Qy001DoMainWssk
Qy001Service
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
60e5e77690b579f5dbcf68a072b6e935_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
60e5e77690b579f5dbcf68a072b6e935_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
60e5e77690b579f5dbcf68a072b6e935_JaffaCakes118
Size
388KB
MD5
60e5e77690b579f5dbcf68a072b6e935
SHA1
168e52d596ff090276f07128e5d245369763980d
SHA256
a5e143529724d77d6affee47f5bb8b17d68827c323110f2f729abe5596cd6d72
SHA512
dad9a31a7c9210ec9c0f7928db276d4ea3c65e97ef3868cd52ac07dc6ada80a9db3b1abed9bb98faa053039bdf963bff9ebf5a57f78a6d4b96022da869b97a77
SSDEEP
12288:02NweF3Z4mxx0vh1nN5ymA/XQdCgTtEMirR:0OweQmXIvHoKZLirR
Checks for missing Authenticode signature.
resource |
---|
60e5e77690b579f5dbcf68a072b6e935_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Qy001DoMainWssk
Qy001Service
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE