Behavioral task
behavioral1
Sample
cfd1cfa1ff156db43f63b83086095bbe_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
cfd1cfa1ff156db43f63b83086095bbe_JaffaCakes118
-
Size
195KB
-
MD5
cfd1cfa1ff156db43f63b83086095bbe
-
SHA1
d9a2503b662f4ca16669b8202dedcbd593fb4007
-
SHA256
3c8acdcf2b5d726d4e810006470ed481a2cf3b995ecbe9ba7ce9dd2750964692
-
SHA512
5563483845eeb3af790acb7929a5c5fd0450e4cd0f49d61fc7faf656a6839eac5b912580e1aacff73686ec6afe0bc9eb0a7e74e77a0dc63cf7dd9be4fe635b5c
-
SSDEEP
3072:gAwixCZ6Sh77R2Gpf606U8v0e7OIgPDFIbbzhPM67fIhUA:gExhk7rh7NEOIYWlPM6r6UA
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfd1cfa1ff156db43f63b83086095bbe_JaffaCakes118
Files
-
cfd1cfa1ff156db43f63b83086095bbe_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
GYSGDTTE Size: 137KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GYSGDTTE Size: 54KB - Virtual size: 56KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE