c:\Users\JoseRaul02\AppData\Local\Bossland GmbH\Honorbuddy\2.0.0.5872\CompiledHonorbuddyAssemblies\RareKiller_634733972152958984.pdb
Static task
static1
Behavioral task
behavioral1
Sample
28675e35e25109444ef7b3cea5aac1f7_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
28675e35e25109444ef7b3cea5aac1f7_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
28675e35e25109444ef7b3cea5aac1f7_JaffaCakes118
-
Size
160KB
-
MD5
28675e35e25109444ef7b3cea5aac1f7
-
SHA1
092461ff2cfe404bb535acb06b0632eb005a3da1
-
SHA256
d027f367f0494c6fe6dc47ff833147fc002618b96fe56412338ea697f1b1cad9
-
SHA512
0a4fcaf5558f1fe2b19dea1552e489bd4516fce985afd95fa8fb434d5bbe13a2bbe8309c591010943f9dbac9d15aa1d5ec0a0ed00d2f8d6cc9b6d5e29d5b38ce
-
SSDEEP
3072:+a0sy2vujww1q8GAg+9MGTslcpn4RJbZMYo9a:vxGglcp79
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28675e35e25109444ef7b3cea5aac1f7_JaffaCakes118
Files
-
28675e35e25109444ef7b3cea5aac1f7_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 148KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ