9413f4c1dcc2bc2e15617de5291db131_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

9413f4c1dcc2bc2e15617de5291db131_JaffaCakes118
Size

6.1MB
MD5

9413f4c1dcc2bc2e15617de5291db131
SHA1

122e2d7b69a3af2b78d88508dced161af8652f20
SHA256

3a13fc1f02f743b8fa09d4180abded938dba59834a50875fae4587f057e0bb06
SHA512

e731316f7e060567987bd9904fbc5a592c75f114dda91282dea242173e42297d84069344d754fb6259b6574abdfa060d7719b984d9bfa054381efa047f277112
SSDEEP

196608:sxZrlRjHCJ/ri22Pl9sNFhLF8Ku+zgxJGjFvRL:sHrlROxrT2Pi1u+SJ0FZL

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9413f4c1dcc2bc2e15617de5291db131_JaffaCakes118

Files

9413f4c1dcc2bc2e15617de5291db131_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 4.9MB - Virtual size: 16.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 19KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 120KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 854KB - Virtual size: 6.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 176KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

.text Size: 4.9MB - Virtual size: 16.2MB

.itext Size: 19KB - Virtual size: 52KB

.data Size: 120KB - Virtual size: 272KB

.bss Size: - Virtual size: 1.1MB

.idata Size: 6KB - Virtual size: 24KB

.didata Size: 1024B - Virtual size: 4KB

.tls Size: - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.reloc Size: - Virtual size: 1.4MB

.rsrc Size: 854KB - Virtual size: 6.0MB

.aspack Size: 176KB - Virtual size: 180KB

.adata Size: - Virtual size: 4KB

.text
Size: 4.9MB - Virtual size: 16.2MB

.itext
Size: 19KB - Virtual size: 52KB

.data
Size: 120KB - Virtual size: 272KB

.bss
Size: - Virtual size: 1.1MB

.idata
Size: 6KB - Virtual size: 24KB

.didata
Size: 1024B - Virtual size: 4KB

.tls
Size: - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.reloc
Size: - Virtual size: 1.4MB

.rsrc
Size: 854KB - Virtual size: 6.0MB

.aspack
Size: 176KB - Virtual size: 180KB

.adata
Size: - Virtual size: 4KB