F1122
Goose
Haste
Mcgee
Target
0359e244c376b437e1eeb8f08bec2453_JaffaCakes118
Size
184KB
MD5
0359e244c376b437e1eeb8f08bec2453
SHA1
a9fe0fd5de3a84231cff3b9b8e4b0271810bf97b
SHA256
e57bf10aa27aa97cb2330d0636d0f4a49eae4d93d5f808a143757eaea6a3ce0b
SHA512
5b93984d4a45a7ccca7c0d000f48a0a1c8d2a779b9b258f1e49cc65b7897681e1ce12749136b6c9d65eb6895fc8e25d44feb7de5a269539d0fbb3418c0314be6
SSDEEP
3072:hPWpwhHnB6p/emu2Gw+vi07FKp22PzTTffuBWPAhOlXifel9vL7TmECYaout37:lzKpbPk7MzffuQPAhOxl9faoS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0359e244c376b437e1eeb8f08bec2453_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
F1122
Goose
Haste
Mcgee
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE