5a7c61fa3b067252a44ff36485073dff_JaffaCakes118 | Triage

Sharing

General

Target

5a7c61fa3b067252a44ff36485073dff_JaffaCakes118
Size

471KB
MD5

5a7c61fa3b067252a44ff36485073dff
SHA1

834ee603f67fec311499545f3482c338a6ac51dc
SHA256

0fe99d1ab960ddcf9cf2ebb3851cd4548d81d75d8dc325ae521c7467fa979c06
SHA512

ce36e51e5fa19ae6ab51af72544beafc186f428bb82c8f83a60f7bf293c6971e44473f3715d4b40208ae7d14eed1101b466469eb293effc6bf28a10dcc8e6480
SSDEEP

12288:EkG6aIAIT6QIRmNMF4MivTi88/hws7thbGLpIpJuO5O2CD:EkG6aBIfqmNe5s28OD6+8J

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
static1/unpack001/tl2.8/Torchlight_svt_editor2.8.exe	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/tl2.8/Torchlight_svt_editor2.8.exe

Files

5a7c61fa3b067252a44ff36485073dff_JaffaCakes118
.zip
tl2.8/Torchlight_svt_editor2.8.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 211KB - Virtual size: 496KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 217KB - Virtual size: 540KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 17KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tl2.8/޸˵.txt