a6af010f317b08c4cb93cfbe2134b71a_JaffaCakes118 | Triage

Sharing

General

Target

a6af010f317b08c4cb93cfbe2134b71a_JaffaCakes118
Size

40KB
MD5

a6af010f317b08c4cb93cfbe2134b71a
SHA1

3de2a3ff86e7dea0a0d021271ef76944da9807c8
SHA256

18ca21b6b773883fbf6d3c990e72c602d781331abc36f1d3df18a48a5b1e12b9
SHA512

47e705ab046284ad5a4c7c0d81f3e2914e8097d188cfac66f41445c7159440aa4808712eac913e8e33ca2c87e63dc6a945fdd765ed77d562e09993d97e71d15a
SSDEEP

768:n/Vvh+yyY56bM42rNeWpfdI1En+zrXUCeQkGTFCEuQuB74nb9fnmaBTksbIkwoEK:/VZ+J06bM42rN9Ru1En+zrECtlTFZueJ

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
static1/unpack001/ha_PasswordFox-v1.10/PasswordFox110.exe	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ha_PasswordFox-v1.10/PasswordFox110.exe

Files

a6af010f317b08c4cb93cfbe2134b71a_JaffaCakes118
.rar
ha_PasswordFox-v1.10/PasswordFox110.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 23KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 6KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ha_PasswordFox-v1.10/南方的雨博客 - 原创技术交流博客,集合各大论坛精华..url
.url
ha_PasswordFox-v1.10/听画书苑开源_影视_资源_互动_社区.url
.url
ha_PasswordFox-v1.10/必读.txt
ha_PasswordFox-v1.10/新云软件.url
.url