Girl
Mild
Qed
SuppS
Target
b102ff63fc87516ed03b7cc145414842_JaffaCakes118
Size
186KB
MD5
b102ff63fc87516ed03b7cc145414842
SHA1
11b40169df4e31a26c3fc67e674fe667415ca965
SHA256
0cbbec46b756869b054a622a513118572e771c26b898d8eb0b1bc6ffbf6dc311
SHA512
401f9d0b3bf48ef8932fbbfb80e41e7c82f17a8b1dbfbbe8822d1c88a589419b84e418a4aae9c7bbf7c47d325894627b2b27562c44b3e2464e6e1c5b166f45ee
SSDEEP
3072:8J7N586SNFa23NnW190vygVsjaYl8WstetFdnPcK+ffjJPV1d0SSnJlRQuiVlF5U:Q7Nu5NFa23NJy3bamU93FV1xcJPQF9/Z
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b102ff63fc87516ed03b7cc145414842_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Girl
Mild
Qed
SuppS
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE