b1cdd534ec6cfbea6bd027341dc23de6_JaffaCakes118 | Triage

Sharing

General

Target

b1cdd534ec6cfbea6bd027341dc23de6_JaffaCakes118
Size

2.4MB
MD5

b1cdd534ec6cfbea6bd027341dc23de6
SHA1

2fa6fec388a051dabcf1da50ad2bbb30f3d9fd53
SHA256

765555862f779f07f5d50b07e96bede9bd5ecb07b8ed4c9a1b94128302475269
SHA512

155a24c70aeb8e8afeeb1b2402ab3569668598f33f8f06b3b8403a101b7d997dc2183c09d28ec28185d0a2968399482eaaa6a3471b6a5941d7d19f5cf54dec5d
SSDEEP

49152:GuVZTizTSpXwhTLhhGRAvrofywiKrf828vo5OM6O5JqMuh/:PVZTCCw93GRAvkgy88+Axuh/

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
static1/unpack001/公司取名软件.exe	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/公司取名软件.exe

Files

b1cdd534ec6cfbea6bd027341dc23de6_JaffaCakes118
.rar
公司取名软件.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 401KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1.9MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 43KB - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
新云软件.url
.url