Qy001DoMainWssk
Qy001Service
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
1b1ac2293bdd65398a562fd6e64a0061_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1b1ac2293bdd65398a562fd6e64a0061_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1b1ac2293bdd65398a562fd6e64a0061_JaffaCakes118
Size
35KB
MD5
1b1ac2293bdd65398a562fd6e64a0061
SHA1
5e5dc2f49800136566c17bd38f3a44eddaa8ff44
SHA256
90427367aa9eafcd679ccaf0fff075d6a3de0e8f9618e0f730ee123b44b5994f
SHA512
9197d1ac18bf86498e475d1e91338a404102b481f8c1d6a0c83e1d9a4e2c682234443586350895928dd98a4b18776ba08f856352c50643b8395a73300df98e10
SSDEEP
768:3Soa2JuBZZvylxA2URW5ny2c8SLZBKSSpRx583srZe4:I2AZFexAZWzS9BKXpmcrZ
Checks for missing Authenticode signature.
resource |
---|
1b1ac2293bdd65398a562fd6e64a0061_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Qy001DoMainWssk
Qy001Service
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE