ea463bf658ee88bb931285407f08c40e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea463bf658ee88bb931285407f08c40e_JaffaCakes118
Size

20KB
MD5

ea463bf658ee88bb931285407f08c40e
SHA1

f6f38ed01a5d1b5c42112fe4bfdc47ca104362af
SHA256

6f0929acf6b2bb6e0fdba7cfc341db60744517fab0a190ac6467dab1d80ff319
SHA512

573ae4e0728d020cd62c3e60a386e899fea87793149d20d25788d1b514aa8ec8c7730776c0c88d23d6a0db9bbd6bc43473803a2f5014685a9ce3e5a29c96b00e
SSDEEP

384:D1+4LR9ZMaVVtPQ+SNT1i1sptBxs0oJ7VlxGWRG5AxNr6+I9PfPPDi:hSaVV1STyspWJ7fYWRGqxgLfbi

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea463bf658ee88bb931285407f08c40e_JaffaCakes118

Files

ea463bf658ee88bb931285407f08c40e_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 9KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.p52
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE