78e5a11d879a58b48d181cc62828f017_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78e5a11d879a58b48d181cc62828f017_JaffaCakes118
Size

1.5MB
MD5

78e5a11d879a58b48d181cc62828f017
SHA1

b92359a9dde8d62916aa17bffac63523d77a45b9
SHA256

c1eb7a77d28b9bf756ac554078b87f4e14b4477947e4f14b19525d9e8b05406a
SHA512

e5c31c6c5e95ae3550c9c6c9d9176285cf211ac143e7019ff404ef3dd5ba2ab5c654377f15bfb2181f6b40df96c4bda331441e2112b2030bcf8d04359ed36a8f
SSDEEP

24576:X5/aunfZmDIvDXHeWb32LZrMAASxSdnIv7kl7YGh2BbMfpR5154GIfGCjozS6wYJ:BiereJLFMAArIjjDBwl1HIftj3Yzw

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78e5a11d879a58b48d181cc62828f017_JaffaCakes118

Files

78e5a11d879a58b48d181cc62828f017_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 138KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.0MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data0
Size: 280KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE