2e23ef0f1b7ac150263cac6ed90bf650_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e23ef0f1b7ac150263cac6ed90bf650_JaffaCakes118
Size

32KB
MD5

2e23ef0f1b7ac150263cac6ed90bf650
SHA1

f7b4b5ee6207c996ceda38fcde23a21598fe9329
SHA256

71dea3715c754f4b947ab45212a47f00f64e0a28faaa69d1145675f3be537487
SHA512

f9d28c201573238b2c210435bc9c2925c171d5ac5b09989e6be72b14458f9903d9d34dd2ee774da2edd034ebdda041a62a37816a4959b734b740dc4287aab099
SSDEEP

768:1SQBh97nprAqT+VhaHEpQpSjabkMJXXIV7BNtUrU8IlB7AP+QuxkS:sQBh97nprAqT+VhaHEpQpSjabkMJXYTf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e23ef0f1b7ac150263cac6ed90bf650_JaffaCakes118

Files

2e23ef0f1b7ac150263cac6ed90bf650_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\JoseRaul02\AppData\Local\Bossland GmbH\Honorbuddy\2.0.0.5872\CompiledHonorbuddyAssemblies\Talented_634703848098281250.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ