General

  • Target
    5be51ac7aab7159a65ee951627ed7f53_JaffaCakes118
  • Size 39.4MB
  • Sample240519-2sx8lsfc84
  • SHA256 34d23b0c790ea593f39f467e53ee5ba69e617911a458be33d895979e9276b84e
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • 5be51ac7aab7159a65ee951627ed7f53_JaffaCakes118
    .exe 39.4MB
  • NDKTest/NDKTest.png
    .png 11KB
  • NDKTest/NDKTest.xml
    .xml 5KB

5be51ac7aab7159a65ee951627ed7f53_JaffaCakes118

  • IMPHASH 85b733f0ec44ad37e45c34a4d3afa0e8
  • SHA256 34d23b0c790ea593f39f467e53ee5ba69e617911a458be33d895979e9276b84e
  • MD5 SHA1 SHA512 SSDEEP
Digest
d9:2e:31:69:84:d2:67:63:59:10:45:c9:a2:de:b4:f1:ef:47:7f:8d:dc:0b:99:bd:61:fa:bc:bc:17:ba:21:f9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=BEIJING QIYI CENTURY SCIENCE&TECHNOLOGY CO.\,LTD.,OU=TECHNOLOGY PRODUCTS DEPARTMENT,O=BEIJING QIYI CENTURY SCIENCE&TECHNOLOGY CO.\,LTD.,L=BEIJING,ST=BEIJING,C=CN

PE Signature issue

Digest
93:b2:fd:9d:10:e1:02:c4:9d:31:67:e9:c3:93:40:04:19:a8:46:7e
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=BEIJING QIYI CENTURY SCIENCE&TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=TECHNOLOGY PRODUCTS DEPARTMENT,O=BEIJING QIYI CENTURY SCIENCE&TECHNOLOGY CO.\,LTD.,L=BEIJING,ST=BEIJING,C=CN
Chains

Mar 23, 2016

Minor OS version
0
Major OS version
4
Entry point
17453
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths