Qy001DoMainWssk
Qy001Service
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
389e97eba7c5a1e8872fe4e77624bd07_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
389e97eba7c5a1e8872fe4e77624bd07_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
389e97eba7c5a1e8872fe4e77624bd07_JaffaCakes118
Size
92KB
MD5
389e97eba7c5a1e8872fe4e77624bd07
SHA1
6ac41275a835f21203f27ca1187784ae1a26d26c
SHA256
e50245d876a595f6730e701cf49636338c20cb50fa68256d1b2d1aa5f6bdf3d9
SHA512
e396e9ef18231c87ca2d42cdc4e6a0d585fb4b58774735b03276100385850e7a22b861a14731d3b773b14fa2d471b57f2cf1dbd21e51e90cae5c0c47d49e9949
SSDEEP
1536:fKq3hQ3BVwGfOcnJf2xqYG4IntFSr/yAi9++jFpzVMY:iAkbwFWJfa7TIdAj+jFpzVMY
Checks for missing Authenticode signature.
resource |
---|
389e97eba7c5a1e8872fe4e77624bd07_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Qy001DoMainWssk
Qy001Service
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE