Qy001DoMainWssk
Qy001Service
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
f8e1707fa0f2887510c7fa49f4085d05_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f8e1707fa0f2887510c7fa49f4085d05_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f8e1707fa0f2887510c7fa49f4085d05_JaffaCakes118
Size
88KB
MD5
f8e1707fa0f2887510c7fa49f4085d05
SHA1
c8cfdb9bf2ab6117d482d98fdf393883b2cbe366
SHA256
3a9336bcf7e7bea2a1448f0b3d869243b1b9e2e6227e34ee2f1106a85b94bf0a
SHA512
8fde1104e450ff12eff3317c6dc8978fb6d1bf967e6093ac39c3c6f0a1e711cd5aac6646b3a17450289da8435169fa517b62af6d289f3a258d4be75776ebdf29
SSDEEP
1536:fKq3hQ3BVwGfOcnJf2xqYG4IntFSr/yAi9++jB:iAkbwFWJfa7TIdAj+jB
Checks for missing Authenticode signature.
resource |
---|
f8e1707fa0f2887510c7fa49f4085d05_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Qy001DoMainWssk
Qy001Service
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE