General

  • Target
    65e6c95c2a47f43e2d97cdf4bd2eb4a9_JaffaCakes118
  • Size 39.4MB
  • Sample240522-ec8m3sbb32
  • SHA256 99a4e0f346fa7382fe72dd705d0d405950ba307bc03ec53ba9bdfd8de0f9e2af
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • 65e6c95c2a47f43e2d97cdf4bd2eb4a9_JaffaCakes118
    .exe 39.4MB
  • NDKTest/NDKTest.png
    .png 11KB
  • NDKTest/NDKTest.xml
    .xml 5KB

65e6c95c2a47f43e2d97cdf4bd2eb4a9_JaffaCakes118

  • IMPHASH 85b733f0ec44ad37e45c34a4d3afa0e8
  • SHA256 99a4e0f346fa7382fe72dd705d0d405950ba307bc03ec53ba9bdfd8de0f9e2af
  • MD5 SHA1 SHA512 SSDEEP
Digest
7b:e4:35:da:a7:f8:51:a5:4f:3f:45:3b:1e:08:00:8d:73:fd:80:f0:a5:05:4e:2b:f0:2b:52:15:af:f9:41:f8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=BEIJING QIYI CENTURY SCIENCE&TECHNOLOGY CO.\,LTD.,OU=TECHNOLOGY PRODUCTS DEPARTMENT,O=BEIJING QIYI CENTURY SCIENCE&TECHNOLOGY CO.\,LTD.,L=BEIJING,ST=BEIJING,C=CN

PE Signature issue

Digest
19:50:0c:3d:fb:39:37:8a:4a:19:f3:c1:7a:36:89:0f:6a:96:82:37
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=BEIJING QIYI CENTURY SCIENCE&TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=TECHNOLOGY PRODUCTS DEPARTMENT,O=BEIJING QIYI CENTURY SCIENCE&TECHNOLOGY CO.\,LTD.,L=BEIJING,ST=BEIJING,C=CN
Chains

Mar 24, 2016

Minor OS version
0
Major OS version
4
Entry point
17453
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths