78b9baa0aa13c307a1d55209e9c554f0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78b9baa0aa13c307a1d55209e9c554f0_JaffaCakes118
Size

29KB
MD5

78b9baa0aa13c307a1d55209e9c554f0
SHA1

f91be44b61156124a7dd25a16097afc5545f4c44
SHA256

481075a062e40117db37e0e26b683d442193a862115825e23727b6548953ed90
SHA512

4d2c59a81af1e8908145830722ae6af7517d21b1b083a2bbc798bb6e7dc6582a26ac31b2c0a060d0c2d938951ddb40ed3d6483d9303365af7b3d27f35beefb53
SSDEEP

768:J5rgfIW6iNtSNtXjBOoxaTxudeVz9oIaWXJ:cfeiEXj9K9oIZ

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78b9baa0aa13c307a1d55209e9c554f0_JaffaCakes118

Files

78b9baa0aa13c307a1d55209e9c554f0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DAMN
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE