ServiceMain
Qy001Service
Qy001DoMainWssk
Static task
static1
Behavioral task
behavioral1
Sample
8e9d5edc596dd83db8c16dbea448e70d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8e9d5edc596dd83db8c16dbea448e70d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8e9d5edc596dd83db8c16dbea448e70d_JaffaCakes118
Size
100KB
MD5
8e9d5edc596dd83db8c16dbea448e70d
SHA1
a1a553979a0c7354a4ecd50a5b237aba7955fbb2
SHA256
433935c15475b90a9475e77dad6686dd5d389d66043996ddeab0b5f381546681
SHA512
197d327a75e7fc9bfa2e8a99e8779131329031899ecb484bd00c4893d9bf773af6b6025b550cc3f2e6c592fcc69e10c145e94798474f8b7e879af56f80a6e781
SSDEEP
1536:GPUZQ3xawGfOcnJ/n811z4BjucXrNF6v8zw8fnj2Szuj3:SU8IwFWJ/870Bsvew8fnj2Szuj3
Checks for missing Authenticode signature.
resource |
---|
8e9d5edc596dd83db8c16dbea448e70d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
Qy001Service
Qy001DoMainWssk
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE