747814da7e434099134ab25c5a645f41_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

747814da7e434099134ab25c5a645f41_JaffaCakes118
Size

1.4MB
MD5

747814da7e434099134ab25c5a645f41
SHA1

1ddd539f5a7e72b860748d9543f4a52cb705efb1
SHA256

be27bb360189e421c95f004d3d84a93bc20a434183b460ea5eb5d84004645257
SHA512

25283666ffe31e4e02bf0db16c83660d227608d4691a84961149cb5ee0e0405821cfb7fe285241b75e248f61d71317cea7eb4484aa407784e9adf22d94569d68
SSDEEP

24576:Iko5xLA9lZnSpyO0jJedHtmoIgMLjn2mdtQcxwT1t/8mjGAM:IkwLAfZSpAjcD/+nFHe1miGAM

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
static1/unpack001/散户天天宝/散户天天宝.exe	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/散户天天宝/散户天天宝.exe

Files

747814da7e434099134ab25c5a645f41_JaffaCakes118
.rar
散户天天宝/散户天天宝.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 483KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 922KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 38KB - Virtual size: 560KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
散户天天宝/新云软件.url
.url