Qy001DoMainWssk
Qy001Service
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
894e5fbd8378288cf324e75b4d24f6b7_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
894e5fbd8378288cf324e75b4d24f6b7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
894e5fbd8378288cf324e75b4d24f6b7_JaffaCakes118
Size
91KB
MD5
894e5fbd8378288cf324e75b4d24f6b7
SHA1
10d177551e9ef091802eec52b8e32ebbe4917285
SHA256
60bbbe60b89b31ca64fef71dc48c2d6b9ae3e76a4e7f47b25790c083717e6cde
SHA512
26f2f3bee8e81b787223ef4eadc0ba748884a891c7ce674f161e097c528593a67d68ae2ba33314f9df79393d0f87ba9acdd60e1e67ec2284f3f684c14f78aa4e
SSDEEP
1536:XKq3hQ3BVwGfOcnJf2xqYG4IntFSr/yAi9++n43kZB:6AkbwFWJfa7TIdAj+n43kZB
Checks for missing Authenticode signature.
resource |
---|
894e5fbd8378288cf324e75b4d24f6b7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Qy001DoMainWssk
Qy001Service
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE