Behavioral task
behavioral1
Sample
c283136a291c892fd0b671bf0f63adc2_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c283136a291c892fd0b671bf0f63adc2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c283136a291c892fd0b671bf0f63adc2_JaffaCakes118
-
Size
216KB
-
MD5
c283136a291c892fd0b671bf0f63adc2
-
SHA1
140f54fcbc6a37e0c98859f2656af73828a84ac6
-
SHA256
1e86f346988bd74e111bcf82c69784501fc57b3c7e1cbd651c188d54e5181e8c
-
SHA512
b979b5298ce5db1d9f8ea6e1e17f4b4e4839400b2f737192db30e0ce04a209f165dc18ff9aea24c754776d9920ace09aaa45db87d6b0119012f1636dd98f0ee0
-
SSDEEP
1536:DuEL7dKJY/aTztv1UF7+RcbpP/iOOaDXl32oNIVelT2r9ZLzi/4kgg57lmKquuli:tBKBy7+8pCOH1ch9ZLqrfwr5Apvp
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c283136a291c892fd0b671bf0f63adc2_JaffaCakes118
Files
-
c283136a291c892fd0b671bf0f63adc2_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 72KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE