b19ba080fe2c8b98637a8a1561c42eb8_JaffaCakes118 | Triage

Sharing

General

Target

b19ba080fe2c8b98637a8a1561c42eb8_JaffaCakes118
Size

205KB
MD5

b19ba080fe2c8b98637a8a1561c42eb8
SHA1

cb832ccee300744784175219ffcba17e15677ce7
SHA256

536a89224382b5c8bada7681ed5f5d6a2f1d3d07cfcc44d8fca66482fa58d2aa
SHA512

299d28732b7d5c220d50f6034a0c8370d0ad7c3c16056cb8fc956422715fa0fd0f3172b6b83f3dfa74350dd1b1f3d6fe99a1201bbf858f8157b9a9f96d37b6b4
SSDEEP

3072:aEGuCbXl5taya9VmSQZl3W1RsQpU7vWmsYHLiXvI/68Wk/8caWz2a4:vvCjD0yUCl397WMCvIC/ca2+

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b19ba080fe2c8b98637a8a1561c42eb8_JaffaCakes118

Files

b19ba080fe2c8b98637a8a1561c42eb8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 137KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE