3a5ac721c80d306dba6e26b6c78137f9_JaffaCakes118 | Triage

Sharing

General

Target

3a5ac721c80d306dba6e26b6c78137f9_JaffaCakes118
Size

28KB
MD5

3a5ac721c80d306dba6e26b6c78137f9
SHA1

48a223e34e7831bbce28158b91ae8cd07aa8b77c
SHA256

083affb3972dacd4f03def12af98a7665fd609ad828f2d78a69d3d49e1906568
SHA512

6da10ac8748fc8249210112ca26e555e5c021d49292b25fa5d23234fa92b7614bbd4b280974e678b37f6e3424445b46d89da526d70cd445f7bfc10a3b074f4bc
SSDEEP

192:jKYbNN8d63/5Qyq/R/dSxWNYwkrVRjjjCm50jS0KP0O3GGJnfCcHlRI28Ry:DSUQLLSWYwUffCXOY23JfvT9P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a5ac721c80d306dba6e26b6c78137f9_JaffaCakes118

Files

3a5ac721c80d306dba6e26b6c78137f9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\JoseRaul02\AppData\Local\Bossland GmbH\Honorbuddy\2.0.0.5845\CompiledHonorbuddyAssemblies\CombatUseItemOn_634688056917412109.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ