C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\pdf2datareport\be5f94d3\8197a167\o8nhfi2p.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d07ad96486cdb21b326a82c2991d75a7_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d07ad96486cdb21b326a82c2991d75a7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d07ad96486cdb21b326a82c2991d75a7_JaffaCakes118
-
Size
4KB
-
MD5
d07ad96486cdb21b326a82c2991d75a7
-
SHA1
a4515e6295ee8b0d19dd9581353e9e5e8e96f03f
-
SHA256
0c15784f3fa07f0d2f0fee681595e342e02ccc315d085a07403ad0a0fdacdf90
-
SHA512
9c86fc227197a3c7197bab70e644e2aa4a721e069a1298f088153fb3cfbd2ed403978d89ae6a9c572ae37fbb28d973b2d78c2dbef929f3e78ebfff6b8269f009
-
SSDEEP
48:6aQPEU7uWTu7eH+naYxU3es2OPul80x3oKq:IXSWFH+px7q0B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d07ad96486cdb21b326a82c2991d75a7_JaffaCakes118
Files
-
d07ad96486cdb21b326a82c2991d75a7_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 167B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 824B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ