ac76174a99b4d7f5a0676c004483f3a7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac76174a99b4d7f5a0676c004483f3a7_JaffaCakes118
Size

56KB
MD5

ac76174a99b4d7f5a0676c004483f3a7
SHA1

eb92f081676f0be9c8a1c2bac8c4a9880e283e2a
SHA256

d3b8c4e048f806e8e06c7c93bd42f7df12a336cfa98cc2683997c4c4889af87d
SHA512

14a675f68f05b15d49edcef80ebee12cccead711a7218e08db45a051c393e1844ebdd8f6ae4726c1d97a9e1ad3aab8cc9676a9ff38e9de852a0ba57d95812698
SSDEEP

1536:26tViMY1Y4ZAGtyfp8ZIemPyWZiW/0BJUhf:3tVi1mp8ZIJiWw0f

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac76174a99b4d7f5a0676c004483f3a7_JaffaCakes118

Files

ac76174a99b4d7f5a0676c004483f3a7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 47KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aspack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE