4baa249ff914a27cd1fc651440112cfc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4baa249ff914a27cd1fc651440112cfc_JaffaCakes118
Size

443KB
MD5

4baa249ff914a27cd1fc651440112cfc
SHA1

46b605f58075cc3e4eff1c343ef61d66bab24679
SHA256

721b2cdbcc18e7d641db389ed7daaaf7ac324212c96ec796f4cf72e694d239ff
SHA512

e789664b2f72cc60e0f5cada30c03527312afdf324bb7379aad2e869e0b20cdb91fbb122f8064387189f2ac11fb8abc77910ada6530073e3ac4c5ff3fd75ceb8
SSDEEP

12288:fruY6stEtDTXhkjDd5gaPj93/z8M6xvI7g:p6DTOjxNx3/z8MsB

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4baa249ff914a27cd1fc651440112cfc_JaffaCakes118

Files

4baa249ff914a27cd1fc651440112cfc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 238KB - Virtual size: 540KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 154KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 19KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE