8d74ea4e5594f235c53d78aa5ca489f0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8d74ea4e5594f235c53d78aa5ca489f0_JaffaCakes118
Size

754KB
MD5

8d74ea4e5594f235c53d78aa5ca489f0
SHA1

9a36a8f1cc8cde8d43f5a29fd1b8109b9f5bd65b
SHA256

2a1ee6929141143ef37c069b522d3c5c1c842c2dc9e906ed9bef47f4114b4b9d
SHA512

2f2c9d3b850bf0f1d16afc2a66137dbb1a383e2da69948edb91e5649815fac3d1190d8dcd4e83f5c35a7b2c217a59c910e6d1d96a5e430069c1661ff0adbdfc7
SSDEEP

12288:Enkslh+iqsDYoPwqRRRWiNvHG+tRyo8H1gnTOmCHFjwg31Tvz0Gs4O2oMc:EkBs0fq3IcvG+tVCSgFTvz0GJOAc

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d74ea4e5594f235c53d78aa5ca489f0_JaffaCakes118

Files

8d74ea4e5594f235c53d78aa5ca489f0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 493KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

JCLDEBUG
Size: 139KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

.text Size: 493KB - Virtual size: 1.4MB

.itext Size: 4KB - Virtual size: 8KB

.data Size: 16KB - Virtual size: 28KB

.bss Size: - Virtual size: 44KB

.idata Size: 4KB - Virtual size: 16KB

.tls Size: - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.reloc Size: - Virtual size: 84KB

.rsrc Size: 60KB - Virtual size: 332KB

JCLDEBUG Size: 139KB - Virtual size: 368KB

.aspack Size: 35KB - Virtual size: 36KB

.adata Size: - Virtual size: 4KB

.text
Size: 493KB - Virtual size: 1.4MB

.itext
Size: 4KB - Virtual size: 8KB

.data
Size: 16KB - Virtual size: 28KB

.bss
Size: - Virtual size: 44KB

.idata
Size: 4KB - Virtual size: 16KB

.tls
Size: - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.reloc
Size: - Virtual size: 84KB

.rsrc
Size: 60KB - Virtual size: 332KB

JCLDEBUG
Size: 139KB - Virtual size: 368KB

.aspack
Size: 35KB - Virtual size: 36KB

.adata
Size: - Virtual size: 4KB