Curfew
H9922
Nests
Target
37397ef37ca8e861190f92cbc5cfad47_JaffaCakes118
Size
149KB
MD5
37397ef37ca8e861190f92cbc5cfad47
SHA1
6a3af9a08573736704ea1d80a601ff4cb93ea939
SHA256
da0d087edd1403b78090096efb9b7599d54448e567e700b7519545c78cea6222
SHA512
16a1eb9320df7efe2061144e32fb652cdd0cb0529f352b0c20409817f53babe6c993612b30f32192dc65ba6de09ff5b6641f53c6d719aaa421482de05f8ba3fd
SSDEEP
3072:Tv5xjg+DYxh5ZQLI+WiCyqww1bG8jkzH2Mtln8d1bH6ViouX:TvHDYxDYSrFkzHLtWbHTok
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
37397ef37ca8e861190f92cbc5cfad47_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Curfew
H9922
Nests
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE