39c3dbc2674f07ebd0e42b2fb804712e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

39c3dbc2674f07ebd0e42b2fb804712e_JaffaCakes118
Size

28KB
MD5

39c3dbc2674f07ebd0e42b2fb804712e
SHA1

10c27d0a2d1e6b5f3b8468528053efc53b767023
SHA256

1974d0e96c82799d914e38233d3c672048d28cb2c2af1b501cb857a2c827fa54
SHA512

e1015ca0847ad52b4cd3fbbc3e4bf5f4b25160b167d467f404c1766c38acb539c0c0d610130752d4637f0587c2baf375a7a4eaa8a200665c39ade7b6cd284ca4
SSDEEP

384:nhxjOIPJk5H+pm2amEhXJh+IepjhA+1isxqtc3/UEJNwD7qP3tG+M0sBJ:rqICp+pm2+D9MdXEs8OMhD7qEF0s3

Score

1^/10

Malware Config

Signatures

Files

39c3dbc2674f07ebd0e42b2fb804712e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

17/05/2005, 00:00

Not After

16/05/2010, 23:59

Subject

CN=Comodo Time Stamping Signer,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c6:58:4c:f0:91:9e:1a:74:d3:35:00:57:b2:1e:ef:68
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

13/04/2009, 00:00

Not After

13/04/2010, 23:59

Subject

CN=eSymmetrix\, Inc,O=eSymmetrix\, Inc,POSTALCODE=21036,STREET=13808 Holly Crest Lane,L=Dayton,ST=MD,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

30:df:a0:52:a1:98:09:bb:2b:4e:c8:f2:41:df:95:cb:17:3f:b5:0e
Signer

Actual PE Digest

30:df:a0:52:a1:98:09:bb:2b:4e:c8:f2:41:df:95:cb:17:3f:b5:0e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Development\Srellim\Gibraltar\Trunk\Source\Projects\Agent.PostSharp\obj\Release\Gibraltar.Agent.PostSharp.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89Certificate

Extended Key Usages

Key Usages

c6:58:4c:f0:91:9e:1a:74:d3:35:00:57:b2:1e:ef:68Certificate

Extended Key Usages

Key Usages

30:df:a0:52:a1:98:09:bb:2b:4e:c8:f2:41:df:95:cb:17:3f:b5:0eSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 22KB - Virtual size: 22KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89
Certificate

c6:58:4c:f0:91:9e:1a:74:d3:35:00:57:b2:1e:ef:68
Certificate

30:df:a0:52:a1:98:09:bb:2b:4e:c8:f2:41:df:95:cb:17:3f:b5:0e
Signer

.text
Size: 22KB - Virtual size: 22KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B