C:\Users\Stefan\AppData\Local\Temp\Temporary ASP.NET Files\evalexhybrid\1332a5db\89a81673\App_Web_7ejwynph.pdb
Static task
static1
Behavioral task
behavioral1
Sample
eae088560a607b9b6d9d0b7d2f88d6ae_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eae088560a607b9b6d9d0b7d2f88d6ae_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
eae088560a607b9b6d9d0b7d2f88d6ae_JaffaCakes118
-
Size
148KB
-
MD5
eae088560a607b9b6d9d0b7d2f88d6ae
-
SHA1
54f4aa5db46fa27c58be88e700bd51e1212e27b9
-
SHA256
477ce80fc389ad8ae94b86281b1159f6d2ef85e79f9953bbac29f598f5e0345e
-
SHA512
4b3f8adf3db48161631c4ad20681df2010a6b2b7cbb8032555afe3fcf367d1a7b1abf07567e6757454fa2a852f7cb4141fa15132bb6fc4eb372abb9759dfd0db
-
SSDEEP
3072:iStp+mmGawU3xNTQ3CQS69ewLuDhXiRaT:UmmGawU3xNTQ3CQfviDxv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eae088560a607b9b6d9d0b7d2f88d6ae_JaffaCakes118
Files
-
eae088560a607b9b6d9d0b7d2f88d6ae_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 4KB - Virtual size: 163B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ