Security Advisories

Trustwave Press Releases

« TrustKeeper Scan Engine Update - June 25, 2013 | Main | Fake Qantas Spam Campaign Leads to Andromeda Bot Infection »

25 June 2013


Hey Joan,

Nice catch! You're correct on both points. I'll try and get the image updated soon with those points removed.



The "non-standard" delta value is just the 2-complement of 0x9E3779B9, the classic one!

And the "strange" sum value, is 0x9E3779B9 * 11, the number of iterations, which is the usual way to initialize sum for the decryption.

So I would say only the number of iterations is indeed non-standard :)

My 2 cts!

Verify your Comment

Previewing your Comment

This is only a preview. Your comment has not yet been posted.

Your comment could not be posted. Error type:
Your comment has been posted. Post another comment

The letters and numbers you entered did not match the image. Please try again.

As a final step before posting your comment, enter the letters and numbers you see in the image below. This prevents automated programs from posting comments.

Having trouble reading this image? View an alternate.


Post a comment

Your Information

(Name is required. Email address will not be displayed with the comment.)