dbbc91585eb0308be115937afab39ccb_JaffaCakes118 | Triage

Sharing

General

Target

dbbc91585eb0308be115937afab39ccb_JaffaCakes118
Size

1014KB
MD5

dbbc91585eb0308be115937afab39ccb
SHA1

0f9aa15b53affdfb8e808340af7c1b7624b63c50
SHA256

90151602dd84642463cf17444021d85d77ffb45c121195ba851aceb9d7e9a243
SHA512

e0cd43d9c91e033c8009f401950322265e285805481ef183b2d251acc7a8e4dba9c696c5883184ea527a20b6539423f6cb23ccf99e1ac3678735e3d53200a620
SSDEEP

24576:UKugR12IbXRuYCAhZp5RNuXgUjRoTmW0KUppD2LJoUg:UBaNjhFhjNuX4/D

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbbc91585eb0308be115937afab39ccb_JaffaCakes118

Files

dbbc91585eb0308be115937afab39ccb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 246KB - Virtual size: 556KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 630KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE