Qy001DoMainWssk
Qy001Service
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
17d90c88afe0b8cec6658c44ded8762c_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
17d90c88afe0b8cec6658c44ded8762c_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
17d90c88afe0b8cec6658c44ded8762c_JaffaCakes118
Size
35KB
MD5
17d90c88afe0b8cec6658c44ded8762c
SHA1
26d9a11a4f39bc422fc8be50c2abf3b4a2702a34
SHA256
8bdd423cf923df4616774954b33918713f607c78d88c0049e9405b93dede743e
SHA512
af21846265a6dd56bd02f5a9f83c366a439bc0c7743f567c648f09136dac6dbb6f6b00439f350f425f486e85aafb0a734a2abb5dd17a5908464c1cb22d429300
SSDEEP
768:xSSP2buBZZvylxA2URW5ny2cQXXmvpqF8uFaRZLCUqSE4rJR1NEerpikTf:T2CZFexAZWtp8ZLCUqSE
Checks for missing Authenticode signature.
resource |
---|
17d90c88afe0b8cec6658c44ded8762c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Qy001DoMainWssk
Qy001Service
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE