134b3bd1fa4c0d6a8bedb758fc0b3ab3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

134b3bd1fa4c0d6a8bedb758fc0b3ab3_JaffaCakes118
Size

60KB
MD5

134b3bd1fa4c0d6a8bedb758fc0b3ab3
SHA1

990a35a2f8e14d2a7916297885013012ffcd4cf9
SHA256

081058cc9068bfa8dbc6228523777dbf53d89c3ab3a07652490b432cc367f8c4
SHA512

623fb461be066b1d0b98f3bdcc7694257c03d4079d9dbb2a5b954bb9f11be51c397e0769590cf9bee4ee5a5eeb4c8d019ae73cfa967eaecedd12afcc3ae61286
SSDEEP

768:SYR1I2cXJVunivqquJwrNU1IImj+vkD+5mTfM26EIAB24utwvho:dV0JVuniluJwri14jsFubuuvh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
134b3bd1fa4c0d6a8bedb758fc0b3ab3_JaffaCakes118

Files

134b3bd1fa4c0d6a8bedb758fc0b3ab3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3aa63ed5b39a521c01dd2724a79f5fc8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
Beep
HeapAlloc
GetProcessHeap
HeapFree
CreateTapePartition
SetEndOfFile
CreateFileA

Exports

Exports

bergelmg

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 501B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ