urelas | f2c9c2ffedd3c1faa51e9ec504f7edfc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f2c9c2ffedd3c1faa51e9ec504f7edfc_JaffaCakes118
Size

107KB
MD5

f2c9c2ffedd3c1faa51e9ec504f7edfc
SHA1

ec8b1bf8005f6a240a58a25f625b4ac40ad834ee
SHA256

766d27d1117defc5d6324f2f2872b7da635da13907f3f91e9745b7ee0f449541
SHA512

0123093f52235b77335210f5cde4cc32ad89c0fdd2a6b5eb8d9714d70341c38af2f8033e484071789f74b7852555a2955f3ed41637690ec3fff5ba639f05a6cd
SSDEEP

1536:3JoHHwAnTtIBcNCk+syhonfC3GNKcK7+sWjcd8sWL64TGFM:4tCc+/h0fmSid81L64TGa

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2c9c2ffedd3c1faa51e9ec504f7edfc_JaffaCakes118

Files

f2c9c2ffedd3c1faa51e9ec504f7edfc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 65KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

OPSDGWFD
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE