def661ce285b9cfb67988350b9453c03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

def661ce285b9cfb67988350b9453c03_JaffaCakes118
Size

14KB
MD5

def661ce285b9cfb67988350b9453c03
SHA1

3d5eaa3385ff2456be0ba6268b6975f690074e47
SHA256

73eb78afb57a3c038f7eac9383b4b6e016de09d18034442f33be630f371179ab
SHA512

ec15d688622addeee4c8112f45ee170a7843d02db3e2382954a75d0f87c05d81d63f3708bfa3da6a1d60061c09089739d363ef24d860950fb609d20c8cff7cef
SSDEEP

384:j+bnmdvFhW3iyODz4dpgFiToCBrrEt3eS:6bmNl4HgW0t3eS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
def661ce285b9cfb67988350b9453c03_JaffaCakes118

Files

def661ce285b9cfb67988350b9453c03_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\JoseRaul02\AppData\Local\Bossland GmbH\Honorbuddy\2.0.0.5845\CompiledHonorbuddyAssemblies\CombatBot_634696950430097656.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ