aab845b9d94670240c4129d6f47995fd_JaffaCakes118 | Triage

Sharing

General

Target

aab845b9d94670240c4129d6f47995fd_JaffaCakes118
Size

1.0MB
MD5

aab845b9d94670240c4129d6f47995fd
SHA1

a1817574ab831ff94431347af10922f30c0fff82
SHA256

c35f24e6f78bee40ec8bd2d41d58c5d9b8c9babea38ff74e90a4862cf4099bf8
SHA512

d54ffe3aaee0e176f19e6fcd0481d020e5e8b3fc4917b346a7f65b3646bb2099afe2cff00166b00cfd129c76e1dc33d6a4c32ef96a17958877491029adaf7f55
SSDEEP

24576:VpjGuiW/93JZIiFhbtZS4mIZhShXvscmid+RII1HOQT5wq:V9BNrthbtZiIuhXXN8RZHOQT5wq

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aab845b9d94670240c4129d6f47995fd_JaffaCakes118

Files

aab845b9d94670240c4129d6f47995fd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 198KB - Virtual size: 436KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 831KB - Virtual size: 888KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 17KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE