Qy001DoMainWsss
Qy001Serviie
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
2ae7f6ba47994f3a9f35308192e4de44_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ae7f6ba47994f3a9f35308192e4de44_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2ae7f6ba47994f3a9f35308192e4de44_JaffaCakes118
Size
90KB
MD5
2ae7f6ba47994f3a9f35308192e4de44
SHA1
db8cebdbc5af60982977567d581f83fff8c26ff1
SHA256
c89116b5237adbc17beb7a84f1713bd1142d9de5ab9380cc3372b46fa20ab2db
SHA512
7c9ceffd46d5e7472a48b5ce217282422dab171405af19adc1a9f3415d27f1c1d5edc16da0d8eea2191d60bae6f05a787de7acd0bac82b1dd8c802e2ba13458e
SSDEEP
768:8Mnwici/mtQOC1mo3+FdBRp19ya9oSJ2L8n8R3q4rNTfuvr2iACgR+1mVaFmnvaO:OPltQ3xavafOcnJt0zTez4BjucXrtB
Checks for missing Authenticode signature.
resource |
---|
2ae7f6ba47994f3a9f35308192e4de44_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Qy001DoMainWsss
Qy001Serviie
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE