111111111111
ServiceMain
Qy001DoMainWssk
Static task
static1
Behavioral task
behavioral1
Sample
d9e314a25818e0c46556de6900766a24_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d9e314a25818e0c46556de6900766a24_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d9e314a25818e0c46556de6900766a24_JaffaCakes118
Size
89KB
MD5
d9e314a25818e0c46556de6900766a24
SHA1
a2cce10d7ec58beddd4ef1e7e664ac091c68b6bb
SHA256
4d59353944de81897f29764c74dd107e25109a3f76602e7f5a8c1455fde2da09
SHA512
8e6268037828e69a7402c7f9a19ae8270104fc4dff34339402161b71f0b1fffd17988d5b01703786c7f965b0c9f926831c1a2dc5839a43008cf816b51f0be8dc
SSDEEP
1536:4PjZQ3xawGfOcnJa8885z4BjucXrfHcLE4um:4j8IwFWJaRc0BlcLE4um
Checks for missing Authenticode signature.
resource |
---|
d9e314a25818e0c46556de6900766a24_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
111111111111
ServiceMain
Qy001DoMainWssk
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ