E:\Axf\AgsEngine\Editor\AGS.Types\obj\Release\AGS.Types.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2b84a1fe4f1f955638f8de811e45e5f2_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2b84a1fe4f1f955638f8de811e45e5f2_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2b84a1fe4f1f955638f8de811e45e5f2_JaffaCakes118
-
Size
192KB
-
MD5
2b84a1fe4f1f955638f8de811e45e5f2
-
SHA1
4abc39424d025ac484cb0d9e459851ca9d42b32e
-
SHA256
60e096d350b85e053b0cc4ccdaf6a41ec04fd4a87f22d2c8044ffa19caf12cc4
-
SHA512
26b4ad3d5bc93ba882a88464f68ea3c70a82fddbfac5aa3818b8db455008b0d0596772f7518ca9c7b95a4f6850bc72664796fec003dd227d7bfc5dd6cb3a1a57
-
SSDEEP
3072:RkiIzDYazOX/VqH+BBKmHBROws4Rtfd4ti/PdWmoeA/S4ykvKac39:nnX/0HGBRO5s4s/EmbA/S4Nts
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b84a1fe4f1f955638f8de811e45e5f2_JaffaCakes118
Files
-
2b84a1fe4f1f955638f8de811e45e5f2_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 190KB - Virtual size: 189KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ