Qy001DoMainWsss
Qy001Serviie
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
3e19a88fec1c09d20065503ce84cf3a4_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3e19a88fec1c09d20065503ce84cf3a4_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
3e19a88fec1c09d20065503ce84cf3a4_JaffaCakes118
Size
94KB
MD5
3e19a88fec1c09d20065503ce84cf3a4
SHA1
f4c164d1a3f754a9d7fcdabd5cc227ea670dca63
SHA256
d6abf020385c65e734ba153f7f36f120cf9ff613034d15044867d9439777e8e8
SHA512
c5060844b7803b6bccf77f1ef577673c1178cd3dc15dba01cd2a71a3b7ffa8fc4a899038654e199fc9acabc4cc699197b76c988cd5baa2df7c1e684ee40963cc
SSDEEP
768:I6nwici/mtQOC1mo3+FdBRp1yya9oNJ2L8n8R3q4rNTfu4E2iACgR+1mVaFmnva+:4PEAQ3xa4nfOcn1t0zIqrz4BjucXrS5
Checks for missing Authenticode signature.
resource |
---|
3e19a88fec1c09d20065503ce84cf3a4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Qy001DoMainWsss
Qy001Serviie
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE