6311b8c3421be4f456df550ccfbe8dd8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6311b8c3421be4f456df550ccfbe8dd8_JaffaCakes118
Size

1.1MB
MD5

6311b8c3421be4f456df550ccfbe8dd8
SHA1

58fa80426fae0253ad88f4aec51141dd39b8f0b7
SHA256

e070ed4c134a50c3fe988134faf9193df178745908adf849b5e40cf33c7f4ffa
SHA512

998053397cc20309891736643ac9ad6539a4af0451c56cb4655d2498b90581ceeeb523e2503ff7f6e9832ce82d659fb6598de786d38e0e1bd495bc9fe7447e75
SSDEEP

24576:fAckY61GDV36GLVVNzw0Mp3PiUU54ftpkDrJbl9sJcEjikU:IP9GBNLVnzEiUU54fTkDdkJ

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6311b8c3421be4f456df550ccfbe8dd8_JaffaCakes118

Files

6311b8c3421be4f456df550ccfbe8dd8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 17KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

00000000
Size: 1018KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE