ef06d3c6c3f61a798e168fb078b17024_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ef06d3c6c3f61a798e168fb078b17024_JaffaCakes118
Size

6KB
MD5

ef06d3c6c3f61a798e168fb078b17024
SHA1

57ef3839fa2b19a8e909084afff16396b7fd4170
SHA256

794c0226533a954160ad15aeb7b0097a3dc8aa6afe0041b7ab062bddabb535f4
SHA512

422797f4a5ec0a46d9780d87f6ceb83af850603bd233b4fae634eb3205da6ca18a31df7c1560b0740958cb9de192f188034fdaae72f051c7741bc4298b930020
SSDEEP

96:JFp7SnLSCtv25P828I1noB6pNu7+wtCggNX:JDUq38Woou7+wwLX

Score

1^/10

Malware Config

Signatures

Files

ef06d3c6c3f61a798e168fb078b17024_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Code Sign

31:fd:a3:15:df:1e:99:65:13:32:c7:13:bd:3e:7b:6f
Certificate

Issuer

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Not Before

26/06/2012, 00:00

Not After

26/06/2014, 23:59

Subject

CN=Torch Media Inc.,OU=DEV,O=Torch Media Inc.,L=Panama,ST=Panama,C=PA

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

bc:cf:48:d1:c5:15:29:2c:28:0d:b7:e7:f7:da:ba:af:50:94:46:69
Signer

Actual PE Digest

bc:cf:48:d1:c5:15:29:2c:28:0d:b7:e7:f7:da:ba:af:50:94:46:69

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Work\Torch\25.0.1364.97\Client\src\build\Release\locales\ml.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 123B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

31:fd:a3:15:df:1e:99:65:13:32:c7:13:bd:3e:7b:6fCertificate

Extended Key Usages

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5eCertificate

Extended Key Usages

Key Usages

bc:cf:48:d1:c5:15:29:2c:28:0d:b7:e7:f7:da:ba:af:50:94:46:69Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.rdata Size: 512B - Virtual size: 123B

.rsrc Size: 2KB - Virtual size: 1KB

31:fd:a3:15:df:1e:99:65:13:32:c7:13:bd:3e:7b:6f
Certificate

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Certificate

bc:cf:48:d1:c5:15:29:2c:28:0d:b7:e7:f7:da:ba:af:50:94:46:69
Signer

.rdata
Size: 512B - Virtual size: 123B

.rsrc
Size: 2KB - Virtual size: 1KB