8ad9246da0bb328d0c25f11a223db169_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

8ad9246da0bb328d0c25f11a223db169_JaffaCakes118
Size

54KB
MD5

8ad9246da0bb328d0c25f11a223db169
SHA1

086d119a8c7316c5fd5678aea6dcdaa59e8481fe
SHA256

25171f2b29a1b17843ba35e15664891a86588cbaba13ab3cf128f067d74a865b
SHA512

83cda9cdb05c0137d4716689c8d6c66891503a7a1f3170bfd477d3c09c9787148caab8010111bf37426e9be4f63a92de488eb1d42407fb0dddfcb68bdb18bb8d
SSDEEP

1536:tXLzVPiSBsRt9k6Qv4RmPMzJ9XV3h9eOY9dnK8ZWTZVCf:5VPBsRt9k684RmPMN9XxvJj1Zwf

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ad9246da0bb328d0c25f11a223db169_JaffaCakes118

Files

8ad9246da0bb328d0c25f11a223db169_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

ConfigDeleteValue
ConfigGetBOOL
ConfigGetBinary
ConfigGetDWORD
ConfigGetString
ConfigGetStringEx
ConfigSetBOOL
ConfigSetBinary
ConfigSetDWORD
ConfigSetDefaultRegPath
ConfigSetString
CrtCloseDownloadFile
CrtCreateDirectoryA
CrtCreateDirectoryW
CrtCreateFileA
CrtCreateFileW
CrtCreateObject
CrtDllGetVersion
CrtDllGetVersionString
CrtDownloadFile
CrtExecuteApp
CrtExecuteAppWithUAC
CrtGetCRC32
CrtGetFileMD5String
CrtGetFileSize
CrtGetGlobalConfig
CrtGetGlobalConfigDWORD
CrtGetGlobalServiceControl
CrtGetInstallDate
CrtGetInstallDaysCount
CrtGetProfileString
CrtGetResource
CrtGetResourceSize
CrtGetVideoMD5String
CrtIERunUrl
CrtInitialize
CrtIsTodaySendLog
CrtLogDecrypt
CrtLogEncrypt
CrtLogPostDailyBOOL
CrtLogPostDailyCount
CrtLogPostUniqueCount
CrtLogPostXMLValue
CrtLogSendDate
CrtNavigateHttpUrl
CrtOutputLogStringA
CrtOutputLogStringW
CrtRegDeleteKeyValue
CrtRegDll
CrtRegGetBOOL
CrtRegGetDWORD
CrtRegGetString
CrtRegIsKeyExist
CrtRegSetBOOL
CrtRegSetDWORD
CrtRegSetString
CrtReportActiveLive
CrtReportActiveLiveEx
CrtSetGlobalConfig
CrtSetGlobalConfigDWORD
CrtSetInstallDate
CrtUninitialize
CrtUrlEncodeA
CrtUrlEncodeW
CrtVersion
CrtWriteProfileString
DllCanUnloadNow
EnableCrtOutputLog
EnableVirtualized
ExtractResourceToFile
ExtractResourceToXMLString
FileAddAccessRights
GetADChanelId
GetConfigFilePath
GetCurrentFilePath
GetDBFilePath
GetDBVersion
GetDBVersionString
GetDebugPrivilege
GetDllPathForClsid
GetFileInfomationString
GetFileTimeString
GetFileVersionString
GetFileVersionStringEx
GetMachineId
GetMediaTypeString
GetPartnerId
GetProductConfigFilePath
GetProductId
GetProductSubVersion
GetProductSubVersionString
GetProductVersion
GetProductVersionString
GetUserId
IsConnectProjector
IsFileWritable
IsHasInternetConnection
IsHasInternetConnectionEx
IsHasUAC
IsProcessVirtualized
IsReportedActiveLive
IsSystemUACEnable
IsWindow2000
IsWindow64
IsWindow7
IsWindow7Latter
IsWindowServer
IsWindowVista
IsWindowVistaLatter
IsWindowXP
MinimizeMemory
PathCreateDirectory
PathCreateDirectoryFromFile
RecurseRemoveDirectory
ShutdownWindow
TimeStringToFileTime
UACAllowWindowMeesage
UACExecuteApp
UnZipFileToDirectory

Sections

.text
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 28KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 1KB - Virtual size: 20KB

.rsrc Size: 20KB - Virtual size: 44KB

.reloc Size: 2KB - Virtual size: 4KB

.aspack Size: 5KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

.text
Size: 16KB - Virtual size: 28KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 1KB - Virtual size: 20KB

.rsrc
Size: 20KB - Virtual size: 44KB

.reloc
Size: 2KB - Virtual size: 4KB

.aspack
Size: 5KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB