urelas | 2507b188b4ca26540602e77b38cda045_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2507b188b4ca26540602e77b38cda045_JaffaCakes118
Size

506KB
MD5

2507b188b4ca26540602e77b38cda045
SHA1

2b35377b376a2c1614b6b52c2dc7e6ea19eafda1
SHA256

ac3aec23fc611d99eefaf24659c5b4955f2199b0e831bfaf70d9758bb0f80f92
SHA512

7f1a5be10e3e89cbb19e594bd25e950003d25b617952922ade05fb35a3b1fec89b0fa9a40469d8b1ebcf48cbfcf28f18c102a317f6d5f20a2027842932fd9da0
SSDEEP

12288:bTdBNKTCqqwXCcdgT89+MvA+BisqYpxHtK:bTLjQC+fs08

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2507b188b4ca26540602e77b38cda045_JaffaCakes118

Files

2507b188b4ca26540602e77b38cda045_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 159KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 267KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ