getresources
getweb
Behavioral task
behavioral1
Sample
QQltzs-v1.5/QQltzs/Interest.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
QQltzs-v1.5/QQltzs/Interest.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
QQltzs-v1.5/QQltzs/QQltzs.exe
Resource
win7-20240704-en
Target
f5f55c2c2d6e42c75302b243e33777cd_JaffaCakes118
Size
1.4MB
MD5
f5f55c2c2d6e42c75302b243e33777cd
SHA1
e2406e73f1c86b5cb130ffa90d3a65c9f540312d
SHA256
19b79c8253e187dc3e2101649c348000ea73b891de265cde4f2f9132ab89f234
SHA512
9fe3d777804dfe80661209a3398f0f91c33855a21de5b3fc926be9d818d99887ed63dcc9f2affe270dbf1a9d66acecff94ab87d1cd5c5bb6b447e06a920cf8a7
SSDEEP
24576:BdR5cBfQFAcEzjtUwJG0biMiJGS2jHzm5cTjBEWzJ00e+IxJE1pt6HtlANGiCLsq:DRSQWiwJTbijk0YPNWHE1pt6NRLCXrfc
resource | yara_rule |
---|---|
static1/unpack001/QQltzs-v1.5/QQltzs/QQltzs.exe | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/QQltzs-v1.5/QQltzs/Interest.dll |
unpack001/QQltzs-v1.5/QQltzs/QQltzs.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MessageBoxA
FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
getresources
getweb
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE