Behavioral task
behavioral1
Sample
9fdecb63e930f45922422db457edb0be_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9fdecb63e930f45922422db457edb0be_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
9fdecb63e930f45922422db457edb0be_JaffaCakes118
-
Size
180KB
-
MD5
9fdecb63e930f45922422db457edb0be
-
SHA1
ea0b085b8220eca209922c4121c9e105328178b3
-
SHA256
76826044c41b27ae934a6d024fc06761aabe6a9783c4b2f4ab8664770df52409
-
SHA512
12d8a77fb24024d673a02e51d24944f9520648671723244a9e0a4915f901dc4079a2054daa2eec1993bb821e1ac09c70acad144d6d19e2388f797c6063168679
-
SSDEEP
3072:HJYC4U+j4jlL77mbzqa32UzIP5u5MhpEnP:pYC4U+j4xL+RmUzK5jhpEnP
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 9fdecb63e930f45922422db457edb0be_JaffaCakes118
Files
-
9fdecb63e930f45922422db457edb0be_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 159KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE