General

  • Target
    57065b1671f7e9a17dbbb9c4d2648ae5_JaffaCakes118
  • Size 39.4MB
  • Sample240518-1xpxcsae45
  • SHA256 8670881875d1e68cfab80bd8f7aaef39c893a5537482cfe246fae72a9ac5f3bc
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • 57065b1671f7e9a17dbbb9c4d2648ae5_JaffaCakes118
    .exe 39.4MB
  • NDKTest/NDKTest.png
    .png 11KB
  • NDKTest/NDKTest.xml
    .xml 5KB

57065b1671f7e9a17dbbb9c4d2648ae5_JaffaCakes118

  • IMPHASH 85b733f0ec44ad37e45c34a4d3afa0e8
  • SHA256 8670881875d1e68cfab80bd8f7aaef39c893a5537482cfe246fae72a9ac5f3bc
  • MD5 SHA1 SHA512 SSDEEP
Digest
db:6f:98:ad:f3:1c:53:63:ab:a3:c0:1f:63:57:c0:e2:47:7b:fe:1c:eb:19:d6:5c:55:31:dc:03:10:10:43:0f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=BEIJING QIYI CENTURY SCIENCE&TECHNOLOGY CO.\,LTD.,OU=TECHNOLOGY PRODUCTS DEPARTMENT,O=BEIJING QIYI CENTURY SCIENCE&TECHNOLOGY CO.\,LTD.,L=BEIJING,ST=BEIJING,C=CN

PE Signature issue

Digest
a7:a3:68:75:3c:3a:06:49:93:0f:ea:42:3c:04:f9:e7:5b:f2:da:88
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=BEIJING QIYI CENTURY SCIENCE&TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=TECHNOLOGY PRODUCTS DEPARTMENT,O=BEIJING QIYI CENTURY SCIENCE&TECHNOLOGY CO.\,LTD.,L=BEIJING,ST=BEIJING,C=CN
Chains

Mar 23, 2016

Minor OS version
0
Major OS version
4
Entry point
17453
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths