f729aea08589a9657297408ae831b427_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f729aea08589a9657297408ae831b427_JaffaCakes118
Size

192KB
MD5

f729aea08589a9657297408ae831b427
SHA1

7a0c5abfe67388ecae771d22d1a128c4a0da7a09
SHA256

ebeafbe4add7654aca5068051e7074da0ad9b9d963ee162824fc1d13fa41aac9
SHA512

5364599d4656cb2e958bab61d8f9769670e7d98e0c1e8f3f6416a947827fcdb46df8aff57938e5f233ad42607bc21378bf635f58bffa2a5dd340ecf3850e477e
SSDEEP

3072:8aVRW7I+Y5ur0BWGgY+g+pUG9cGz8pWh21tO1jHOKmxDl29c7ZwBx+myTPJp+WY5:PVRCogtRJUG9cGwSiA1jHx/uixaNo

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
static1/unpack001/Navicat.for.MySQL.v8.0.22.Cracked-iNViSiBLE/iNViSiBLE/navicat.mysql.8.0.22-patch.exe	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Navicat.for.MySQL.v8.0.22.Cracked-iNViSiBLE/iNViSiBLE/navicat.mysql.8.0.22-patch.exe

Files

f729aea08589a9657297408ae831b427_JaffaCakes118
.zip
Navicat.for.MySQL.v8.0.22.Cracked-iNViSiBLE/file_id.diz
Navicat.for.MySQL.v8.0.22.Cracked-iNViSiBLE/iNViSiBLE/navicat.mysql.8.0.22-patch.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 173KB - Virtual size: 1016KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.iNV
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Navicat.for.MySQL.v8.0.22.Cracked-iNViSiBLE/inv.nfo
keygen.nfo