FloodFix
FloodFix
crc32
crc32
Behavioral task
behavioral1
Sample
17dcbf87e8c30b3e3150d2296d722bdf_JaffaCakes118.dll
Resource
win7-20240903-en
Target
17dcbf87e8c30b3e3150d2296d722bdf_JaffaCakes118
Size
76KB
MD5
17dcbf87e8c30b3e3150d2296d722bdf
SHA1
8771513a4ca999dee5eb7284d455a9e1339ad683
SHA256
34550a9b2b475bc3416739e568fb27a52d4cd89683cdb0c0dc58daf8130187ca
SHA512
620738efd157727c586c9a534f9d7dace52cb467dd35ec1916d1afd161c144684a64ad90b235ab6972e6ea434510c43125c32df75240f9e9c6f9ecff7919714f
SSDEEP
1536:JLwmzkn+mBg+r5GgLdEkK9fNEjP0UcEtKCQV4i6NoVuT:h8g+t5LdEkKl80gKR+iMB
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
17dcbf87e8c30b3e3150d2296d722bdf_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FloodFix
FloodFix
crc32
crc32
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ