Qy001Service
ServiceMain
Qy001Domain
Behavioral task
behavioral1
Sample
17834282029361d533b1b67b7d570da6_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
17834282029361d533b1b67b7d570da6_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
17834282029361d533b1b67b7d570da6_JaffaCakes118
Size
395KB
MD5
17834282029361d533b1b67b7d570da6
SHA1
4f7b916f3793e4ce6aba53563516e35542a79e51
SHA256
c4ba6c6cfb8b3817d3b6b182308f45716720eba5b321fd15325b5fda867f424b
SHA512
a1c30f5ebe7ebae6d28e3ab2bdc62c8da1bad52e17582f7816a4d4dcf7c63b9c2e887a5d2f9d69a3c2e4996abbcadad21e08ee0b60602d6510bde85d6496dddb
SSDEEP
6144:UcNUN68JUegbHvdT/PsM203QVoBc1IxFUVqMEnICyONH+zYuEH4N3jh1ItDtLv:lUgkSvV/PsNVoFjMEn2zYuEYpYDp
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
17834282029361d533b1b67b7d570da6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Qy001Service
ServiceMain
Qy001Domain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE