179438e0e923d23aa38247f694d542a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

179438e0e923d23aa38247f694d542a0_JaffaCakes118
Size

932KB
MD5

179438e0e923d23aa38247f694d542a0
SHA1

5b2b8b6bac6c6bf6dc1cf15cec188e30fe118302
SHA256

b911eb0bce0bceacd4d4d69182da4fcd975816b946757e82d1277eadf7ec916b
SHA512

5c5485ace37539f78c8f1bb3b7a2f88905931bb84ee8acced35cf2f2b61a06b0a9c95bf31d6ac7d11ed4dad575bfd1f50fffeaeb1dcf76117b22bb30c0d7f29d
SSDEEP

24576:ZEcNDlChhgBEnrhMsaWwehaqZ3rbM4nD/qr9kkdygHrpfj:tlAnrhMsaWLBrbM4nDAryWB

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
179438e0e923d23aa38247f694d542a0_JaffaCakes118

Files

179438e0e923d23aa38247f694d542a0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 21KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 887KB - Virtual size: 916KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.upx
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE