5e58f307dc12e3be998419f7d57b60b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e58f307dc12e3be998419f7d57b60b2_JaffaCakes118
Size

5KB
MD5

5e58f307dc12e3be998419f7d57b60b2
SHA1

c5ab832c4f86374217e5ff856641f08332115381
SHA256

33bb46f30ed9dff80daeeab76776cf2e00841d9983cda1a0c47e9eb9516a3c99
SHA512

89b0c7ba7299e2b1bc8a37aaf50352740e3c00ac0aa658a0e793a6fbb26559c9ec789da9181b7a0f8519e43f5e2fa6eab65a1b5b1d04d72362690c206c82d650
SSDEEP

96:fAPbtvKaqp2VZ4T8aJZZFmSEwGYVr4Epu:fAvRZ4T9Zfa2u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e58f307dc12e3be998419f7d57b60b2_JaffaCakes118

Files

5e58f307dc12e3be998419f7d57b60b2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\mike\AppData\Local\Bossland GmbH\Honorbuddy\2.0.0.4620\CompiledHonorbuddyAssemblies\Gatherbuddy2_634442092520831960.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ