3086f887991fcc8acf9914c0252d4447_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3086f887991fcc8acf9914c0252d4447_JaffaCakes118
Size

549KB
MD5

3086f887991fcc8acf9914c0252d4447
SHA1

b09052a19e294b07758709b41f2049ae499a1e75
SHA256

6ac818cac42412d5f0b50d24a0d8225915603726f8093b3d2a9f8e31b8a497e0
SHA512

c5ca89041f7209356d7f7fefd42b218f45e341044fa3ceb87c75c4663664fe0f8e2dae2b3b70575ee3e17658478d5f474a2fad18329037487c22578d4e504cd5
SSDEEP

12288:kx6svPfS1FufYuZE2gt1rpNg+qnk2iuwm/deFjyWdaGAL13bn:8VvUFuYoQM1280FjPIG03bn

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3086f887991fcc8acf9914c0252d4447_JaffaCakes118

Files

3086f887991fcc8acf9914c0252d4447_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 416KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 19KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

0
Size: 1024B - Virtual size: 131.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mackt
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.topo0
Size: 3KB - Virtual size: 880KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.topo1
Size: 3KB - Virtual size: 880KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.topo2
Size: 3KB - Virtual size: 880KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.topo3
Size: 4KB - Virtual size: 880KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

Size: 416KB - Virtual size: 1.3MB

Size: 12KB - Virtual size: 24KB

Size: 19KB - Virtual size: 60KB

0 Size: 1024B - Virtual size: 131.4MB

.rsrc Size: 512B - Virtual size: 12KB

.data Size: 69KB - Virtual size: 72KB

.adata Size: - Virtual size: 4KB

.mackt Size: 2KB - Virtual size: 8KB

.topo0 Size: 3KB - Virtual size: 880KB

.topo1 Size: 3KB - Virtual size: 880KB

.topo2 Size: 3KB - Virtual size: 880KB

.topo3 Size: 4KB - Virtual size: 880KB

.aspack Size: 12KB - Virtual size: 16KB

.adata Size: - Virtual size: 4KB

0
Size: 1024B - Virtual size: 131.4MB

.rsrc
Size: 512B - Virtual size: 12KB

.data
Size: 69KB - Virtual size: 72KB

.adata
Size: - Virtual size: 4KB

.mackt
Size: 2KB - Virtual size: 8KB

.topo0
Size: 3KB - Virtual size: 880KB

.topo1
Size: 3KB - Virtual size: 880KB

.topo2
Size: 3KB - Virtual size: 880KB

.topo3
Size: 4KB - Virtual size: 880KB

.aspack
Size: 12KB - Virtual size: 16KB

.adata
Size: - Virtual size: 4KB