0e73b558a404e171ba5ef4c2e3873cab_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

0e73b558a404e171ba5ef4c2e3873cab_JaffaCakes118
Size

18.2MB
MD5

0e73b558a404e171ba5ef4c2e3873cab
SHA1

be0d6820da370aba12bebe0ed298053223eebdfb
SHA256

e7a5fb89adb240484e870798c0ca211fcf53f40920643212a5c322a6a528a255
SHA512

b3684e34f89c7272ccc643ba245f2a668c4ebc68570e1dc0dd0f1346099d422a41309d24be283e519051dba74f8f3703f74012b2b4181ecffb3faea2e2074912
SSDEEP

98304:IFLOAkGkzdnEVomFHKnPscREBKq/n33fLJBB+RTFojaZ6uBohOyQXN0g9BohOyQU:IFLOyomFHKnPArrg0rg0rgTXC

Score

1^/10

Malware Config

Signatures

Files

0e73b558a404e171ba5ef4c2e3873cab_JaffaCakes118
.dll windows:6 windows x86 arch:x86

Code Sign

12:56:48:4a:90:b4:4a:02:b9:a4:19:51:e3:a8:57:19
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03-02-2016 00:00

Not After

03-03-2019 23:59

Subject

CN=Trimble Navigation,O=Trimble Navigation,L=Westminster,ST=Colorado,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10-12-2013 00:00

Not After

09-12-2023 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:19:23:92:0d:c5:59:f7:59:25:a0:45:db:80:94:c6:1d:7a:24:6b:5b:c1:52:7e:dd:0b:71:fa:a2:39:05:38
Signer

Actual PE Digest

1a:19:23:92:0d:c5:59:f7:59:25:a0:45:db:80:94:c6:1d:7a:24:6b:5b:c1:52:7e:dd:0b:71:fa:a2:39:05:38

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\subuilds\.pulse2-agent\data\recipes\196938757\base\src\googleclient\sketchup\content\localized\pt-br\SketchUp\Windows\ResourceProjects\sketchup\Release_x64\SketchUpRc.pdb

Sections

.rdata
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18.2MB - Virtual size: 18.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

12:56:48:4a:90:b4:4a:02:b9:a4:19:51:e3:a8:57:19Certificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

1a:19:23:92:0d:c5:59:f7:59:25:a0:45:db:80:94:c6:1d:7a:24:6b:5b:c1:52:7e:dd:0b:71:fa:a2:39:05:38Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.rdata Size: 1024B - Virtual size: 848B

.rsrc Size: 18.2MB - Virtual size: 18.2MB

.reloc Size: 512B - Virtual size: 8B

12:56:48:4a:90:b4:4a:02:b9:a4:19:51:e3:a8:57:19
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

1a:19:23:92:0d:c5:59:f7:59:25:a0:45:db:80:94:c6:1d:7a:24:6b:5b:c1:52:7e:dd:0b:71:fa:a2:39:05:38
Signer

.rdata
Size: 1024B - Virtual size: 848B

.rsrc
Size: 18.2MB - Virtual size: 18.2MB

.reloc
Size: 512B - Virtual size: 8B