DelSer
SerxiceMain
Setup
Static task
static1
Behavioral task
behavioral1
Sample
602505e64b64106ea501b1ab69ee11ce_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
602505e64b64106ea501b1ab69ee11ce_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
602505e64b64106ea501b1ab69ee11ce_JaffaCakes118
Size
169KB
MD5
602505e64b64106ea501b1ab69ee11ce
SHA1
a3da3853fc896417a207ca26cc0a7c54e9535a10
SHA256
6a17a595a813b69f805c7ac368f56792f9a55e9a769ca13c52b5ec39affcb609
SHA512
a60d33e7e08e5d3fc5fc56dcf887477b9f6b0380ce2489c113dbc9796663d853a918450e9193976d0b2e9027249277cfda7891594fb1bfefe4fc7c5d784dd57f
SSDEEP
3072:eDtb+l46QACi9dUghrL2lvQjGoCtf4paWS2xLusQFaOx:eh6l4zAP9dPhrLNctQpaWXusQFaO
Checks for missing Authenticode signature.
resource |
---|
602505e64b64106ea501b1ab69ee11ce_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DelSer
SerxiceMain
Setup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ