Behavioral task
behavioral1
Sample
JaffaCakes118_89c1501403ac5db16eb4ea3d57a404db9e68c312805013b80fcf773dd739b16e.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_89c1501403ac5db16eb4ea3d57a404db9e68c312805013b80fcf773dd739b16e.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_89c1501403ac5db16eb4ea3d57a404db9e68c312805013b80fcf773dd739b16e
-
Size
380KB
-
MD5
4455c65f36d100d71252abfa47eafb0f
-
SHA1
62a27a9c0f4ab52ad95aeaad39825444047646c7
-
SHA256
89c1501403ac5db16eb4ea3d57a404db9e68c312805013b80fcf773dd739b16e
-
SHA512
f9cc02df44b87c1f5ae0b5ce96f39383c29b96a694cc75d2246bfd8e07965ecf891d78b473e07c814d05b40330c2fee35fc6a1aa41eb5ab40630edb1cd0acbf9
-
SSDEEP
3072:VT8IHnMFl7xr+hWh3bx8YUU3oSQhPIWGZUYQRoh7Zgi8k3rrb0HqGUIYe87o+nxf:VTpFWFLb4PWL0ROgidvZGUIYe85x
Malware Config
Signatures
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_89c1501403ac5db16eb4ea3d57a404db9e68c312805013b80fcf773dd739b16e
Files
-
JaffaCakes118_89c1501403ac5db16eb4ea3d57a404db9e68c312805013b80fcf773dd739b16e.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ