047b8b0c9a29d023fa4dc77ecbfcc1f1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

047b8b0c9a29d023fa4dc77ecbfcc1f1_JaffaCakes118
Size

259KB
MD5

047b8b0c9a29d023fa4dc77ecbfcc1f1
SHA1

e1cd062b560b28f55866730eb72306c16bd8a3c6
SHA256

b83f032f6e6dc0878293223fccb2e073dc3b2d8f672bd27aacc7783c32bb549b
SHA512

3376c756063f10b0de9fde32e8facb7e7385b5a5a0b1b1ac84cb60c8c57eaf0eb349f2a5ca2e019537c29c625e25708fe65153afdd4803fe07d214af1c0db73e
SSDEEP

6144:dTjWLiWDpcYJhZUiD9e3qBk5gw/DAUceDuH2kCuHRAD:Na7ptJhZ9w3qPeDvceDuWduH

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
047b8b0c9a29d023fa4dc77ecbfcc1f1_JaffaCakes118

Files

047b8b0c9a29d023fa4dc77ecbfcc1f1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 108KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 580KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE