fc7df1fa9141232d3a94ae915ab4ef9d_JaffaCakes118 | Triage

Sharing

General

Target

fc7df1fa9141232d3a94ae915ab4ef9d_JaffaCakes118
Size

183KB
MD5

fc7df1fa9141232d3a94ae915ab4ef9d
SHA1

4b8f96160e828152a781f239ed009046f4cc0d60
SHA256

56d5aeee6498f234257aaba3471d31076a7c38af79287769873036d40e056859
SHA512

de7966e8a640e5847308cc34203ffd96ce4cdfe999db0157166bc46d65b8f910f35bb21e4842bc245c25c0efd16ea1be9f0487140eda822ca41ceae5a1b7b14c
SSDEEP

3072:LhdTrje3MqypFSXji31h1/A2TwtrkZIfktWAy+zrt9+WOpC0U/3O7eQDsz9vauz4:XTrK3WpwXjipDwtrkZvSOrPmC0U/3rQi

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc7df1fa9141232d3a94ae915ab4ef9d_JaffaCakes118

Files

fc7df1fa9141232d3a94ae915ab4ef9d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 7KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 36KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 121KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

njd2
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE