d41ac4976f5cdbb5daf622593f372e68_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d41ac4976f5cdbb5daf622593f372e68_JaffaCakes118
Size

359KB
MD5

d41ac4976f5cdbb5daf622593f372e68
SHA1

aa28c972e8b2957d2680004ee1e484757dc03a61
SHA256

57ee2c9ce3b72d546f26da20084cbf0fdb35c17cd16d01e30705f53dbe1aa1ff
SHA512

ef3d2bf21c475d41d5018c170f7e4125a09e88c2ac0c10408938c5cd3fa51faf6dbbaa44a5633661a98576f5b1fb0d53b940eee5a16c215ff41348c8cb539675
SSDEEP

6144:SyO6duIDXg+XAhnWXFBjZGE9SHJNAmaeyOCcS+CMnTwPyTYN6GaTAX7q2DF/d:btd1DXlN0HJYv+C8TwPyTjmhFV

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d41ac4976f5cdbb5daf622593f372e68_JaffaCakes118

Files

d41ac4976f5cdbb5daf622593f372e68_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 270KB - Virtual size: 616KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 35KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 26KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE