Qy001DoMainWssk
Qy001Service
ServiceMain
Behavioral task
behavioral1
Sample
1be9bd0e5b9b2a1d7e337b981784b62e_JaffaCakes118.dll
Resource
win7-20231129-en
Target
1be9bd0e5b9b2a1d7e337b981784b62e_JaffaCakes118
Size
1.3MB
MD5
1be9bd0e5b9b2a1d7e337b981784b62e
SHA1
4753bf06e2270b13696c2fb2ee7d875327d29e1e
SHA256
46768d8005c4e403343ce50560191ab58ba45e36e5d84be5a3fe2014f1ad9ee4
SHA512
e87d9d24496e911ff0c69431b0dfc9ba3cf9ef650a1ad91e1799535adb27a4a55998cb306d60cffaa34e3a0f31d34cc083fac4ca464a12fecdd150ba4fdb6470
SSDEEP
24576:bvj+a/9B2CJkup7qsHkiIiMgrgKynenXNDbEcm0eS/ho+7QTx:ua/9B2CJkeYqyenicpo+7Q
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
1be9bd0e5b9b2a1d7e337b981784b62e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Qy001DoMainWssk
Qy001Service
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE