116f5642722df92590b7e94220a93af3_JaffaCakes118

General

Target
116f5642722df92590b7e94220a93af3_JaffaCakes118
Size 24KB
Sample241004-csbxyayhrp
SHA256 b1de3f96e3f05c738a40f31a73138c47742617007b35e36f0ac4d090156e333c
MD5 116f5642722df92590b7e94220a93af3
SHA1 35f31638555cc92a956e95445ab753813331a54b
SHA512 1e765ea37ae46b7ed0523a6bf816cd9beacf803730c7d736b40b502e941b568f6aa7d9b5fe72ceb620707bb4610b2065b23efad0ec3cdb2f81bd67e96c83c472
SSDEEP 384:IXzLjqDhewCHRfurAE1TjAyQcBB9ef4zQh5wlHugn1pW6GyAxHr6+Y9PffPzTRAw:IX2VQ2rvoPEBS4zQsV71pW6GVxmbPrF
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

aspackv2

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
116f5642722df92590b7e94220a93af3_JaffaCakes118

SHA256 b1de3f96e3f05c738a40f31a73138c47742617007b35e36f0ac4d090156e333c
MD5 116f5642722df92590b7e94220a93af3
SHA1 35f31638555cc92a956e95445ab753813331a54b
SHA512 1e765ea37ae46b7ed0523a6bf816cd9beacf803730c7d736b40b502e941b568f6aa7d9b5fe72ceb620707bb4610b2065b23efad0ec3cdb2f81bd67e96c83c472
SSDEEP 384:IXzLjqDhewCHRfurAE1TjAyQcBB9ef4zQh5wlHugn1pW6GyAxHr6+Y9PffPzTRAw:IX2VQ2rvoPEBS4zQsV71pW6GVxmbPrF
MD5 SHA1 SHA512 SSDEEP

ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

32769

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths