15dcb5764f79335da8f674e2cbef455c_JaffaCakes118 | Triage

Sharing

General

Target

15dcb5764f79335da8f674e2cbef455c_JaffaCakes118
Size

86KB
MD5

15dcb5764f79335da8f674e2cbef455c
SHA1

504e3f8ac34aa70e74a29a4a513682f1407b37c1
SHA256

77f9641f7eb541af139649c8a0677916c45f83f91f64c3eb5440e8cef9801cc4
SHA512

2923c5e12ad1e8217d8cd736e742aec446680b6c1d018829e0f6800ae61fc034655c411cabccf2a53af7e1e5ab88594b0ba58727971a204971d961971e5a06a0
SSDEEP

1536:nY+qOqtuif7tXjiCTGVkhU1hjzK07q3+VAhLDsnSZaqVs3xvk:YIc79itsKjzjk5YSAqQ

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15dcb5764f79335da8f674e2cbef455c_JaffaCakes118

Files

15dcb5764f79335da8f674e2cbef455c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE