Qy001DoMainWssk
Qy001Service
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
3b6a768e65b237636fa2c192f7252708_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3b6a768e65b237636fa2c192f7252708_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3b6a768e65b237636fa2c192f7252708_JaffaCakes118
Size
35KB
MD5
3b6a768e65b237636fa2c192f7252708
SHA1
131295da86e3f7b076c6f76089a35f44e3e8e5ae
SHA256
d856eea0938efb2c5489c8e2990ad22df52f1342147ff9a1f7d2f3ce2a1f97ac
SHA512
e1526f8fa156511daf27aeaff9ccb17e17c0fc59858fcc93c071d8fd8905ff7e3070e5a4e99770769044d694be069c6d18cc14ba598b53f62a1d011e29782913
SSDEEP
768:FtS1C239uBZZvyg1RcFQD8oVgUTopJRLtrdG639Bq75HvuP/0c:FL2sZFZ1OKTrTopJltU6zqtH
Checks for missing Authenticode signature.
resource |
---|
3b6a768e65b237636fa2c192f7252708_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Qy001DoMainWssk
Qy001Service
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE