Behavioral task
behavioral1
Sample
0b1178b025587f68088b8ae13631a463_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
0b1178b025587f68088b8ae13631a463_JaffaCakes118
-
Size
780KB
-
MD5
0b1178b025587f68088b8ae13631a463
-
SHA1
b1912b0bea4fcb2c7d28fc79a5aca1ca0d5a2509
-
SHA256
748684fef711702dde1c4569bf6eeeb9bda95971a687479de2abe628e83c462f
-
SHA512
f9c60e3b8b6c0c5ee9dbcf6484543d5adbf01d10f294c77863f98ee85b562169cb2fabc58b2c6d551b85c56e06ab0fcf0ed5122cfb3afe91a6c9bbe04dd09da1
-
SSDEEP
12288:YOlx4kk9HKda4YfM/1T3PPSnPI2VAWNDTJHq9DIMTW8c18P:YA4Ya1fQzPPSnPFqWtTJK9DIMTW8JP
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b1178b025587f68088b8ae13631a463_JaffaCakes118
Files
-
0b1178b025587f68088b8ae13631a463_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
IOKGDTTY Size: 464KB - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IOKGDTTY Size: 310KB - Virtual size: 312KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE