debbe9b25fc74c6d5350145235e6bed3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

debbe9b25fc74c6d5350145235e6bed3_JaffaCakes118
Size

108KB
MD5

debbe9b25fc74c6d5350145235e6bed3
SHA1

e01923bbc5ab36f24a6ddf053e244e55d1b24740
SHA256

bf980f2a71949fbfdf7cee980755a846fc5f9b4071ab1dddfdb02b0ca4fd626a
SHA512

a72f66b6112e1223fd23cc15c2dad367eefe42207f4707e23884d6356c658876c92ed2381e54511f7e0d1dc6898eac57c055a8522ee9b88c547fe770a805d907
SSDEEP

3072:hWjU3/gDY9wfl+EGd0opMYN2ydGieVJ6XrtElI:hWQvgqwoEGdMYN2VdfVI

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
debbe9b25fc74c6d5350145235e6bed3_JaffaCakes118

Files

debbe9b25fc74c6d5350145235e6bed3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 75KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aspack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE