dfe9edfceb1ca6ebb94dd18919bfadeb_JaffaCakes118 | Triage

Sharing

General

Target

dfe9edfceb1ca6ebb94dd18919bfadeb_JaffaCakes118
Size

1.3MB
MD5

dfe9edfceb1ca6ebb94dd18919bfadeb
SHA1

178d4e316cdd7b707089928f6beaa91314eec834
SHA256

5c64f7f80b09582f6ad8049c4b7e9ea5ab62006630df5941a6733544fce5940d
SHA512

602746e05e90aa48288658bd97df8488a443d82c7f808294bb946435a1c8fcaa715e42711a62a4e455a5f8a918c3169aedabed7a073e1a66e959c2aab3e8071c
SSDEEP

24576:u2EBg1IYJE7MyO1RnYBRIKJhbO+jqM72mKePXVhZU0WABFlPF:S4JE7MRjYBRIKJ5Osr7cMFfU0nBFNF

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfe9edfceb1ca6ebb94dd18919bfadeb_JaffaCakes118

Files

dfe9edfceb1ca6ebb94dd18919bfadeb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 21KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE