qlnbxzvuzql
wo
Behavioral task
behavioral1
Sample
d26e324fcfeb80e93f44df5d613bb222_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d26e324fcfeb80e93f44df5d613bb222_JaffaCakes118
Size
273KB
MD5
d26e324fcfeb80e93f44df5d613bb222
SHA1
0f9577865e494a1f5926a71152d0ca491eaecad2
SHA256
306ce86cbb4fe987a45f55576bef46ce0c4f11576e5da283ff6524fa66ea8d27
SHA512
18b19ba3c441a9d454c53be78aebc65c511c6000de8c3eb6458bdfaf853e9e1b66a471d7c85908efd4049a41ae6eb4cb9ff68ef806b17b81eb11f206aca70acb
SSDEEP
6144:CvuK1FrZ/lDRS66yt0+HP9mc2Om3rcYHwW8auTscki0fceh0zoS7U:eflVXe+mZQW8a4sc90fcehkoSA
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d26e324fcfeb80e93f44df5d613bb222_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
qlnbxzvuzql
wo
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE