Static task
static1
Behavioral task
behavioral1
Sample
NoData.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
NoData.exe
Resource
win10v2004-20241007-en
General
-
Target
2870cb2cabbc3a69001818ca9becf309_JaffaCakes118
-
Size
24KB
-
MD5
2870cb2cabbc3a69001818ca9becf309
-
SHA1
0c37cad76af688c88abde5c45bd439c8d4caa845
-
SHA256
87f854d30643af56d547a96fcdca0536c01f0fc1e2530b97ada2bc1f0da75c05
-
SHA512
fb8f13b4795fe8ccd7a7d7d9b0d02744693d91111b40f664dd48761315ba0817fe88f8de0c94a74700c4e226149f317c2cfab35c9c1296593b99b392f0c9df55
-
SSDEEP
768:ubV4RmFUvCDGeJA744ejUVp9SmvqK7lKam:kV4Rm2vCD/6c5qp9SqqK4am
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/NoData.exe
Files
-
2870cb2cabbc3a69001818ca9becf309_JaffaCakes118.zip
-
NoData.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.sdata Size: 4KB - Virtual size: 115B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.textxc Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 82B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ