DelSer
ServiceMain
Setup
Static task
static1
Behavioral task
behavioral1
Sample
fb8a3011789ac753e6171f939e45a9ac_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fb8a3011789ac753e6171f939e45a9ac_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fb8a3011789ac753e6171f939e45a9ac_JaffaCakes118
Size
144KB
MD5
fb8a3011789ac753e6171f939e45a9ac
SHA1
cbdaea2c8074210167a4d3477ab67fbc333fb136
SHA256
02387428d4be6dc6496b4c3ac043a1567238c8ad770fd40200337f99385ee4e7
SHA512
56850bb3414417e240b1378af1cdc3401d95746e8903546822cc17d290f8cc0ad63771540c84c96f6d7797139aa4b140d00a76dd3d72c644147cdef5267da145
SSDEEP
3072:LtsxYQz6+nr/jQGUHyxIi9HafWt0fKbPILL+Z:L+x3rbQGUSii9HcK0fqIOZ
Checks for missing Authenticode signature.
resource |
---|
fb8a3011789ac753e6171f939e45a9ac_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DelSer
ServiceMain
Setup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ