c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\soma\65344c74\b64dc2eb\App_Web_yi2edldu.pdb
Static task
static1
Behavioral task
behavioral1
Sample
212abb69dbfb80c3789e399770279d09_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
212abb69dbfb80c3789e399770279d09_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
212abb69dbfb80c3789e399770279d09_JaffaCakes118
-
Size
204KB
-
MD5
212abb69dbfb80c3789e399770279d09
-
SHA1
d25718ac09c52c87fab576a76e5949924d62e237
-
SHA256
4c366c9951b50b5ba0606cb76d2a489c58d850b30bb4ce3b40bdb869489da198
-
SHA512
9599baa935b2f721e5d4f4e421a7349b220b75b182320323094e6b581ad78e6d9bb3211b53580d095997bc14b5de0e67ea1d0b8b806d804f203943c8e58f856b
-
SSDEEP
3072:rnKcZJE8Cm5T/bE2Gw0dcOpsf1WHeeiFBARfYkAjbky2LKW5wupW8CwUQtv81b:7KcTMeV10dc1GqaUQZ81b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 212abb69dbfb80c3789e399770279d09_JaffaCakes118
Files
-
212abb69dbfb80c3789e399770279d09_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ