c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\cims\a08afa32\8fc9285d\App_Code.fwbvzccm.pdb
Static task
static1
Behavioral task
behavioral1
Sample
bc0c53b529599aee0f332fc6384ffa8b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bc0c53b529599aee0f332fc6384ffa8b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
bc0c53b529599aee0f332fc6384ffa8b_JaffaCakes118
-
Size
80KB
-
MD5
bc0c53b529599aee0f332fc6384ffa8b
-
SHA1
2dc79f70d32cd21e186f8e052cc49b50f4edab53
-
SHA256
e4ffd4458e41daf84c7a3a7dd676c660daa93a16d9ccf9c0b764d540d20038d2
-
SHA512
79f11f5c7228e4a71c0b62496e7f76baa1432970c3e4a9d70d38573573313341cb659db341140e1eb4b4937b41a517cf54c6ede422d757816aeb88ac64bb9758
-
SSDEEP
1536:gO7+BxXsHA0ZmnO7vB4Bnxh0A9aiSr69rotiBr69co5u+w3Nzznf1CNz5a1RgggP:gO7+BxXsHA0ZmnO7vB4Bnxh0A9aiSr6I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc0c53b529599aee0f332fc6384ffa8b_JaffaCakes118
Files
-
bc0c53b529599aee0f332fc6384ffa8b_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 4KB - Virtual size: 167B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ