Qy001DoMainWssk
Qy001Service
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
af1734eaba3e4977eba6beab0c901256_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
af1734eaba3e4977eba6beab0c901256_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
af1734eaba3e4977eba6beab0c901256_JaffaCakes118
Size
91KB
MD5
af1734eaba3e4977eba6beab0c901256
SHA1
65545038d14b5d82d8c796ed7c0e010b3cd26a96
SHA256
ce70868df1418b302502ba671d9479c1683ee327483c051490b4842c38e68e8c
SHA512
6876c5c7de37c5c8c968c26066d991cd71023ee737ed7706fd5a930b78051146093cfa512e2c605fd9e4ba98ccd96fa185675de1be608811dac27723555c047c
SSDEEP
1536:XKq3hQ3BVwGfOcnJf2xqYG4IntFSr/zAi9++5UNE19:6AkbwFWJfa7TIYAj+5UNE19
Checks for missing Authenticode signature.
resource |
---|
af1734eaba3e4977eba6beab0c901256_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Qy001DoMainWssk
Qy001Service
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE