ServiceMain
Qy001Service
Qy001DoMainWssk
Static task
static1
Behavioral task
behavioral1
Sample
0154afff91273be1c4d5e83d74c506be_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0154afff91273be1c4d5e83d74c506be_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0154afff91273be1c4d5e83d74c506be_JaffaCakes118
Size
96KB
MD5
0154afff91273be1c4d5e83d74c506be
SHA1
7ff9c355cf4637ba20092ef0ff090fbd5c355eb7
SHA256
a5fe3f0ede1ed2264003f6d22003473a372738ba2718e615ff2433c3ac5deea6
SHA512
8517953d06b93e4d50267cc2f8c9fb28ac85521b234b74eb7c653eccdcb661167bd1b134b5a3e6f99a488e8c6af9e8394a56846cf20b91d46fdd225fddcf61cb
SSDEEP
1536:GPUZQ3xawGfOcnJ/n81oz4BjucXrNFKv8H7cGXTf:SU8IwFWJ/8W0BcvI7cGXTf
Checks for missing Authenticode signature.
resource |
---|
0154afff91273be1c4d5e83d74c506be_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
Qy001Service
Qy001DoMainWssk
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE