faac96f687a976b67cd37ab238b8e529_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

faac96f687a976b67cd37ab238b8e529_JaffaCakes118
Size

326KB
MD5

faac96f687a976b67cd37ab238b8e529
SHA1

4d4d9384b97fc41da601da1771dab3dc6c8b6962
SHA256

d5c91edfdd9ffd1b82264bbd55f8c6316f05fa08e0bb98f05b18b4eefc93b55a
SHA512

11656fd901a28c452b60800ac50383ac28a5f59326a705321738ded940cd4bae6f50712117c339ab2030739938e3261f42d58139825d01cab862dbe298ea80ab
SSDEEP

6144:YD+/Y9qmlqrDd8ibvPwjoLPVQyNEfl1xMdCNlESJB3Jn+w99jfOfZiPVEge1zaOP:Yq/FKqtVL9gN1xMdCNKSzgw3ibo

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faac96f687a976b67cd37ab238b8e529_JaffaCakes118

Files

faac96f687a976b67cd37ab238b8e529_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 241KB - Virtual size: 672KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 39KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 19KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE