DelSer
ServiceMain
Setup
Static task
static1
Behavioral task
behavioral1
Sample
1866d0ad14bc9cadd1ce2abc4d188392_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1866d0ad14bc9cadd1ce2abc4d188392_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1866d0ad14bc9cadd1ce2abc4d188392_JaffaCakes118
Size
175KB
MD5
1866d0ad14bc9cadd1ce2abc4d188392
SHA1
052310140749bae1b4598ee2ec2778102550ffaa
SHA256
4f06cb5c9f2d1b3f3f40eac77eca270bc72abd26a773cc3145498b3d1a354df3
SHA512
f063215b6c0c6bced4a40b4e62edc3b7385cde99b1e628941f603a85a89583c1add39dedfe3ebe52fea574eac10a69309e8c32a1152f2c2d479328ffc8982f14
SSDEEP
3072:TnXpxSULlZBioQcHkLIY+IyuRTnxClZPmlWRkNpZHPImtS5Es2K9Tbw9yDx5Km:L7LlZ9QcyWuRrIPmlsk7BPXS5Es2ATbZ
Checks for missing Authenticode signature.
resource |
---|
1866d0ad14bc9cadd1ce2abc4d188392_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DelSer
ServiceMain
Setup
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE