ServiceMain
Qy001Service
Qy001DoMainWssk
Static task
static1
Behavioral task
behavioral1
Sample
cfdfc2f8b2a2192b76504bf5df1d1cc4_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cfdfc2f8b2a2192b76504bf5df1d1cc4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
cfdfc2f8b2a2192b76504bf5df1d1cc4_JaffaCakes118
Size
96KB
MD5
cfdfc2f8b2a2192b76504bf5df1d1cc4
SHA1
9df5eb06e33e30cd7965f7cd155327649280baae
SHA256
bf8152ec76ea200ecd99b570872847c06f99497bd88672fdbdac54e8347e95a0
SHA512
e718345a5d277cc8c4368ea260d484924a7b39d0d33fb22df44b05f9f10d216c54c0a9cf83f14fa9e495fa4193e23a2803212944ce7eddfee803e0671b3b6967
SSDEEP
1536:9POZQ3xawGfOcnJ/n81oz4BjucXrIFWv8jiXOUck:ZO8IwFWJ/8W0B7v0iXOUck
Checks for missing Authenticode signature.
resource |
---|
cfdfc2f8b2a2192b76504bf5df1d1cc4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
Qy001Service
Qy001DoMainWssk
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE