775eaf44d0782a2cf366bbb80a5403d5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

775eaf44d0782a2cf366bbb80a5403d5_JaffaCakes118
Size

2.4MB
MD5

775eaf44d0782a2cf366bbb80a5403d5
SHA1

93fd523b0caaef60bef5b539df7c8e258116aaab
SHA256

904269f3ebac785c02ddf9787ed79e331cfb604eaf1c8d5253b41e7658624c3b
SHA512

a550d596a374b048784faaf3d897840ff47d075267dfff470692e80bdb18df3e88fe973c8588a3a99ebb93194c5e5cdb78e2a0b5542af43fc4aa1c3e5936cfcf
SSDEEP

49152:0Qtuui/tLF9HY465ClBrtuui/tLF9HY465ClB8X4:0QtRi/tJBqolxtRi/tJBqolm4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
775eaf44d0782a2cf366bbb80a5403d5_JaffaCakes118

Files

775eaf44d0782a2cf366bbb80a5403d5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\work\ZipSkype\ZipSkype\obj\Release\ZipSkype.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 283KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ