Qy001DoMainWssk
Qy001Service
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
ebd8730a3cff7dce71be8167427245e2_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ebd8730a3cff7dce71be8167427245e2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ebd8730a3cff7dce71be8167427245e2_JaffaCakes118
Size
92KB
MD5
ebd8730a3cff7dce71be8167427245e2
SHA1
eec63a0af6a201d33581b5e1977df5f9f39e03a4
SHA256
27869fc5f40306075a0e044ed8fbd5272996238cb896bd6fcb94ce99a381cd97
SHA512
eb2f85717c95df8ec2074b48c23147f157a103e9a81dc89903c6537d47e33b9aac7dada3bf4c4fd8b5cc371fff5c70bbd21d688b29c16f8ec761090f38feebc9
SSDEEP
1536:fKq3hQ3BVwGfOcnJf2xqYG4IntFSr/yAi9++jY20yvT:iAkbwFWJfa7TIdAj+jY20yvT
Checks for missing Authenticode signature.
resource |
---|
ebd8730a3cff7dce71be8167427245e2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Qy001DoMainWssk
Qy001Service
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE