Qy001DoMainWssk
Qy001Service
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
72fd9865f523ba0ce6a0f2d956ca16d6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
72fd9865f523ba0ce6a0f2d956ca16d6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
72fd9865f523ba0ce6a0f2d956ca16d6_JaffaCakes118
Size
87KB
MD5
72fd9865f523ba0ce6a0f2d956ca16d6
SHA1
2756d7f1d88610137c6b5da5e9ee458976b8d6d9
SHA256
5087ae8a6ded84e3141ad0ed0710f74fe8a10ab3d2ed43d8eb3da50c6804143b
SHA512
c29b979e3bb7a3bfb18c448495ba658ee0e6dcecbfc8936635c417b5de454716af4ad335653a1441a21cf88f904e32862aab9968c0cbd4e4a5624b3ec1ff9e0e
SSDEEP
768:CnJici8RKQOC1mo3C9DBRuhjjkGDZJ9wnn8R3q4rNTfuwP2iACgR+1mVaFmnvaAi:6P0ZQ3xawGfOcnJFtukjz4BjucXrWe
Checks for missing Authenticode signature.
resource |
---|
72fd9865f523ba0ce6a0f2d956ca16d6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Qy001DoMainWssk
Qy001Service
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE