General

  • Target
    7768db9505647b7df946446648fdf84a_JaffaCakes118
  • Size 39.4MB
  • Sample240527-bfw7nsbf59
  • SHA256 447dcef1e9232be90b748668d53b12ff537b302d52d24e51dea98cfe6bb8cd9f
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • 7768db9505647b7df946446648fdf84a_JaffaCakes118
    .exe 39.4MB
  • NDKTest/NDKTest.png
    .png 11KB
  • NDKTest/NDKTest.xml
    .xml 5KB

7768db9505647b7df946446648fdf84a_JaffaCakes118

  • IMPHASH 85b733f0ec44ad37e45c34a4d3afa0e8
  • SHA256 447dcef1e9232be90b748668d53b12ff537b302d52d24e51dea98cfe6bb8cd9f
  • MD5 SHA1 SHA512 SSDEEP
Digest
c6:5c:ad:43:6d:96:45:fb:ff:c4:f6:8d:3e:74:42:8c:a6:f7:c6:83:da:98:11:32:a1:7a:6c:aa:79:85:82:b9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=BEIJING QIYI CENTURY SCIENCE&TECHNOLOGY CO.\,LTD.,OU=TECHNOLOGY PRODUCTS DEPARTMENT,O=BEIJING QIYI CENTURY SCIENCE&TECHNOLOGY CO.\,LTD.,L=BEIJING,ST=BEIJING,C=CN

PE Signature issue

Digest
fa:7b:9a:79:b3:db:23:c1:40:94:42:4e:1e:e4:de:c8:f0:1e:93:71
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=BEIJING QIYI CENTURY SCIENCE&TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=TECHNOLOGY PRODUCTS DEPARTMENT,O=BEIJING QIYI CENTURY SCIENCE&TECHNOLOGY CO.\,LTD.,L=BEIJING,ST=BEIJING,C=CN
Chains

Mar 24, 2016

Minor OS version
0
Major OS version
4
Entry point
17453
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths