Behavioral task
behavioral1
Sample
ea893657c3807e0b517ede8a64beeac4_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
ea893657c3807e0b517ede8a64beeac4_JaffaCakes118
-
Size
235KB
-
MD5
ea893657c3807e0b517ede8a64beeac4
-
SHA1
c5dabdc84044acb09983d783d884c643f04e8624
-
SHA256
9af5d8a13760a5b69ec7af7d7851de438c4ad903c08b1b6e0e4d272425a02c52
-
SHA512
46c141bb9de4ae7dac657d2697b0ae32f9cca66c67be5d938fe508502d9075f15bca4842e62e5aa3e7a53b4d5007bbbb1deb24c5d51c26ee1f94074ad127cbb1
-
SSDEEP
3072:K8ASpvo0LKrXEX65ezpxJ2kbJ7mv73E2o/9sY2P:ZASpvo0LKkRzpxJ2kRqroiP
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea893657c3807e0b517ede8a64beeac4_JaffaCakes118
Files
-
ea893657c3807e0b517ede8a64beeac4_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
BIDJOWDP Size: 155KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BIDJOWDP Size: 79KB - Virtual size: 80KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE