8c275ce8e71ec6b87021b8343075dd99_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c275ce8e71ec6b87021b8343075dd99_JaffaCakes118
Size

202KB
MD5

8c275ce8e71ec6b87021b8343075dd99
SHA1

7ed955e9c25cbd851152b2657e9ce71134bd4561
SHA256

363479aaa1edc50f785337718363c2d2850a19df54c97a2970020371d4f75a8f
SHA512

b91711cbfdbf96119652c9d5d07efa5d36d6ba147d1bf7ccab21909ac55206f9881a71e14461c7a3a3c8293283080949dffea976018c99756d4c107c09b73153
SSDEEP

6144:kCyveL/3FGaH0VVjkEqfoX3k/Ehi64h3/sxkVqzJ:kCyvexvH0VVjkjnEhi66/sxkMJ

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c275ce8e71ec6b87021b8343075dd99_JaffaCakes118

Files

8c275ce8e71ec6b87021b8343075dd99_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.123123p
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE