Qy001DoMainWssk
Qy001Service
ServiceMain
Behavioral task
behavioral1
Sample
b4874d3f2567980e3bd9d310bedbdfc9_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b4874d3f2567980e3bd9d310bedbdfc9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b4874d3f2567980e3bd9d310bedbdfc9_JaffaCakes118
Size
363KB
MD5
b4874d3f2567980e3bd9d310bedbdfc9
SHA1
cac87ca365f0451bed97a087ec45ca2bd012ddf9
SHA256
a2df5e86a2e838b345ba7b184c0dc2359ca67bdd9e4890d312933b0fca90dc9f
SHA512
38c0c7b0c46d6eb0d7cd312ce4daf3440c9cb90ee2098d45d8461970ad57c8a18b726f4b09fd6d9b1bf64fca0394c71f3b6a008822fa96a48be83297183fb9d0
SSDEEP
6144:HFVNHLO1Uzw4bATNhMF7NVwI//ojSX0Yf5F8IUCiRYfrkT836bVgaykDw1Nxo7pt:lVBL8IwmMvMFpKIojSXnF8IpiRPA3Y5p
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
b4874d3f2567980e3bd9d310bedbdfc9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Qy001DoMainWssk
Qy001Service
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE