ServiceMain
Qy001Service
Qy001DoMainWssk
Static task
static1
Behavioral task
behavioral1
Sample
f53ad8b8e2ebd83f58dae4760ad56988_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f53ad8b8e2ebd83f58dae4760ad56988_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f53ad8b8e2ebd83f58dae4760ad56988_JaffaCakes118
Size
100KB
MD5
f53ad8b8e2ebd83f58dae4760ad56988
SHA1
3c99b16334b245e47be550aba4d1265c2bc76dc7
SHA256
9f7509dbd98e2ae8e0628e21725486b6edfaf9f6730fe38b9654e96cdd807522
SHA512
0b9080df97bea27da0977fe4862add4e6663da2ba4e62530e340b85d61dd2a3f6269d33bccf198996eb615ccd1dc4ae8cee34061af92086b99fba696bad4b55d
SSDEEP
1536:GPUZQ3xawGfOcnJ/n811z4BjucXrNF6v8zw8fnjAKzirf:SU8IwFWJ/870Bsvew8fnjAKzirf
Checks for missing Authenticode signature.
resource |
---|
f53ad8b8e2ebd83f58dae4760ad56988_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
Qy001Service
Qy001DoMainWssk
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE