ServiceMain
Qy001Service
Qy001DoMainWssk
Static task
static1
Behavioral task
behavioral1
Sample
0835d54ff90771ea2f466cba25bdf5aa_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0835d54ff90771ea2f466cba25bdf5aa_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0835d54ff90771ea2f466cba25bdf5aa_JaffaCakes118
Size
104KB
MD5
0835d54ff90771ea2f466cba25bdf5aa
SHA1
fa25b6299afef6b5b50628926963bd4901006793
SHA256
f55edd6a8e48ea058f2470a4682fc742094bea30de00615c3f3e58a7bf3b5783
SHA512
5cbb355a5f4d88d405602238f3f76d7612f7984874bb44f81ca6563334737d246ad3f9a41708a7b9e9c38a2bdd6d01dff8c368230b021a807e3aa43d1ad89744
SSDEEP
3072:S08IwFWJ/870BEnew8fnjIy8qr/W2URVt:S4JEwBEn
Checks for missing Authenticode signature.
resource |
---|
0835d54ff90771ea2f466cba25bdf5aa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
Qy001Service
Qy001DoMainWssk
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE