c:\TeamViewer5_Release\TeamViewer\release\TeamViewer.pdb
Static task
static1
Behavioral task
behavioral1
Sample
319513744689a3301704d915d1f0219a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
319513744689a3301704d915d1f0219a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
319513744689a3301704d915d1f0219a_JaffaCakes118
-
Size
5.0MB
-
MD5
319513744689a3301704d915d1f0219a
-
SHA1
d8352adf6a3ff0c254c4a6c7f91ed916a7faa340
-
SHA256
5ad36b2b6aa58e294dd0dd4cd5624263283817962d9b3d3468a0cb226ad58005
-
SHA512
91fea87aa6ffdff611821bca863673d92930efed5716eaa946c5ab6fce4568e534192ca13a80ed694c74b05befc6a92ef916945d5382d8bbf4977adb16af09d1
-
SSDEEP
98304:I+D24/5AX/Si8sItqL1pkYnV9GUw0L37B6XxR5HndBsvYOm:B24/5aSOa/wi69GHwvY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 319513744689a3301704d915d1f0219a_JaffaCakes118
Files
-
319513744689a3301704d915d1f0219a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 187KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE