Behavioral task
behavioral1
Sample
JaffaCakes118_11664c45a5f32a458918ab714c66e0b45b1d92b11b0ed69a76da957ad30da326.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_11664c45a5f32a458918ab714c66e0b45b1d92b11b0ed69a76da957ad30da326.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_11664c45a5f32a458918ab714c66e0b45b1d92b11b0ed69a76da957ad30da326
-
Size
1.6MB
-
MD5
ece491d9a159bd7b5329f12f6dbbb759
-
SHA1
7eafa91c475db0fff3d800aab9cd8d53e54e203b
-
SHA256
11664c45a5f32a458918ab714c66e0b45b1d92b11b0ed69a76da957ad30da326
-
SHA512
54e0280b3a2b192bf1c796f3741fdd5716a433ee7cac3386b15144443acd0dd67114c6fb70559b7f63aafa9043c6e412161efc8b56c9197026394545091b05ee
-
SSDEEP
24576:I88pq1ZW6rIczqGTQP2MZt7qjgtD8QH1TuPDLoJNDKY19:INpylfJdaLFuPPoTDX9
Malware Config
Signatures
-
Socelars family
-
Socelars payload 1 IoCs
resource yara_rule sample family_socelars -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_11664c45a5f32a458918ab714c66e0b45b1d92b11b0ed69a76da957ad30da326
Files
-
JaffaCakes118_11664c45a5f32a458918ab714c66e0b45b1d92b11b0ed69a76da957ad30da326.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 912KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 606KB - Virtual size: 608KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE