DelFilex
Install
ServiceMain
Unstallx
Static task
static1
Behavioral task
behavioral1
Sample
f28a8184ded5b24491af9095e4ba9193_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f28a8184ded5b24491af9095e4ba9193_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
f28a8184ded5b24491af9095e4ba9193_JaffaCakes118
Size
127KB
MD5
f28a8184ded5b24491af9095e4ba9193
SHA1
ebc8f500dcf75abef1f11da9c9f4156faf250101
SHA256
136259e2dcbbe010ef4dcec62525aea443c88710a4d0d9e074b4fef832e81f1a
SHA512
79106800924b62878e503dde09498725f7cd4755f71db5dcea5d84c90ba2db3090a022c743d039a06bf1859d3ee761b3fe2b63c25237bb53b072ba41ac9f6aeb
SSDEEP
3072:NWpDtUJAyg0Wui7C/FDUZHcGvtd14/4Lyk:NWpDt5mWui7C/FDUZHxtd14/+
Checks for missing Authenticode signature.
resource |
---|
f28a8184ded5b24491af9095e4ba9193_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DelFilex
Install
ServiceMain
Unstallx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ