Qy001DoMainWssk
Qy001Service
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
ab86b6cd9be3a241836d61c6774920c3_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ab86b6cd9be3a241836d61c6774920c3_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ab86b6cd9be3a241836d61c6774920c3_JaffaCakes118
Size
35KB
MD5
ab86b6cd9be3a241836d61c6774920c3
SHA1
d03e5d94f8e7e385240bb8d41486d039cb8bce15
SHA256
76705989fdcd2627af4203bfa9e11bbcea2facfdfa102d4ac629ab50bd8d57a8
SHA512
2a793858f19f7610424589021699a64fe307e371a5e3200ed8f0f625778183d96a22ce7ad49a2a96006bd70ba2b9c8ff304c5e94c03b071947c1f296a71a2372
SSDEEP
768:FtS1C239uBZZvyg1RcFQD8oVgUTopJRLtrdG639Bq75HwIDpym:FL2sZFZ1OKTrTopJltU6zqtH
Checks for missing Authenticode signature.
resource |
---|
ab86b6cd9be3a241836d61c6774920c3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Qy001DoMainWssk
Qy001Service
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE