qlnbxzvuzql
wo
Behavioral task
behavioral1
Sample
83ec7895ae4c72b0240b40d51791606f_JaffaCakes118.dll
Resource
win7-20240729-en
Target
83ec7895ae4c72b0240b40d51791606f_JaffaCakes118
Size
80KB
MD5
83ec7895ae4c72b0240b40d51791606f
SHA1
68a9b9c4de81a626ac31d59fdf14b91001a343c6
SHA256
64807401f0ec09cf3d2199751cc951bd465d622238c2143999a04c5e0d77afcc
SHA512
4bbc743d9ce389785dbae3cd01d181f5486b5a1ffbdd5c29db28e3bc7eea700b4973bf4eff8a3deb10e13a0f99818812cac731bd8bfa2bf011b83f42289d5027
SSDEEP
1536:KQo5AAZJLkro9b49z0LE9PTHSTrYBCc2rh/YBvqOI2l+cignsyAnouy8f:po5P0Ubuz0I9PGTrBh/YwA+Sxooutf
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
83ec7895ae4c72b0240b40d51791606f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
qlnbxzvuzql
wo
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE