111111111111
ServiceMain
Qy001DoMainWssk
Static task
static1
Behavioral task
behavioral1
Sample
a701047eb12688d288c6c84a0ff081f6_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a701047eb12688d288c6c84a0ff081f6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a701047eb12688d288c6c84a0ff081f6_JaffaCakes118
Size
89KB
MD5
a701047eb12688d288c6c84a0ff081f6
SHA1
186230cb4ba6afc45dbd7b6fd784ddf7177e1d12
SHA256
c20efeb09f3ef62e65160040f270291ae12cffb411b9b68bcc6627151d58ccb0
SHA512
94260514ab451666c09ef68801ea4ed24ebaf0684b4f75bc8116d54806a0e864ca4801da16e88bc12b296eb4172f4298166ba9d8be6ab50ef67784376dc1c3b8
SSDEEP
1536:rPjZQ3xawGfOcnJa888Oz4BjucXrQHUCF0A:7j8IwFWJaRj0BKUCF0A
Checks for missing Authenticode signature.
resource |
---|
a701047eb12688d288c6c84a0ff081f6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
111111111111
ServiceMain
Qy001DoMainWssk
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ