Behavioral task
behavioral1
Sample
c8972305eaf4f2ae11571d0f265769d8_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
c8972305eaf4f2ae11571d0f265769d8_JaffaCakes118
-
Size
184KB
-
MD5
c8972305eaf4f2ae11571d0f265769d8
-
SHA1
d4923e717f73e6e16969d723b8c6a8abff0299f0
-
SHA256
5877e3b7f7481004bf6e91db4c9a0fb08e0ce9fe8ec5ba60a9e889d4665905b8
-
SHA512
475f284abdffe983e42b034c2c4c5b84f474a054597e8da44f5e95b0675a189d25ff26be635df4c515ebd4c4375e24974f80593d7e6afecac109c0254beba07a
-
SSDEEP
3072:1tpCP+/oGvWSldHy64T9fQmZ+luXwy2f9LDh5Yc:Tp+IrvNyhhh4yfWvMc
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8972305eaf4f2ae11571d0f265769d8_JaffaCakes118
Files
-
c8972305eaf4f2ae11571d0f265769d8_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
TYSGDGYS Size: 128KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TYSGDGYS Size: 55KB - Virtual size: 56KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE