Qy001DoMainWssk
Qy001Service
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
c2701718fa9f419364125520bcab2bf8_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c2701718fa9f419364125520bcab2bf8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c2701718fa9f419364125520bcab2bf8_JaffaCakes118
Size
31KB
MD5
c2701718fa9f419364125520bcab2bf8
SHA1
2641dfaa63f4ef1181f9154d310389b53f8b68f5
SHA256
9096eb3623ab185d32597f9121405cd16d01832a8cf7b4c03d9083a371a2055c
SHA512
2f1eb796365450df0183840abf0f4a2dabe3679651281bc60968137bc8497e5230187d5d60a38401fb1d548b2f67fc8930d85e6a3a208c4319e986a6c5a6b94d
SSDEEP
768:EtSbn2tuBZZvyWosz5mA6aaM0T8RzsDeFJEemVTFzeLRJyQ0/W:EW2MZFR9NmLM0oR4uEZTFkyQ+W
Checks for missing Authenticode signature.
resource |
---|
c2701718fa9f419364125520bcab2bf8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Qy001DoMainWssk
Qy001Service
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE