93e0b8d64544cdf44657049b27ffc267_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

93e0b8d64544cdf44657049b27ffc267_JaffaCakes118
Size

48KB
MD5

93e0b8d64544cdf44657049b27ffc267
SHA1

db05419dd4d3fe692e0fdb963f723f1daf0d941d
SHA256

3d38606b9d8ee3cd9939834811a8ee9c0c96d9510b21723c010ddf77f2d3a489
SHA512

ce5daf59e2cdb715aceb2482b18886454956d979add94e1a9a9b02d641cdbb061dd4de3ce84417d7df508ebc3560cc6a7283b80b8dd5a35238669113a6e6aa82
SSDEEP

768:zDj5N8FAaSVHzS1xEJZAq3BAJW9tra1XFQXHH8dQobv31HcX1Jle9LlqxxGdeVH:Tv8pwHW1eZAqRAJW9triXmXwQSFHclJn

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93e0b8d64544cdf44657049b27ffc267_JaffaCakes118

Files

93e0b8d64544cdf44657049b27ffc267_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 34KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.co1
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE