jaffacakes118_Trojan-Spy.Win32.Noon.swx.7313c8502abc28fa495696eb5beda468
- IMPHASH 77eb672893811a448b589d4f790762c3
- SHA256 d34b65f8ac3b101a6d835e9b669cbb065560d8bb12ff677bababe36adb674102
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
a5:cb:c5:99:4d:97:fc:37:1d:84:eb:5b:48:2c:b2:09:14:85:6a:10:7a:3c:50:a5:6c:de:f4:f3:50:3f:7a:cc
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Heaventools Software,O=Quick Heal Technologies Pvt. Ltd.,C=GR
Subject
CN=Heaventools Software,O=Quick Heal Technologies Pvt. Ltd.,C=GR
Serial Number
01
Issuer
CN=Heaventools Software,O=Quick Heal Technologies Pvt. Ltd.,C=GR
Timespan
Sep 17, 2018 - Sep 17, 2019
Subject
CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 31, 2015 - Jul 9, 2019
Minor OS version
0
Major OS version
4
Entry point
5264
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.text
Size
488KB
Virtual Size
487KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
16KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=9, id=9, version=8783,
count=1, id=13, version=9782,