Qy001DoMainWssk
Qy001Service
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
3f3154daeafe113a19f14c9dce28d8a2_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3f3154daeafe113a19f14c9dce28d8a2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3f3154daeafe113a19f14c9dce28d8a2_JaffaCakes118
Size
35KB
MD5
3f3154daeafe113a19f14c9dce28d8a2
SHA1
32ecea6b3cef8d310ca10ad7511a59b5c0ede514
SHA256
e3a63e211a320173cdeb33d47155cac531a8cfa52af52f367e169cb264a3884c
SHA512
48c36363fc3de36971b937b8d56b13300f9056be8c86435e381a58f8cb4dd0e142eca54acf2eafa71c33b943aafcf95f59af05c95138fc57d99fcb2892c0cda5
SSDEEP
768:FtS1C239uBZZvyg1RcFQD8oVgUTopJRLtrdG639Bq75HuVqEfb:FL2sZFZ1OKTrTopJltU6zqtH
Checks for missing Authenticode signature.
resource |
---|
3f3154daeafe113a19f14c9dce28d8a2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Qy001DoMainWssk
Qy001Service
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE