b78f750eb85dcbf8f7f2dc57b4b44006_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b78f750eb85dcbf8f7f2dc57b4b44006_JaffaCakes118
Size

39KB
MD5

b78f750eb85dcbf8f7f2dc57b4b44006
SHA1

723542e1d1701f66a16bb007517d3860e181b422
SHA256

98d21946f680ee3c0de088526ed3c318b3b2bba8b666167ea271a08d8067a5ee
SHA512

d091c03b23303da5f84eac35d7a5bb307391f1e6d49c072ed773d0e57559ed17e00caa5223dca9328ad0e2f9558b3feb94285bd925e07799d9b6b2c2a2d2aa5f
SSDEEP

768:DwiSpdroP1j2VfgUQ5R2UvJuJBAeMHCS+0xe4i8x33D1tdr2Jb:DoYS94uwnbeTE35tdr+b

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
static1/unpack001/OperaCacheView.exe	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/OperaCacheView.exe

Files

b78f750eb85dcbf8f7f2dc57b4b44006_JaffaCakes118
.rar
OperaCacheView.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 25KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 5KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
南方的雨博客 - 原创技术交流博客,集合各大论坛精华..url
.url
新云软件.url
.url