Qy001DoMainWssk
Qy001Service
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
fc0db1224f1acc9e87081b893dcc8912_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fc0db1224f1acc9e87081b893dcc8912_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fc0db1224f1acc9e87081b893dcc8912_JaffaCakes118
Size
91KB
MD5
fc0db1224f1acc9e87081b893dcc8912
SHA1
50069a5b80244a425f20bc709ad234ba48cc4425
SHA256
c5af4988b9410f5a769d331b321d3fb3d0a5c291743182cff7669d223b8da8e5
SHA512
4c5e40568d3661d92e0ddbbe2264d2cc6bad89bd0369cbbd4b5368e5c15db4472a7a9e38ac815557aa2b278ab0a9524aa50eccbb3904e178216ee8e24b6b9bcd
SSDEEP
1536:XKQ3hQ3BVwGfOcnJf2xqgG4IntFSr/DAo9+FF0R40:6OkbwFWJfajTIgAVFF0R40
Checks for missing Authenticode signature.
resource |
---|
fc0db1224f1acc9e87081b893dcc8912_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Qy001DoMainWssk
Qy001Service
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE