DelSer
ServiceMain
Setup
Behavioral task
behavioral1
Sample
f536ed03b486c039a696b07bfb9f3c89_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f536ed03b486c039a696b07bfb9f3c89_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f536ed03b486c039a696b07bfb9f3c89_JaffaCakes118
Size
347KB
MD5
f536ed03b486c039a696b07bfb9f3c89
SHA1
bae54c28085424a2b39a11585dc11b0c14d48072
SHA256
dc294e1b5bcf83e023f4eb612a4ceb66b95c775c8498286dfac9a8ee06ef0ac9
SHA512
c7982a6d2aaec67d19ff40b8fce35ec7b65bd5a972900f9f1d6a1c27f60721438637a8ac33b7af99a052c5bb7e4b95f5a45f2f14ff16e32769a682267d9ac533
SSDEEP
6144:DjJsaSSBpGKVb1cNwPLvoqg0R2VhPefm0ToQ+qYhikEVivxYEn4Ho:vSOpF1c2obY7yNbPnx
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
f536ed03b486c039a696b07bfb9f3c89_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DelSer
ServiceMain
Setup
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE