00f42d2da6923e44140232360242ab38_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

00f42d2da6923e44140232360242ab38_JaffaCakes118
Size

1.6MB
MD5

00f42d2da6923e44140232360242ab38
SHA1

65793bdf57f4abd66d3d4bdfc952b47da469ebae
SHA256

68c96f2c9fc618fe9dc71aaa1e970a8b00fd59ae8d3758109d1d63355f807f10
SHA512

af1d998d51253f0ddd61a6186790b836f86bcae8cff5ed3a18ed1036db3c7a36eca9dad2275973f097aa93dde152d2aa9a0d614006fd183a25f3343ea20d15d0
SSDEEP

49152:sTa6W7XC6m0RDrvYITpPmQ1uEWzmv7kz4VDEkn2QNX7k8Co:sTa6W7X9m0FTpuQ1uEgmv7ksVDLPk8

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00f42d2da6923e44140232360242ab38_JaffaCakes118

Files

00f42d2da6923e44140232360242ab38_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 748KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 21KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1.2MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CVGR
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 19B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 121KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 394KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CVGR
Size: 204KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CVGR
Size: 116KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CVGR
Size: - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CVGR
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

CODE Size: 748KB - Virtual size: 2.1MB

DATA Size: 21KB - Virtual size: 48KB

BSS Size: - Virtual size: 1.2MB

.idata Size: 11KB - Virtual size: 16KB

.CVGR Size: - Virtual size: 4KB

.rdata Size: 19B - Virtual size: 4KB

.reloc Size: 121KB - Virtual size: 144KB

.rsrc Size: 394KB - Virtual size: 1.0MB

.CVGR Size: 204KB - Virtual size: 220KB

.CVGR Size: 116KB - Virtual size: 124KB

.CVGR Size: - Virtual size: 140KB

.CVGR Size: 4KB - Virtual size: 8KB

CODE
Size: 748KB - Virtual size: 2.1MB

DATA
Size: 21KB - Virtual size: 48KB

BSS
Size: - Virtual size: 1.2MB

.idata
Size: 11KB - Virtual size: 16KB

.CVGR
Size: - Virtual size: 4KB

.rdata
Size: 19B - Virtual size: 4KB

.reloc
Size: 121KB - Virtual size: 144KB

.rsrc
Size: 394KB - Virtual size: 1.0MB

.CVGR
Size: 204KB - Virtual size: 220KB

.CVGR
Size: 116KB - Virtual size: 124KB

.CVGR
Size: - Virtual size: 140KB

.CVGR
Size: 4KB - Virtual size: 8KB