Static task
static1
Behavioral task
behavioral1
Sample
ICQ Lite 5.101 Build #3211 Banner Remover 1.0 Setup.exe
Resource
win7-20240215-en
General
-
Target
72f809b28befb5a4e925584caa0aa159_JaffaCakes118
-
Size
2.0MB
-
MD5
72f809b28befb5a4e925584caa0aa159
-
SHA1
045d1f556f42aca7861cedb01ed46bcd7437c333
-
SHA256
7e924a7d2a9d3a90551a09c9870853c03b08262d3e5dd6096231f6899af70539
-
SHA512
bdcac6417b7fb464868df307ad9e551bec2d00d3444fd5564be21e9526236a86d7cbf59ad06c2a34abc85cb35a0637c21fe6e715c0bfc8493b4076be48dcdaa1
-
SSDEEP
49152:HgOydD/oH1IbU4M17yzMa4eOqbTZgJL1q21YoK:HPGUj1+zoqb+JL1no
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ICQ Lite 5.101 Build #3211 Banner Remover 1.0 Setup.exe
Files
-
72f809b28befb5a4e925584caa0aa159_JaffaCakes118.zip
-
ICQ Lite 5.101 Build #3211 Banner Remover 1.0 Setup.exe.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ