ServiceMain
Qy001Service
Qy001DoMainWsSk
Static task
static1
Behavioral task
behavioral1
Sample
33f603a20fdc42e13c85348bc2405f4f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
33f603a20fdc42e13c85348bc2405f4f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
33f603a20fdc42e13c85348bc2405f4f_JaffaCakes118
Size
95KB
MD5
33f603a20fdc42e13c85348bc2405f4f
SHA1
6b017112a13d7eccdbcc8c3ae994333711d803fb
SHA256
c4c66fd7e0305a46d5ee597cba8f451d011c6ee9f519bad9b48ed03077747450
SHA512
0108b75d453587cb8fffc439e02e0cf825f3b57dae88623d27274509c47f04a536b985d70f036a9502bb05fdf9900ac2321eee33e1894bf332f217357324c3d8
SSDEEP
1536:Mui7Q3tAKhfOcn+iJTvR04G3XDkr59Vm:RiyaKsW+i5pVGoVm
Checks for missing Authenticode signature.
resource |
---|
33f603a20fdc42e13c85348bc2405f4f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
Qy001Service
Qy001DoMainWsSk
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE