Qy001DoMainWssk
Qy001Service
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
8297fcf1342c7b01bd6a0d9978c278ca_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8297fcf1342c7b01bd6a0d9978c278ca_JaffaCakes118.dll
Resource
win10v2004-20240730-en
Target
8297fcf1342c7b01bd6a0d9978c278ca_JaffaCakes118
Size
91KB
MD5
8297fcf1342c7b01bd6a0d9978c278ca
SHA1
71d6531fde82ae56ed3e94d38ead5c1baf765390
SHA256
22f817389dfeb23be1c6027e1bdc2f3f3fa6cf47adb339071e2f0a36515d6308
SHA512
d8801ad31fc705d369270942c6480f8a61866a0dd050208402f9846d033a7f20ecee51275ee26103e9e6b00c4134f43525acd10d10cedd0075b9a057d65a1a99
SSDEEP
1536:XKq3hQ3BVwGfOcnJf2xqYG4IntFSr/zAi9++bjz/2O:6AkbwFWJfa7TIYAj+bjz/2O
Checks for missing Authenticode signature.
resource |
---|
8297fcf1342c7b01bd6a0d9978c278ca_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Qy001DoMainWssk
Qy001Service
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE