3cc275727b0b1d66caaed3e6a91d0ebd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cc275727b0b1d66caaed3e6a91d0ebd_JaffaCakes118
Size

44KB
MD5

3cc275727b0b1d66caaed3e6a91d0ebd
SHA1

4f7bf33d0145cf1986d108d3c470cc2eef09bcf1
SHA256

34b2efddf2949095544bdaebf261309d8da2e320b79ad623b3b4341fe7f64662
SHA512

dbd387fb951bad978362442213caf6a0a78212d512920f3510137ab94fc2166cdd3b41e47ce882308c3a0d979bc5ad12932fd1440c70740541dacedd8cd2ea24
SSDEEP

768:CoAkkDZCBiW96ob6k0ibj5hMAIwdCXwWlxS:CoxBik16jibj5hM1wd4wWG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cc275727b0b1d66caaed3e6a91d0ebd_JaffaCakes118

Files

3cc275727b0b1d66caaed3e6a91d0ebd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\Andrew\AppData\Local\Bossland GmbH\Honorbuddy\2.0.0.5883\CompiledHonorbuddyAssemblies\AutoEquip2_634711338547981207.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ