ServiceMain
Qy001Service
Qy001DoMainWsSk
Static task
static1
Behavioral task
behavioral1
Sample
39389b86a6205ba3c91787fe85ba13c0_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
39389b86a6205ba3c91787fe85ba13c0_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
39389b86a6205ba3c91787fe85ba13c0_JaffaCakes118
Size
96KB
MD5
39389b86a6205ba3c91787fe85ba13c0
SHA1
c6b591903fa4791e5dcf2f803803ce63e56ea404
SHA256
bcdceb47f8acf56916297f6263f0e04ff319872e3a0c542c55c58a69e6331047
SHA512
2df77ab6d1d1e730d25ff8d2b40c0cc8680c1ed295c14ef984287e83466ce8abe20ae6829dbe4a17c2ca48f21b2663da563ebdc3f25b29eadf9d48e345492b5f
SSDEEP
1536:k3/mQ36qoufOcnszJM+lT4oSEfr03oVmB:s/d/otWszm2UoPVm
Checks for missing Authenticode signature.
resource |
---|
39389b86a6205ba3c91787fe85ba13c0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
Qy001Service
Qy001DoMainWsSk
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE