b7da5a7d6b54688ef1cab9a234de10e4_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

b7da5a7d6b54688ef1cab9a234de10e4_JaffaCakes118
Size

22KB
MD5

b7da5a7d6b54688ef1cab9a234de10e4
SHA1

bc0467b41e9cb68b9e5cd49ef09e54b874ad1b40
SHA256

d65d0174b907566229753ca7563cf732407618a296c8ecc3ac1d7f955ccbaf92
SHA512

b3752485e116ff688405fc335a01ae65c1a3a1e227e2633357f27c2c99483ca5523e0fd02a8ed502b31a2975a0f8fdd04df3124b655210b8375a6f92809c4938
SSDEEP

384:mw4CaUo8ro2XLtn3SjkfpU/QyGDwqW7oVFn4nZv8vm4R3CQHuRgO/1IsPcMCUlsG:lgU377xFVFn4nZv8vmovygQ9cMxSG

Score

1^/10

Malware Config

Signatures

Files

b7da5a7d6b54688ef1cab9a234de10e4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

04:00:00:00:00:01:1e:44:a5:e2:4e
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

28-01-1999 13:00

Not After

27-01-2017 12:00

Subject

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01:00:00:00:00:01:2b:1f:10:bd:4c
Certificate

Issuer

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Not Before

17-09-2010 08:42

Not After

17-09-2013 08:42

Subject

CN=Abelssoft - Ascora GmbH,O=Abelssoft - Ascora GmbH,L=Delmenhorst,ST=Niedersachsen,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:1e:44:a5:ec:be
Certificate

Issuer

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Not Before

22-01-2004 10:00

Not After

27-01-2017 11:00

Subject

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e3:f3:66:38:9c:7c:0a:f7:91:ac:15:17:eb:f3:fe:d4:fa:a1:69:e1
Signer

Actual PE Digest

e3:f3:66:38:9c:7c:0a:f7:91:ac:15:17:eb:f3:fe:d4:fa:a1:69:e1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\.hudson\jobs\WashAndGo 2012\workspace\WashAndGoNG\Boris\OutlookCleaner\obj\x86\Release\OutlookCleaner.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

04:00:00:00:00:01:1e:44:a5:e2:4eCertificate

Key Usages

01:00:00:00:00:01:2b:1f:10:bd:4cCertificate

Extended Key Usages

Key Usages

04:00:00:00:00:01:1e:44:a5:ec:beCertificate

Key Usages

e3:f3:66:38:9c:7c:0a:f7:91:ac:15:17:eb:f3:fe:d4:fa:a1:69:e1Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 16KB - Virtual size: 16KB

.rsrc Size: 1024B - Virtual size: 864B

.reloc Size: 512B - Virtual size: 12B

04:00:00:00:00:01:1e:44:a5:e2:4e
Certificate

01:00:00:00:00:01:2b:1f:10:bd:4c
Certificate

04:00:00:00:00:01:1e:44:a5:ec:be
Certificate

e3:f3:66:38:9c:7c:0a:f7:91:ac:15:17:eb:f3:fe:d4:fa:a1:69:e1
Signer

.text
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 1024B - Virtual size: 864B

.reloc
Size: 512B - Virtual size: 12B