Behavioral task
behavioral1
Sample
2cdba1883ad901c226d88bf6399e04e8_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
2cdba1883ad901c226d88bf6399e04e8_JaffaCakes118
-
Size
197KB
-
MD5
2cdba1883ad901c226d88bf6399e04e8
-
SHA1
17c648568591b0e421decf35bec7d4805ae6441f
-
SHA256
ba2e63e4ad2987080a58a3a0baf5e31188ecd37ab3611e96bf7f88e2ef0b6dea
-
SHA512
15a7a14703a81d4b04a96d081a0aae1df7f2ca0b45a9c5a5394bef1aa4b642075b057d490f63ec9d1fb3c49597d4a0d9ca009c976ca95f532c6e1844eb665275
-
SSDEEP
1536:kUqOou3xsUK2ZM+o5RtWVszFiiDsR7ToP/7OYhVWU2gzeNHYoIeC34/PC7Ruz3hG:3yuTOfolTlYHB+HYoIe+t7R8fU6n8z
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cdba1883ad901c226d88bf6399e04e8_JaffaCakes118
Files
-
2cdba1883ad901c226d88bf6399e04e8_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UIJDHTEY Size: 143KB - Virtual size: 152KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UIJDHTEY Size: 47KB - Virtual size: 48KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ