9d279f24e5dbe935cb9f953c00b0616b_JaffaCakes118

General

Target

9d279f24e5dbe935cb9f953c00b0616b_JaffaCakes118
Size

2.7MB
MD5

9d279f24e5dbe935cb9f953c00b0616b
SHA1

099913cb8da9d2b3436802b766c11170613172ce
SHA256

5627d076492a8b7162fa17faa34179c427e8042b6ca534a841b8119f3610926e
SHA512

2ba19c19ac7a48cba0eea79ea783bc95e6b917973030de549aa5e3de316e2f49ed207bb003bf77c2c503739e503c7697a20e0384b02eabb7b8f27970c1ea30b4
SSDEEP

49152:gcDDhb3gVpehGvkZGj0Z6LlOAoOgkcYG1qOveAqMCDG7vwnVDwbp6lD3NE3g3IY:jD9bQV4GveLZ6pCYG1qB7MCicnaUdkgH

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9d279f24e5dbe935cb9f953c00b0616b_JaffaCakes118

Files

9d279f24e5dbe935cb9f953c00b0616b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 324KB - Virtual size: 916KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CODE
Size: 107KB - Virtual size: 332KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2.0MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 47KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 512B - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 164KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

.text Size: 324KB - Virtual size: 916KB

CODE Size: 107KB - Virtual size: 332KB

.rdata Size: 2.0MB - Virtual size: 3.4MB

.data Size: 23KB - Virtual size: 248KB

DATA Size: 47KB - Virtual size: 68KB

BSS Size: 512B - Virtual size: 28KB

.rsrc Size: 7KB - Virtual size: 24KB

.vmp0 Size: 164KB - Virtual size: 176KB

.aspack Size: 7KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

.text
Size: 324KB - Virtual size: 916KB

CODE
Size: 107KB - Virtual size: 332KB

.rdata
Size: 2.0MB - Virtual size: 3.4MB

.data
Size: 23KB - Virtual size: 248KB

DATA
Size: 47KB - Virtual size: 68KB

BSS
Size: 512B - Virtual size: 28KB

.rsrc
Size: 7KB - Virtual size: 24KB

.vmp0
Size: 164KB - Virtual size: 176KB

.aspack
Size: 7KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB