urelas | 2b38a2d7de7de647a99cc5fae2ea0d2a_JaffaCakes118 | Triage

Sharing

General

Target

2b38a2d7de7de647a99cc5fae2ea0d2a_JaffaCakes118
Size

168KB
MD5

2b38a2d7de7de647a99cc5fae2ea0d2a
SHA1

b64522853d584a0471096d2debdfd73a5cd69efe
SHA256

c6f7e1f660dd5e7464b1421aff8c77b4a67a6e1dbaaedb739b03e41d9dff8f60
SHA512

c201f8f310a14026f6c3d34a7b94a945be215e81729d6d66a94c11c1c76e56fc356536b7991c9458477ec2ba413e43245f1f78f448da564923b2df20ccf6d997
SSDEEP

1536:eADA0Wbt1931D2P7BWLQ4zR4LUKMcPHFE3HP/GTW65CGEgvpxyTfe:eADA0Wc7UJ6LZMaHLW65DE8pxW2

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b38a2d7de7de647a99cc5fae2ea0d2a_JaffaCakes118

Files

2b38a2d7de7de647a99cc5fae2ea0d2a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

cxbvjsnd
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE