02d570af0bad36bb24802a8b563b34c0_JaffaCakes118 | Triage

Sharing

General

Target

02d570af0bad36bb24802a8b563b34c0_JaffaCakes118
Size

281KB
MD5

02d570af0bad36bb24802a8b563b34c0
SHA1

fb91ebe8700368ece8f742a5575466514056f87f
SHA256

eeb7fce9b9748ea6de16be9b95d3d767cdb79b97ad43de441037054856c461ef
SHA512

52c0ebf6a10cb025d67b1c56c579eb519d5e593e1c0a19cd79716903861d30449bca05ef708816b06ac18b4a7a4eaf145327037e5c1e00d432b1083e4241193f
SSDEEP

6144:BVW8n/0K+fWrjGSqp8w2PYW1EvbNybzSC2JBBOjvK9bH0TUg:Bv/09fl52wdYEMbzWB6vKZ0

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02d570af0bad36bb24802a8b563b34c0_JaffaCakes118

Files

02d570af0bad36bb24802a8b563b34c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 29KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 228KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.GAISF
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE