Qy001DoMainWssk
Qy001Service
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
b7666bf53104f68718db176e37877ed8_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b7666bf53104f68718db176e37877ed8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b7666bf53104f68718db176e37877ed8_JaffaCakes118
Size
35KB
MD5
b7666bf53104f68718db176e37877ed8
SHA1
021df65f8698fe30497890569182022026711dd6
SHA256
c22a01d4ccac706133cc19a0f1835375555c97317bc393a2bf472936bebeba70
SHA512
0ac23a96a7a4e52b5f064aac3e646e3dba81d8e0ac351159d7f9fa4389412fd334194b74fcb6f19b7334cec52982ceeeffe9f0f47228805d8aa937be0809277f
SSDEEP
768:FtS1C239uBZZvyg1RcFQD8oVgUTopJRLtrdG639Bq75Ho0I9+C:FL2sZFZ1OKTrTopJltU6zqtH
Checks for missing Authenticode signature.
resource |
---|
b7666bf53104f68718db176e37877ed8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Qy001DoMainWssk
Qy001Service
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE