ServiceMain
Qy001Service
Qy001DoMainWssk
Static task
static1
Behavioral task
behavioral1
Sample
d9ffea521b5f7bc2ae2eea62ceaf9d65_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d9ffea521b5f7bc2ae2eea62ceaf9d65_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d9ffea521b5f7bc2ae2eea62ceaf9d65_JaffaCakes118
Size
100KB
MD5
d9ffea521b5f7bc2ae2eea62ceaf9d65
SHA1
aa17b94c3c04f4eced543fe3e0a71ed61b1e5c7f
SHA256
e868ddd0845af485a377c81e87abd56afe4c17763064ba6489da8cd1bd170586
SHA512
2aac1b501f451b91a537ade723b3456479d35d207ebd7f78549c114f1c638e9e5c8f5c9c5a1d4c1331b0d71c6fed87344e2938424f8ee8525df8b8c15361e8de
SSDEEP
1536:GPUZQ3xawGfOcnJ/n811z4BjucXrNF6v8zw8fnjZg0IRZ:SU8IwFWJ/870Bsvew8fnjZg0IRZ
Checks for missing Authenticode signature.
resource |
---|
d9ffea521b5f7bc2ae2eea62ceaf9d65_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
Qy001Service
Qy001DoMainWssk
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE