c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\coachingdatatest\2a183084\627f78b2\App_Web_h3x0k8u8.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b116b5acbcfad738cd804183fc46bd4e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b116b5acbcfad738cd804183fc46bd4e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b116b5acbcfad738cd804183fc46bd4e_JaffaCakes118
-
Size
11KB
-
MD5
b116b5acbcfad738cd804183fc46bd4e
-
SHA1
90f1ffef632b65d60a5ea127899d61b5c9680ac9
-
SHA256
f9e8b8e3d1e65546de6545717c3e0685bcb3b3292f020177ce746c9a0611361b
-
SHA512
a6770bbf165d15345ff6c5b0ed8b1f23569762366f1c7122f545507ac3e67100a7d2b44381b616f1a1cc50231996f12fad63daeb4cdd0e5ec63e50e2eb80559b
-
SSDEEP
192:m8mySyNVLzQG2o76eKIitjmpWjGeeb+LRKh2aG8XLzyHEMER2O5F/9bhNw:LSyNVLzQlo+eJixheqLRKh2arLzMEM4F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b116b5acbcfad738cd804183fc46bd4e_JaffaCakes118
Files
-
b116b5acbcfad738cd804183fc46bd4e_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 178B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 640B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ