0854d51b877f7a5834def47185b6d760_JaffaCakes118

General

Target

0854d51b877f7a5834def47185b6d760_JaffaCakes118
Size

2.7MB
MD5

0854d51b877f7a5834def47185b6d760
SHA1

ab1eea38b413f8fdac71e7d20e80974bdd2c1470
SHA256

c9ac5c40bfd71599eacb2f36991a33db014fc2da9b359ee738d48fbd6f1f5bbc
SHA512

b00de59553e3e3cf86a6a26b2fcb93ef39743ab6533be26dd775ff9c4c6a43dbcc9d662e40c34da7114cdcf80f22b9339920fb9df4c77673c2db7ecd587ef475
SSDEEP

49152:58gG/y1+bpzSWYhCaQ/rjm7fLNIMloHNbFIuTiEjz1ES4TUMBMxuJYV8GC:58LM+ITC5rjm7D5cmuOEb4TfMEJYV

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0854d51b877f7a5834def47185b6d760_JaffaCakes118

Files

0854d51b877f7a5834def47185b6d760_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 325KB - Virtual size: 916KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CODE
Size: 107KB - Virtual size: 332KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2.0MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 47KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 512B - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 167KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

.text Size: 325KB - Virtual size: 916KB

CODE Size: 107KB - Virtual size: 332KB

.rdata Size: 2.0MB - Virtual size: 3.3MB

.data Size: 23KB - Virtual size: 248KB

DATA Size: 47KB - Virtual size: 68KB

BSS Size: 512B - Virtual size: 28KB

.rsrc Size: 7KB - Virtual size: 24KB

.vmp0 Size: 167KB - Virtual size: 176KB

.aspack Size: 7KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

.text
Size: 325KB - Virtual size: 916KB

CODE
Size: 107KB - Virtual size: 332KB

.rdata
Size: 2.0MB - Virtual size: 3.3MB

.data
Size: 23KB - Virtual size: 248KB

DATA
Size: 47KB - Virtual size: 68KB

BSS
Size: 512B - Virtual size: 28KB

.rsrc
Size: 7KB - Virtual size: 24KB

.vmp0
Size: 167KB - Virtual size: 176KB

.aspack
Size: 7KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB