fd1a4fa8229b0a8afe1db9aa696d411f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd1a4fa8229b0a8afe1db9aa696d411f_JaffaCakes118
Size

90KB
MD5

fd1a4fa8229b0a8afe1db9aa696d411f
SHA1

6df07e88285bea60d187e66c67b6ffd3cae02d1b
SHA256

c6064f81b6112b0fff02c27e09c307320b04dc3744d93b343fb690e323f8a33f
SHA512

d88074df5b16dc034dab0d148a3c94e22117ad3e711007e65e39634f6773b5689c300aeb75a08eddfcd75ebedcc94b594ede3047c4cfbc89f44d58b18a0152b1
SSDEEP

1536:jDvL6JtMN2CjhKAx3pjm1xJM0gm2GEAKeIyX3nCXJpCgok0vRfjwjW0TkV9:ntN9hzpjmL60X2dA3HC6gLNg

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd1a4fa8229b0a8afe1db9aa696d411f_JaffaCakes118

Files

fd1a4fa8229b0a8afe1db9aa696d411f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 62KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE