f9088813e6833726c34ef0c34e824b1f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9088813e6833726c34ef0c34e824b1f_JaffaCakes118
Size

36KB
MD5

f9088813e6833726c34ef0c34e824b1f
SHA1

5805696da28dbe31054787e1ac49e0cc6a779bcc
SHA256

17a4dc89a0ab5656622a7a24999a95136b46a2d89519660c2317da066ba54402
SHA512

5db802776bda502f04dc0495d1dd99d4f674aed3e0e401fddcd3a3bf4bc0dc9b5958abe2ba90bfadb0ac0ebce12f924542c2f64a2f7aaef05cdc1a4515adb989
SSDEEP

384:I4Xo8VL4FkiFYn5dU9VEXOMx0bsBoXKhMFdnBlkYzmQDwguLaCbRC:XDq3GXRoXKhhU0gup8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9088813e6833726c34ef0c34e824b1f_JaffaCakes118

Files

f9088813e6833726c34ef0c34e824b1f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\António Rocha\AppData\Local\Bossland GmbH\Honorbuddy\2.0.0.3626\CompiledHonorbuddyAssemblies\Default Rogue_634300305846474600.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ