c:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\root\b62665c6\53b48abe\App_Web_xklqfqlq.pdb
Static task
static1
Behavioral task
behavioral1
Sample
75ae3047d5584a0ad560f9eefcfc42a2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
75ae3047d5584a0ad560f9eefcfc42a2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
75ae3047d5584a0ad560f9eefcfc42a2_JaffaCakes118
-
Size
239KB
-
MD5
75ae3047d5584a0ad560f9eefcfc42a2
-
SHA1
73a98472bd65612781fe380322ddff4df4a1142d
-
SHA256
529aa72da5932ca91daa80fd5716bd27a6a02dd030f0becf4b1e7c70fc235ee5
-
SHA512
c6a3893b770b670470cd2bf4078fa780b621fbda3bc97c21f66fcdbee42b9c6c0c05e5eb3174fd702af98b75c749d61798655814934e62b822c8fd1f25bc41bd
-
SSDEEP
3072:iuFRpWQ3+I0d+rvkQqTA16LXTHCifxhwU7NKAmzcCGJExenS70nK3+C:Nvk216LXTHCifxhwU7NK5zFSk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75ae3047d5584a0ad560f9eefcfc42a2_JaffaCakes118
Files
-
75ae3047d5584a0ad560f9eefcfc42a2_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 237KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ