8d0fd5211995199bf83d093173281314_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d0fd5211995199bf83d093173281314_JaffaCakes118
Size

64KB
MD5

8d0fd5211995199bf83d093173281314
SHA1

f1f1b40220b85001d04dc3d2f33f03b367fc8f46
SHA256

488359f900ec9c24c0b4580dcc8b12ffd13dfe179505f011805b92f4c087f68b
SHA512

f3a53053b976862ca2de0674c40ec21510845be9794ce814753cca4f13ea6007c8c493ab76c6d114a94135e20e8a276bb1991fa9d27656fa64480ca176a8ffb8
SSDEEP

1536:qy368hsIcKhwNEwnM2ihfhYDW/k8qEGF0nJhuh:qE9UNEJt9hYy/k8qEGo+

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d0fd5211995199bf83d093173281314_JaffaCakes118

Files

8d0fd5211995199bf83d093173281314_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 55KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aspack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE