Qy001DoMainWssk
Qy001Service
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
18fffa9946c7c0031fdf2c42245ac1d7_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
18fffa9946c7c0031fdf2c42245ac1d7_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
18fffa9946c7c0031fdf2c42245ac1d7_JaffaCakes118
Size
95KB
MD5
18fffa9946c7c0031fdf2c42245ac1d7
SHA1
4246650c94802177cf2126d5a90986929118a355
SHA256
8b01c0d1f239643d64d17bf1d67eab39537b6a36961c2f127737e56d6e2ed977
SHA512
b15dacdae0bd002309b6beb8b137876c8eada828c7bd92291d922f50941f2764dc6ee3f61965079e2a3f564ce006b301ce2e9e9b7129b83a1775198600e3b505
SSDEEP
1536:UKq3hQ3BVwGfOcnJf2xqYG4IntFSr/cAi9+tEzhoEay4eDX:1AkbwFWJfa7TIDAjtEzhoEay4eDX
Checks for missing Authenticode signature.
resource |
---|
18fffa9946c7c0031fdf2c42245ac1d7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Qy001DoMainWssk
Qy001Service
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE