C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\odeonent\root\d180f301\3c2421\App_Web_category.ascx.6bb32623.0krayotp.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a39b7ac06a5638ebfee8a970a9f6ea61_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a39b7ac06a5638ebfee8a970a9f6ea61_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a39b7ac06a5638ebfee8a970a9f6ea61_JaffaCakes118
-
Size
11KB
-
MD5
a39b7ac06a5638ebfee8a970a9f6ea61
-
SHA1
ea229b721e3b6acd5d48c2ed7a862f0a1e69f6d2
-
SHA256
36ec5c874c3ca61b0f3fab0b36d09f19e278b93004e4f9c2602588cd758b526c
-
SHA512
6c2b37b946f2767da70003dfb2e369c98a0f2706cd803534887cb2bea34d336203d1827fa35ba76e1986e7af0303fb1445c813966098eba7d0d69aed94fa6d64
-
SSDEEP
192:kBnc+Xriv7rvUaohtCpWjGevckYIWGLAsVaw4Er7C8k2lC1mmEi5W:4fev7rohjeGLAsVaDt8k241bI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a39b7ac06a5638ebfee8a970a9f6ea61_JaffaCakes118
Files
-
a39b7ac06a5638ebfee8a970a9f6ea61_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 196B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ