urelas | c5710cd37534a2f592a0ec72192f47a7_JaffaCakes118 | Triage

Sharing

General

Target

c5710cd37534a2f592a0ec72192f47a7_JaffaCakes118
Size

510KB
MD5

c5710cd37534a2f592a0ec72192f47a7
SHA1

f9fd8e4add0c3f6adf53721b2f647833d3e1a324
SHA256

5955bdc3289f08747c240c65ea3593a28b83cf33277b95627e44cd7edd7dfac9
SHA512

35ab4937ba3c2e3fac36f7d9e2c96505c9c8242248e7da18f626305e1e02b4d5299cc826e19e46cde9a9585b47c0b7990306a2bde2af86f9c38e9e9c6fdecd36
SSDEEP

12288:kdBNKTCqqwXCcdgT89+MvA+BisqYpxHtMz:kLjQC+fs0C

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c5710cd37534a2f592a0ec72192f47a7_JaffaCakes118

Files

c5710cd37534a2f592a0ec72192f47a7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 159KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 267KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ