e46a135d61997d3404654538a9d18771_JaffaCakes118 | Triage

Sharing

General

Target

e46a135d61997d3404654538a9d18771_JaffaCakes118
Size

787KB
MD5

e46a135d61997d3404654538a9d18771
SHA1

ea7f82a755fce17855f3925bdc5f042609c71cd3
SHA256

6e411abe074f6bb3bbb750e43fad52ec5dc13c8cb0948d407f9fba047460aa3a
SHA512

114337b70ce7a5a5a1dd6ace435dcf985351ded4d82688ba9b7d57ce619af47c7f1cccf4cef6f1989da661a2329ad2ac9a54fceceff0671a5c29110775a23100
SSDEEP

12288:Jt0NAvPoyZEVoQFEzuLGHtN6zeJm6HqFjlRWNQ9CuhYOfomQsDF1B:IYPoy2G6LGHtS6HqBlMW0uWw7Q8

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e46a135d61997d3404654538a9d18771_JaffaCakes118

Files

e46a135d61997d3404654538a9d18771_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.icode
Size: 2KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.loader
Size: - Virtual size: 3.0MB

.rbss
Size: - Virtual size: 416KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.info
Size: 547KB - Virtual size: 608KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 226KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE