45ed30fa88ebde2caafbf5d28584d4df_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45ed30fa88ebde2caafbf5d28584d4df_JaffaCakes118
Size

76KB
MD5

45ed30fa88ebde2caafbf5d28584d4df
SHA1

942ca2ba316e0c73beed5ee148f0c957f71d3842
SHA256

d6a1d7abd23bfed635e3ba7fa2687fe914d6c729a858460e6a09c52756e350e9
SHA512

b95d91f1b33981ca6729529cc8fdf8015892f715dc5e23b1749deea0ad6ebf07f21f9d4be80991fcdbfe37b8cb0aad873e7461cfff4c234a740587bfe4c4fece
SSDEEP

1536:H1ldklHf8y+ePvmem0qfQkLtQ/3pqP8wu+KzMMh0NaEO9+5c:H3o/8y+ePvmpfQkLtYdUMh0NaEO9+a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45ed30fa88ebde2caafbf5d28584d4df_JaffaCakes118

Files

45ed30fa88ebde2caafbf5d28584d4df_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\Ben\AppData\Local\Bossland GmbH\Honorbuddy\2.0.0.5883\CompiledHonorbuddyAssemblies\pallyhealer_634727467546403850.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ