b911d23c5208185ade98b06bdbb2bca7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b911d23c5208185ade98b06bdbb2bca7_JaffaCakes118
Size

55KB
MD5

b911d23c5208185ade98b06bdbb2bca7
SHA1

da7ad1ada85846bcd28fb7187128f6a8afc7ab67
SHA256

b80644282de4f4cf774311fcb3c30772527a50011490e9bc7dce14a2d8c8d5b9
SHA512

c99998ccc9799228764750ed4b1ebd20a0f81aa4c3d49daf2af5a36fc8b8ea19732528cee2e75a9078ce1460aff3d9c21ef6f57793085124c4055cf5c40c1b14
SSDEEP

1536:+2/DFbZxMXb6vBnONrlQh9Plu7ZzZpnxpE:97FbzMkhOXy9INzZpxpE

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
static1/unpack001/SinGenCHS.EXE	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SinGenCHS.EXE

Files

b911d23c5208185ade98b06bdbb2bca7_JaffaCakes118
.rar
ReadMe.CHS
ReadMe.ENG
ReadMe.RUS
SinGenCHS.EXE
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

LordFox
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Snap1.JPG
.jpg
下载说明.htm
.html .js polyglot