General

  • Target
    a3728764e4f578c436e20ec7e76f26c8_JaffaCakes118
  • Size 7.7MB
  • Sample240613-ca39gatenn
  • SHA256 b21dc16ea20063c0bd9bb02107a974d23d0898c70dacc48808c11cc7adf5234d
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • a3728764e4f578c436e20ec7e76f26c8_JaffaCakes118
    .dll 7.7MB

a3728764e4f578c436e20ec7e76f26c8_JaffaCakes118

  • IMPHASH e1f68ac32be1f1229cbe96d91b886ca4
  • SHA256 b21dc16ea20063c0bd9bb02107a974d23d0898c70dacc48808c11cc7adf5234d
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
94:5a:d7:a1:42:e2:24:b4:91:81:93:06:dc:5b:17:5a:af:06:85:3e:b6:7e:48:95:0d:b3:1e:61:5c:d4:35:a9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=CADCAM-E.COM Inc.,OU=PRODUCTS,O=CADCAM-E.COM Inc.,L=Farmington Hills,ST=Michigan,C=US
Chains

Oct 1, 2018

Minor OS version
0
Major OS version
6
Entry point
4886680
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL
PDB paths
E:\TFS\WODXCAT5\Branches\20180702\CatV5Write\WODXCAT5_DLL\VS2017\x64\mthreadl Release\WODXCAT5DLL.pdb