b9c7471899f6e9e522d47a27e1dcfe23_JaffaCakes118 | Triage

Sharing

General

Target

b9c7471899f6e9e522d47a27e1dcfe23_JaffaCakes118
Size

160KB
MD5

b9c7471899f6e9e522d47a27e1dcfe23
SHA1

771f0f478dd73bf6f7284ab1244a823f403b0b5e
SHA256

d110900ab987ccce008167efff38dc868227a6c50bc4472f91b0ee5b47ba0672
SHA512

3c48cf996146f9a55e6b57e4e73d8c72cb812e1f2b50741ec97709dafe71b8fd2696777aed5c6abf28ac4a180b7644249397adcd9b629ca225b00f8a1af547fd
SSDEEP

3072:aBrSxhW7LlP4DOkB41oqJuKSucXsyURCqKhYVgbT5URBUZjHnL6JIhOe:ahSo7L71oySFs/UrV5UXKjQUz

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9c7471899f6e9e522d47a27e1dcfe23_JaffaCakes118

Files

b9c7471899f6e9e522d47a27e1dcfe23_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 7KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 95KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

igofkl
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE