Skype[.]exe | Triage

Sharing

General

Target

Skype.exe
Size

1014KB
MD5

00deb78ebd23db58118a1a5f3b8f15f1
SHA1

acf17e9caf644ad32349e971de019bb7ec936ccf
SHA256

f04277b8997e7dca31aaad56ac976155684b388c82cf6063bf40300476d557e5
SHA512

cde8264eb1679deb5fe9422a64b6b76f30881584ca5b884931be3c6664bf1ee2e76e17b4569bdf6dc1aa2d46c66b836bab2904d6421ac9e25dbee4f9fdba3b14
SSDEEP

24576:9Tbkbnkt2LZsgR8oEx959VDpvcBT9LsLp9gIjmuFObrz8h:9TwYtlgR8oEZ9dZk9gRjDkbr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Skype.exe

Files

Skype.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

k{V!x
Size: 926KB - Virtual size: 926KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ