dacb66b0e5d5a088bd697242521eefcf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dacb66b0e5d5a088bd697242521eefcf_JaffaCakes118
Size

167KB
MD5

dacb66b0e5d5a088bd697242521eefcf
SHA1

2d34c7a2a46e0d421f36a4a753880619e0dfad27
SHA256

44040c4bc068a79f7ae24be8f353f48fe0c3fccc37eb034d20874cf37d0d1107
SHA512

9d24abfcc3c8f9f99c4091adc34e5637b6fff5b7ad477e0cc490e82685e19a6946eab33442117c3bfd12ff1c9bff521b100615f0382676d9d74c032c2893c4e0
SSDEEP

768:ufIBYslTSHSd1/C2/MhiKSp7mMc+Ty//Ij1fl463zFTyy3GuTwoNCfIB:ufIW8BZMh+VcfA1fl4SAy3GARNCfI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dacb66b0e5d5a088bd697242521eefcf_JaffaCakes118

Files

dacb66b0e5d5a088bd697242521eefcf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\WINDOWS\system32\mb\sk_cap\obj\Release\skypeS.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 105B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ