862f17a10b980c5dd77da4f74efbd5cb_JaffaCakes118 | Triage

Sharing

General

Target

862f17a10b980c5dd77da4f74efbd5cb_JaffaCakes118
Size

202KB
MD5

862f17a10b980c5dd77da4f74efbd5cb
SHA1

438b4c9fe7262eed8b198580a894fc0f23674dff
SHA256

30d0751e360d28282bd35dc12feb06ccdf33bb3b8b20d62663db2a385d66116e
SHA512

1c027f05b4440ff8401dcd787f75d4fe54228a58906f4d27c0f05ebbda480389c085ee97c459c0efca3a72da0454377c02c241845ce0a36533708ffa7aba39d9
SSDEEP

3072:rBtb1S0QIY4qMgJI6t8xsfXwrEQJ4kYjVnYbqSvge9VUepnVR7pU:X49gd3C8xsfgwQJatSYeDVnPFU

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
862f17a10b980c5dd77da4f74efbd5cb_JaffaCakes118

Files

862f17a10b980c5dd77da4f74efbd5cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 18KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 133KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE