a2b277e1173d4b4995321a901da86412_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2b277e1173d4b4995321a901da86412_JaffaCakes118
Size

7KB
MD5

a2b277e1173d4b4995321a901da86412
SHA1

c7eacd9488edd06694fd52b21d703b29faf91252
SHA256

9418f3d922fe1cb664d540a1372abd0f3afc681d1a11f3d7dae4a27ed1a4d03e
SHA512

4d6218c1d775c04747339f4cde4460d963a06cf9cbfd6cb523122a92a5714f66046478ac04db933dad76f62f43579d7d2f82ffe8f25eb6179a4a143b58fa4242
SSDEEP

96:tSLibx9lYvQE/d8tMxaxc68h45x2d3BaYvZHEtE5fUKQ6uSOFvw7wlvA:tBuF8b668hSNekO6KKvF43

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2b277e1173d4b4995321a901da86412_JaffaCakes118

Files

a2b277e1173d4b4995321a901da86412_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\JoseRaul02\AppData\Local\Bossland GmbH\Honorbuddy\2.0.0.5845\CompiledHonorbuddyAssemblies\Message_634692593272060546.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ