3f9af1e01e6fc8370fe2b98e85de0b4c_JaffaCakes118 | Triage

Sharing

General

Target

3f9af1e01e6fc8370fe2b98e85de0b4c_JaffaCakes118
Size

734KB
MD5

3f9af1e01e6fc8370fe2b98e85de0b4c
SHA1

83cb08fe076c9d9309ac243f69724db883235c0b
SHA256

74e92817b67f8e09365615a79bdbfd10f02fa1ccdcbdfecd080f7b2549f2abc3
SHA512

e4a5f882c0290509c94b1d943915f10dc2303ebcceae2a5dc2da6627934882e3aecf4d93f6e69f8c658e06bce12bf255ffc7d33f81a474680f283e50e31fc4cd
SSDEEP

12288:E3TdtLW5WIj1YSSdFxsBSXyMzBUWb9lx/9AgHLo8OW+rB:ODsj1dEcBcJ9nPx/igrp+

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f9af1e01e6fc8370fe2b98e85de0b4c_JaffaCakes118

Files

3f9af1e01e6fc8370fe2b98e85de0b4c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 193KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vc++
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vsp
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE