Behavioral task
behavioral1
Sample
14614857ffac13d2d6e77fe68a14ddc7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
14614857ffac13d2d6e77fe68a14ddc7_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
14614857ffac13d2d6e77fe68a14ddc7_JaffaCakes118
-
Size
216KB
-
MD5
14614857ffac13d2d6e77fe68a14ddc7
-
SHA1
d0d82477d8730e52a26d0b5288632d3de1aa148b
-
SHA256
16a2186934d71b03abaa44620d5c53727194cc2a8f2613d659161c5e422069c9
-
SHA512
a3cf245b4ad06c801608d407d81e26d8c495151d3122c28212883fd28f03c57864939c8eb0dc628babf6287fb2f3388e616f0d531776a861c67c92461bed3797
-
SSDEEP
1536:DuEL7dKJY/aTztv1UF7+RcbpP/iOOaDXl32oNIVelT2r9ZLzi/4kgg57lmKquulQ:tBKBy7+8pCOH1ch9ZLqrfwr5gpZp
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14614857ffac13d2d6e77fe68a14ddc7_JaffaCakes118
Files
-
14614857ffac13d2d6e77fe68a14ddc7_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 72KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE