663b8131cf4399a8419e0be4c31ca478_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

663b8131cf4399a8419e0be4c31ca478_JaffaCakes118
Size

838KB
MD5

663b8131cf4399a8419e0be4c31ca478
SHA1

f4a6e70bc9d05b4506946744c02e2e835012c703
SHA256

e777e8eaa7a97c6659a0e091dcd9de08ee5dfd2cae2a00c8fc02bcc5a5b895db
SHA512

ef593e3c7ff4dff7584a60d353ca10d8682d3cb3bf5ac2e67de0788b0bcec8dc304705a8408b314a14e33daf76f18b2dd6cd442188e95db84a5d360a0e3d4de4
SSDEEP

12288:X6/S4Iwh7SQA2sLThTewtKf/T2u5/6G75AGIy5LGpbdHAh4WtOjUg:X27SQA2MVTeVxx6G9AGIZbRJfUg

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
663b8131cf4399a8419e0be4c31ca478_JaffaCakes118

Files

663b8131cf4399a8419e0be4c31ca478_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 245KB - Virtual size: 544KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 455KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE