ServiceMain
Qy001Service
Qy001DoMainWssk
Static task
static1
Behavioral task
behavioral1
Sample
4db8a48ebe9fcea1f115f6bc6fcff861_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4db8a48ebe9fcea1f115f6bc6fcff861_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4db8a48ebe9fcea1f115f6bc6fcff861_JaffaCakes118
Size
104KB
MD5
4db8a48ebe9fcea1f115f6bc6fcff861
SHA1
208bd8873a480081f1cf05075633d80e96d2fbbe
SHA256
e1400166ad09d9269ce81e28547406b02c643111aac422dbc82983107546a813
SHA512
3a5f287ac5a3925ea0123aba25b7ba76df5b15d4fbeb1c5b36ca84654b33e0b3bbeb09e27673fa71eeaf0f68440434b62a16366492d214869095e6b2dadb761b
SSDEEP
3072:E08IwFWJ/870BvNQw8fnjIy8qr/6Lm8QY:E4JEwBvN
Checks for missing Authenticode signature.
resource |
---|
4db8a48ebe9fcea1f115f6bc6fcff861_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
Qy001Service
Qy001DoMainWssk
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE