0b822f7ea7413e66d7e6179c91058baf_JaffaCakes118 | Triage

Sharing

General

Target

0b822f7ea7413e66d7e6179c91058baf_JaffaCakes118
Size

670KB
MD5

0b822f7ea7413e66d7e6179c91058baf
SHA1

0748ebb1852ff8e93cde010af4778f8b8e27dd29
SHA256

6c9714145acd54f843946ed5bfbcfcff5ec965ee64d4256a0094fae21d546c23
SHA512

ed2c574d1ee74ea1c562602e289508c5ade79845c3b45490fe9a973ab36a8f6659eae789e700db80f2f1e0e90ae91cb83a8202845333353ada7da553a0030dbd
SSDEEP

12288:2dtmLSOddgLBNRnCRhZNVkG1j/TV0Je8ogliE2TqYWjDEnpAY:+mOOHEVChkMvVdg4EVvDwpp

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b822f7ea7413e66d7e6179c91058baf_JaffaCakes118

Files

0b822f7ea7413e66d7e6179c91058baf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 361KB - Virtual size: 852KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 37KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 520KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 768KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 187KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE