qlnbxzvuzql
wo
Behavioral task
behavioral1
Sample
3e2aab25fff0529721eb8a12b341b5af_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3e2aab25fff0529721eb8a12b341b5af_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3e2aab25fff0529721eb8a12b341b5af_JaffaCakes118
Size
278KB
MD5
3e2aab25fff0529721eb8a12b341b5af
SHA1
16bc9431575411fd35ff25c5024fca4873d26dcb
SHA256
ce7bc210779989a9b5fad9d1b7b8c53d6fba37614b8387d1327958f14a311c15
SHA512
debc46701653d0a6eb357d6e7572cb898a06eff16730fff3e913923e263848be1b45c04a727450816b92e2e7a751d216ae86e308ae280b81ebbf42244a8487f2
SSDEEP
6144:1ZFh/0bKu7ZcD0wEaoX/OPthW+fmAWgWVKFl0xsDNmtZ0Kaw7t83/MqLscoS+:DEZcDP2UH3ZRl7sqwR05LscoS+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3e2aab25fff0529721eb8a12b341b5af_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
qlnbxzvuzql
wo
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE