c:\Users\JoseRaul02\AppData\Local\Bossland GmbH\Honorbuddy\2.0.0.5845\CompiledHonorbuddyAssemblies\AutoEquip2_634692286653789062.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6f699a62c3c44310924c3f967f7b691a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6f699a62c3c44310924c3f967f7b691a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6f699a62c3c44310924c3f967f7b691a_JaffaCakes118
-
Size
44KB
-
MD5
6f699a62c3c44310924c3f967f7b691a
-
SHA1
68fbfe1433e5f4eee4289560bc3dc7227b2c0a62
-
SHA256
18c95705ba39edf1657edaef5298f322f615498411c25974f464cf688bdc324e
-
SHA512
7741a185547241dc1bf9b5b23a4ce24994d01aeddb2a11360616344f607f779e90d7b4fa06bc0e9a3b73e403d787072df72a0a10c04955db7ecf4baf6045ced0
-
SSDEEP
768:uoAkkDZCBiW96ob6uFibj5hMXIwd5Xwsxs:uoxBik16sibj5hM4wdJwj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f699a62c3c44310924c3f967f7b691a_JaffaCakes118
Files
-
6f699a62c3c44310924c3f967f7b691a_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ