da073d593ac2955b5b05cdc03306485c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

da073d593ac2955b5b05cdc03306485c_JaffaCakes118
Size

931KB
MD5

da073d593ac2955b5b05cdc03306485c
SHA1

bfe3c4cc4a386d76c4a46ecfc87cd97bfa7cf510
SHA256

e45ccb822b7849fbd396f57d36b8d02963f4b0c7ad58f476171edfc96e5cd270
SHA512

9a083362ccdce8e0bc3797b9d61141d8d0a1dff8ed163ac5a18012be9dbb0aa3f35c847cc34f6090b272eaebbc5729f0aca3b57ccdf18743e83b25c56be0420b
SSDEEP

24576:vgEmNb11/FWbh1J89IPcV9W1dbdnKOlRy+eHLQnl1M8Dzes:v9a1bWbTJUIEV9cfplRyZH0Ss

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Files

da073d593ac2955b5b05cdc03306485c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Code Sign

3e:83:01:46:c7:c1:7f:0a:bf:e1:a6:34:ac:a4:fb:b2
Certificate

Issuer

CN=WoSign Class 3 Code Signing CA G2,O=WoSign CA Limited,C=CN

Not Before

28/07/2016, 08:53

Not After

28/07/2017, 08:53

Subject

CN=浙江盛和网络科技有限公司,O=浙江盛和网络科技有限公司,L=绍兴市,ST=浙江省,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2024, 01:00

Subject

CN=WoSign Time Stamping Signer,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

37:a6:0e:92:5f:23:f8:0c:fd:cd:97:65:92:98:c3:54
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/11/2014, 00:58

Not After

08/11/2029, 00:58

Subject

CN=WoSign Class 3 Code Signing CA G2,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e8:ff:8e:87:05:15:54:1e:4f:ee:33:6a:3d:0e:30:c2:15:d1:4c:03
Signer

Actual PE Digest

e8:ff:8e:87:05:15:54:1e:4f:ee:33:6a:3d:0e:30:c2:15:d1:4c:03

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 38KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 846KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

3e:83:01:46:c7:c1:7f:0a:bf:e1:a6:34:ac:a4:fb:b2Certificate

Extended Key Usages

Key Usages

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4cCertificate

Extended Key Usages

Key Usages

37:a6:0e:92:5f:23:f8:0c:fd:cd:97:65:92:98:c3:54Certificate

Extended Key Usages

Key Usages

e8:ff:8e:87:05:15:54:1e:4f:ee:33:6a:3d:0e:30:c2:15:d1:4c:03Signer

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 38KB - Virtual size: 76KB

.rdata Size: 16KB - Virtual size: 32KB

.data Size: 1KB - Virtual size: 12KB

.rsrc Size: 846KB - Virtual size: 1.1MB

.reloc Size: 3KB - Virtual size: 12KB

.aspack Size: 20KB - Virtual size: 20KB

.adata Size: - Virtual size: 4KB

3e:83:01:46:c7:c1:7f:0a:bf:e1:a6:34:ac:a4:fb:b2
Certificate

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

37:a6:0e:92:5f:23:f8:0c:fd:cd:97:65:92:98:c3:54
Certificate

e8:ff:8e:87:05:15:54:1e:4f:ee:33:6a:3d:0e:30:c2:15:d1:4c:03
Signer

.text
Size: 38KB - Virtual size: 76KB

.rdata
Size: 16KB - Virtual size: 32KB

.data
Size: 1KB - Virtual size: 12KB

.rsrc
Size: 846KB - Virtual size: 1.1MB

.reloc
Size: 3KB - Virtual size: 12KB

.aspack
Size: 20KB - Virtual size: 20KB

.adata
Size: - Virtual size: 4KB