af8b62b3f7006a296d775b42dedc2c4e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af8b62b3f7006a296d775b42dedc2c4e_JaffaCakes118
Size

90KB
MD5

af8b62b3f7006a296d775b42dedc2c4e
SHA1

927235bd342099d7ced55c623465fe78ae66d605
SHA256

5829b3d027a70d9e84351dc7a70bd40a41e51921d3a93267e996cd7b234b0bca
SHA512

e735c82977079fdc4945b415155aa3d29de04b834a96cce716bc4d10218a81961d66c93138715e2e72fdf7750a001077b23b0605609af907f78561f7c8bc6bb4
SSDEEP

1536:ZK4vJZBLlVWx/RWXInJhQyGUBUmfr0fx1G8Jc6uYxllCqZ/Cp3PChhfLgoXS7W6t:ZK4RfD2WXIzQy1nfr0pYP6TrCqMp34Sx

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af8b62b3f7006a296d775b42dedc2c4e_JaffaCakes118

Files

af8b62b3f7006a296d775b42dedc2c4e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 17KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 58KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE