10ffcb47195fa33344220b2a70752ccc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

10ffcb47195fa33344220b2a70752ccc_JaffaCakes118
Size

87KB
MD5

10ffcb47195fa33344220b2a70752ccc
SHA1

f56f8a97a7c512eea3497df96cea22619f79152b
SHA256

a63cc3741a7a61d058d288f1819502c659281a2c70ab17f5d8df8529c8e939d5
SHA512

3b6d86f7851bc9f7f2bfa85435d12c0fa7e795d0ea947be0c75b57f282a4b3a114d27c5466a9b15690a7dc740bdfb4924ef1a28e74f426b3ce8312f21b4f37ff
SSDEEP

1536:vXAbEIJme8JKXrwQ5bps9sLxppXj5FkKS/zWAO2DHKSTow/+TbhtucwEUcC:omrJSrdbpsW9X56t/zWqHKSTo++9bC

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Files

10ffcb47195fa33344220b2a70752ccc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Code Sign

56:34:8f:21:9c:75:dc:49:b6:8c:92:ef:b3:61:db:fe
Certificate

Issuer

CN=范贤义,OU=Certification,O=无,1.2.840.113549.1.9.1=#0c103131373536333738314071712e636f6d

Not Before

03/09/2010, 06:46

Not After

31/12/2039, 23:59

Subject

CN=范贤义,OU=Certification,O=无,1.2.840.113549.1.9.1=#0c103131373536333738314071712e636f6d

29:17:38:cd:2a:04:e7:46:a1:6a:5b:fc:db:5b:34:03:cd:94:23:0d
Signer

Actual PE Digest

29:17:38:cd:2a:04:e7:46:a1:6a:5b:fc:db:5b:34:03:cd:94:23:0d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 67KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

56:34:8f:21:9c:75:dc:49:b6:8c:92:ef:b3:61:db:feCertificate

29:17:38:cd:2a:04:e7:46:a1:6a:5b:fc:db:5b:34:03:cd:94:23:0dSigner

Headers

File Characteristics

Sections

CODE Size: 67KB - Virtual size: 156KB

DATA Size: 2KB - Virtual size: 4KB

BSS Size: - Virtual size: 4KB

.idata Size: 2KB - Virtual size: 8KB

.tls Size: - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.reloc Size: - Virtual size: 16KB

.rsrc Size: 4KB - Virtual size: 16KB

.aspack Size: 9KB - Virtual size: 12KB

.adata Size: - Virtual size: 4KB

56:34:8f:21:9c:75:dc:49:b6:8c:92:ef:b3:61:db:fe
Certificate

29:17:38:cd:2a:04:e7:46:a1:6a:5b:fc:db:5b:34:03:cd:94:23:0d
Signer

CODE
Size: 67KB - Virtual size: 156KB

DATA
Size: 2KB - Virtual size: 4KB

BSS
Size: - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 8KB

.tls
Size: - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.reloc
Size: - Virtual size: 16KB

.rsrc
Size: 4KB - Virtual size: 16KB

.aspack
Size: 9KB - Virtual size: 12KB

.adata
Size: - Virtual size: 4KB