Qy001DoMainWssk
Qy001Service
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
0293bd44942604fd204ef5f258ae4310_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0293bd44942604fd204ef5f258ae4310_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0293bd44942604fd204ef5f258ae4310_JaffaCakes118
Size
91KB
MD5
0293bd44942604fd204ef5f258ae4310
SHA1
1594badee6554d3d3a2a84d15c655dc549bd3072
SHA256
2d4acfab90594bbbe155af4312634767b3e90c70194781c0e574451da101d020
SHA512
76d86cb81e2e2a9825c8b1a75ed0d9abf7bdb6dd2c4a8af1e44fef39e67d4df92ac740ddc41f909eb447bab80a3114ce73b4f34d4faa546e9e51bafd343563c4
SSDEEP
1536:XKQ3hQ3BVwGfOcnJf2xqxG4IntFSr/rA19+NWy5JBZ:6OkbwFWJfaKTIsAeNWy5JBZ
Checks for missing Authenticode signature.
resource |
---|
0293bd44942604fd204ef5f258ae4310_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Qy001DoMainWssk
Qy001Service
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE