C:\work\ZipSkype\ZipSkype\obj\Release\ZipSkype.pdb
Static task
static1
Behavioral task
behavioral1
Sample
19dded55d1aa65164e31ccdcc583ac31_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
19dded55d1aa65164e31ccdcc583ac31_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
19dded55d1aa65164e31ccdcc583ac31_JaffaCakes118
-
Size
2.4MB
-
MD5
19dded55d1aa65164e31ccdcc583ac31
-
SHA1
7f8a2645ed24f95fa1da0476b5b37d35fda6691b
-
SHA256
341e0357d2d09e970d02e3ec386a30b8779694e8bb8ee7c89b44c50ee9f9dd5a
-
SHA512
9c260c3b1d5e36dc722223dd92028439ba23459e3807540c3ee34b19d328bfb9f12f0094efdc04bd8e78567c9b8859eef11194a258ade2dba6c81eece1807de5
-
SSDEEP
49152:dlElyYWYhVVwCT49QRY45lElyYWYhVVwCT49QRY4uXkO:dlE7WYhVVwENXlE7WYhVVwENskO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19dded55d1aa65164e31ccdcc583ac31_JaffaCakes118
Files
-
19dded55d1aa65164e31ccdcc583ac31_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 283KB - Virtual size: 282KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ