qlnbxzvuzql
wo
Behavioral task
behavioral1
Sample
452884e8765c982ff6b00037db24d6aa_JaffaCakes118.dll
Resource
win7-20241010-en
Target
452884e8765c982ff6b00037db24d6aa_JaffaCakes118
Size
273KB
MD5
452884e8765c982ff6b00037db24d6aa
SHA1
d88d8aca66082a0184b47c7a8ffe379163c27265
SHA256
123537a6f1d490255832e270339c7d5ace048dabab721f02a6d18d737e63d781
SHA512
6feff778dc6b89a81c9c47847885fd3a85881793a7fb6004597c1afae5fbc7de30e56d12d0d8dc58e52571e708c8f0b39431defa2c249be18a9f2a7c517c38bd
SSDEEP
6144:CvuK1FrZ/lDRS66yt0+HP9mc2Om3rcYHwW8auTscki0fceh0zoS7r:eflVXe+mZQW8a4sc90fcehkoSH
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
452884e8765c982ff6b00037db24d6aa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
qlnbxzvuzql
wo
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE