8ef309ee614dba04da143fb043daf087_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8ef309ee614dba04da143fb043daf087_JaffaCakes118
Size

5KB
MD5

8ef309ee614dba04da143fb043daf087
SHA1

db6b6e021b23c461c5132390e3bd5522c79ebb5e
SHA256

29173fdae494eb5d30e8320f8ab1c0b0717689a9bd343c32e5df44ede77060e5
SHA512

9c00a6ba696bced52c1ddce7aebbb4b7b67aea5f990554f953f7a023f152bdea43c3c0aec2456507de3a9ffb52d7ff663a4cfe0085de43fdb7f4c357e9077e04
SSDEEP

96:j4GTFEDjn0Ctuj5P828I1noB6pNu7+wJSUK/:jZS3i38Woou7+w0/

Score

1^/10

Malware Config

Signatures

Files

8ef309ee614dba04da143fb043daf087_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Code Sign

31:fd:a3:15:df:1e:99:65:13:32:c7:13:bd:3e:7b:6f
Certificate

Issuer

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Not Before

26/06/2012, 00:00

Not After

26/06/2014, 23:59

Subject

CN=Torch Media Inc.,OU=DEV,O=Torch Media Inc.,L=Panama,ST=Panama,C=PA

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ff:a4:fd:65:c7:6b:3e:92:eb:94:88:af:9e:ac:cd:43:31:99:9d:38
Signer

Actual PE Digest

ff:a4:fd:65:c7:6b:3e:92:eb:94:88:af:9e:ac:cd:43:31:99:9d:38

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Work\Torch\25.0.1364.97\Client\src\build\Release\locales\hr.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 123B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

31:fd:a3:15:df:1e:99:65:13:32:c7:13:bd:3e:7b:6fCertificate

Extended Key Usages

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5eCertificate

Extended Key Usages

Key Usages

ff:a4:fd:65:c7:6b:3e:92:eb:94:88:af:9e:ac:cd:43:31:99:9d:38Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.rdata Size: 512B - Virtual size: 123B

.rsrc Size: 1KB - Virtual size: 1KB

31:fd:a3:15:df:1e:99:65:13:32:c7:13:bd:3e:7b:6f
Certificate

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Certificate

ff:a4:fd:65:c7:6b:3e:92:eb:94:88:af:9e:ac:cd:43:31:99:9d:38
Signer

.rdata
Size: 512B - Virtual size: 123B

.rsrc
Size: 1KB - Virtual size: 1KB