strlen

user32

MessageBoxA
wvsprintfA

kernel32

GetModuleHandleA
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
GetProcAddress
GetTickCount
GetStartupInfoA
GetCommandLineA
ExitProcess

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
2 Vkontakte Smart Avatark/WinrRarSerialInstall.exe
.exe windows:4 windows x86 arch:x86

6039c26165040db47e28057ca34786ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

srand
memcmp
strcat
isdigit
isspace
memcpy
rename
memset
_EH_prolog
__CxxFrameHandler
strcmp
strncpy
strstr
strcpy
rand
abs
strlen

user32

MessageBoxA
wvsprintfA

kernel32

GetModuleHandleA
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
GetProcAddress
GetTickCount
GetStartupInfoA
GetCommandLineA
ExitProcess

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
2 Vkontakte Smart Avatark/smart_avatark.rar
.rar
smart_avatark/Themes/SampleTheme/0001.png
.png
smart_avatark/Themes/SampleTheme/0002.png
.png
smart_avatark/Themes/SampleTheme/0003.png
.png
smart_avatark/Themes/SampleTheme/0004.png
.png
smart_avatark/Themes/SampleTheme/0005.png
.png
smart_avatark/Themes/SampleTheme/0006.png
.png
smart_avatark/Themes/SampleTheme/0007.png
.png
smart_avatark/Themes/SampleTheme/0008.png
.png
smart_avatark/Themes/SampleTheme/Thumbs.db
smart_avatark/Themes/SampleTheme/background.jpg
.jpg
smart_avatark/Themes/SampleTheme/p2_1.jpg
.jpg
smart_avatark/Themes/SampleTheme/p2_2.jpg
.jpg
smart_avatark/Themes/SampleTheme/p2_3.jpg
.jpg
smart_avatark/Themes/SampleTheme/p2_4.jpg
.jpg
smart_avatark/Themes/SampleTheme/p2_5.jpg
.jpg
smart_avatark/Themes/SampleTheme/photo1.jpg
.jpg
smart_avatark/Themes/SampleTheme/photo2.jpg
.jpg
smart_avatark/Themes/SampleTheme/photo3.jpg
.jpg
smart_avatark/Themes/SampleTheme/photo4.jpg
.jpg
smart_avatark/Themes/SampleTheme/photo5.jpg
.jpg
smart_avatark/Themes/SampleTheme/vkasmart.ini
smart_avatark/Themes/SampleTheme/weatherbg.jpg
.jpg
smart_avatark/Themes/VistaTheme/0001.png
.png
smart_avatark/Themes/VistaTheme/0002.png
.png
smart_avatark/Themes/VistaTheme/0003.png
.png
smart_avatark/Themes/VistaTheme/0004.png
.png
smart_avatark/Themes/VistaTheme/0005.png
.png
smart_avatark/Themes/VistaTheme/0006.png
.png
smart_avatark/Themes/VistaTheme/0007.png
.png
smart_avatark/Themes/VistaTheme/0008.png
.png
smart_avatark/Themes/VistaTheme/Thumbs.db
smart_avatark/Themes/VistaTheme/background.jpg
.jpg
smart_avatark/Themes/VistaTheme/photo1.jpg
.jpg
smart_avatark/Themes/VistaTheme/photo2.jpg
.jpg
smart_avatark/Themes/VistaTheme/vkasmart.ini
smart_avatark/Themes/VistaTheme/weatherbg.jpg
.jpg
smart_avatark/Themes/WarchikBlackTheme/0001.png
.png
smart_avatark/Themes/WarchikBlackTheme/0002.png
.png
smart_avatark/Themes/WarchikBlackTheme/0003.png
.png
smart_avatark/Themes/WarchikBlackTheme/0004.png
.png
smart_avatark/Themes/WarchikBlackTheme/0005.png
.png
smart_avatark/Themes/WarchikBlackTheme/0006.png
.png
smart_avatark/Themes/WarchikBlackTheme/0007.png
.png
smart_avatark/Themes/WarchikBlackTheme/0008.png
.png
smart_avatark/Themes/WarchikBlackTheme/Thumbs.db
smart_avatark/Themes/WarchikBlackTheme/background.jpg
.jpg
smart_avatark/Themes/WarchikBlackTheme/p2_1.jpg
.jpg
smart_avatark/Themes/WarchikBlackTheme/photo1.jpg
.jpg
smart_avatark/Themes/WarchikBlackTheme/vkasmart.ini
smart_avatark/Themes/WarchikTheme/0001.png
.png
smart_avatark/Themes/WarchikTheme/0002.png
.png
smart_avatark/Themes/WarchikTheme/0003.png
.png
smart_avatark/Themes/WarchikTheme/0004.png
.png
smart_avatark/Themes/WarchikTheme/0005.png
.png
smart_avatark/Themes/WarchikTheme/0006.png
.png
smart_avatark/Themes/WarchikTheme/0007.png
.png
smart_avatark/Themes/WarchikTheme/0008.png
.png
smart_avatark/Themes/WarchikTheme/Thumbs.db
smart_avatark/Themes/WarchikTheme/background.jpg
.jpg
smart_avatark/Themes/WarchikTheme/p2_1.jpg
.jpg
smart_avatark/Themes/WarchikTheme/p2_2.jpg
.jpg
smart_avatark/Themes/WarchikTheme/p2_3.jpg
.jpg
smart_avatark/Themes/WarchikTheme/p2_4.jpg
.jpg
smart_avatark/Themes/WarchikTheme/p2_5.jpg
.jpg
smart_avatark/Themes/WarchikTheme/photo1.jpg
.jpg
smart_avatark/Themes/WarchikTheme/photo2.jpg
.jpg
smart_avatark/Themes/WarchikTheme/photo3.jpg
.jpg
smart_avatark/Themes/WarchikTheme/photo4.jpg
.jpg
smart_avatark/Themes/WarchikTheme/photo5.jpg
.jpg
smart_avatark/Themes/WarchikTheme/vkasmart.ini
smart_avatark/Themes/WarchikTheme/weatherbg.jpg
.jpg
smart_avatark/Themes/WarchikTheme/авака.JPG
.jpg
smart_avatark/Themes/WarchikTheme2/0001.png
.png
smart_avatark/Themes/WarchikTheme2/0002.png
.png
smart_avatark/Themes/WarchikTheme2/0003.png
.png
smart_avatark/Themes/WarchikTheme2/0004.png
.png
smart_avatark/Themes/WarchikTheme2/0005.png
.png
smart_avatark/Themes/WarchikTheme2/0006.png
.png
smart_avatark/Themes/WarchikTheme2/0007.png
.png
smart_avatark/Themes/WarchikTheme2/0008.png
.png
smart_avatark/Themes/WarchikTheme2/Thumbs.db
smart_avatark/Themes/WarchikTheme2/background.jpg
.jpg
smart_avatark/Themes/WarchikTheme2/p2_1.jpg
.jpg
smart_avatark/Themes/WarchikTheme2/p2_2.jpg
.jpg
smart_avatark/Themes/WarchikTheme2/p2_3.jpg
.jpg
smart_avatark/Themes/WarchikTheme2/p2_4.jpg
.jpg
smart_avatark/Themes/WarchikTheme2/p2_5.jpg
.jpg
smart_avatark/Themes/WarchikTheme2/photo1.jpg
.jpg
smart_avatark/Themes/WarchikTheme2/photo2.jpg
.jpg
smart_avatark/Themes/WarchikTheme2/photo3.jpg
.jpg
smart_avatark/Themes/WarchikTheme2/photo4.jpg
.jpg
smart_avatark/Themes/WarchikTheme2/photo5.jpg
.jpg
smart_avatark/Themes/WarchikTheme2/vkasmart.ini
smart_avatark/Themes/WarchikTheme2/weatherbg.jpg
.jpg
smart_avatark/Themes/WarchikTheme2/ава.jpg
.jpg
smart_avatark/avatar.jpg
.jpg
smart_avatark/vkasmart.ini
smart_avatark/vksa.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 295KB - Virtual size: 864KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6039c26165040db47e28057ca34786ef

Headers

File Characteristics

Imports

msvcrt

user32

kernel32

Sections

.text Size: 52KB - Virtual size: 52KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 10KB - Virtual size: 17KB

.rsrc Size: 2KB - Virtual size: 1KB

6039c26165040db47e28057ca34786ef

Headers

File Characteristics

Imports

msvcrt

user32

kernel32

Sections

.text Size: 52KB - Virtual size: 52KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 10KB - Virtual size: 17KB

.rsrc Size: 1KB - Virtual size: 1KB

Headers

File Characteristics

Sections

CODE Size: 295KB - Virtual size: 864KB

DATA Size: 14KB - Virtual size: 24KB

BSS Size: - Virtual size: 8KB

.idata Size: 4KB - Virtual size: 12KB

.tls Size: - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.reloc Size: - Virtual size: 48KB

.rsrc Size: 23KB - Virtual size: 132KB

.aspack Size: 27KB - Virtual size: 28KB

.adata Size: - Virtual size: 4KB

.text
Size: 52KB - Virtual size: 52KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 10KB - Virtual size: 17KB

.rsrc
Size: 2KB - Virtual size: 1KB

.text
Size: 52KB - Virtual size: 52KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 10KB - Virtual size: 17KB

.rsrc
Size: 1KB - Virtual size: 1KB

CODE
Size: 295KB - Virtual size: 864KB

DATA
Size: 14KB - Virtual size: 24KB

BSS
Size: - Virtual size: 8KB

.idata
Size: 4KB - Virtual size: 12KB

.tls
Size: - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.reloc
Size: - Virtual size: 48KB

.rsrc
Size: 23KB - Virtual size: 132KB

.aspack
Size: 27KB - Virtual size: 28KB

.adata
Size: - Virtual size: 4KB