d33031a194d53ef5b3f5e460e358aef1_JaffaCakes118 | Triage

Sharing

General

Target

d33031a194d53ef5b3f5e460e358aef1_JaffaCakes118
Size

363KB
MD5

d33031a194d53ef5b3f5e460e358aef1
SHA1

2a974374a7fcd7857721cbf1262ec5a89daa301c
SHA256

69573bd05c301d26f8d2759d853b0b54243bfca247aeafb248e45162cce559ff
SHA512

63b271f4009bfc907fae4d499e9774e2824e12060f52dec1d6acd1dd10189921ab6e6fbd1577544fe4800233ff75f375af72e79465213ef89863d191e6c40094
SSDEEP

6144:JR4cDESx+3BG3xjNJwxPW9sJ1JCGVyHqMhc3X449RmB1ZyDrBLI8owO/L:YcDESx+k3JwvJ1JVyKMhc3dRs1UDK8oz

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d33031a194d53ef5b3f5e460e358aef1_JaffaCakes118

Files

d33031a194d53ef5b3f5e460e358aef1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 275KB - Virtual size: 860KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 41KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 18KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE