111111111111
ServiceMain
Qy001DoMainWssk
Static task
static1
Behavioral task
behavioral1
Sample
96b10182fd67728d3b350d7df0f8f520_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
96b10182fd67728d3b350d7df0f8f520_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
96b10182fd67728d3b350d7df0f8f520_JaffaCakes118
Size
85KB
MD5
96b10182fd67728d3b350d7df0f8f520
SHA1
de11a3189322f78e8135302bbe9df199cee81c3a
SHA256
e7d461553d3188215e07149e493e6c9d72cab17b8c5d823268132fea789048f9
SHA512
ae923cf82eceae31a48ca15fe61aaed168ee6fa64ef9abce679ba69ecec65a0ee0c98582e52948c1aed41b6864849a643c6bc9ad37b6d859d3f6cffa00e79cdf
SSDEEP
768:pn5ici8Y2QOC1mo3C9DBRuhzFkGDZJ9wnn8R3q4rNTfuwP2iACgR+1mVaFmnvaAv:rPjZQ3xawGfOcnJa888Oz4BjucXr+H
Checks for missing Authenticode signature.
resource |
---|
96b10182fd67728d3b350d7df0f8f520_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
111111111111
ServiceMain
Qy001DoMainWssk
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ