C:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\bywax\70b536a7\f477d3be\App_Web_nrda6rm0.pdb
Static task
static1
Behavioral task
behavioral1
Sample
88ee3432b78ac7ab049248d47cd24dc2_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
88ee3432b78ac7ab049248d47cd24dc2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
88ee3432b78ac7ab049248d47cd24dc2_JaffaCakes118
-
Size
19KB
-
MD5
88ee3432b78ac7ab049248d47cd24dc2
-
SHA1
93a10774494481e3c5ac38453d7f71d1c7aae619
-
SHA256
e3347fade7cac528795828d407e33a41c48cb9d0d3c872e7a1dd2f814f3ae621
-
SHA512
73362b53c3061d090a4b7336cbfbba54a12379b6d08f54b6827d58e6c1ab61524c9b0a8f3ff98018849cca0be4009273e3961c7d2a46a899c8fb7e84db1760e1
-
SSDEEP
384:C0HE3i2VPe1LRKhB31LzFIFwla5VG/UJOHTWpbPDwPhHbS00VFdCg:Cr3TV3hXLH2O+bwf0H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88ee3432b78ac7ab049248d47cd24dc2_JaffaCakes118
Files
-
88ee3432b78ac7ab049248d47cd24dc2_JaffaCakes118.dll .js windows:4 windows x86 arch:x86 polyglot
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 167B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ