General

  • Target
    9127b460832d1ce9149807069a6c0ed7_JaffaCakes118
  • Size 5.6MB
  • Sample240603-kk3ppahc8w
  • SHA256 f46f914cb253053d69ed66edd98d1a328b98354687cc45c297963637f9420fc6
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • 9127b460832d1ce9149807069a6c0ed7_JaffaCakes118
    .exe 5.6MB

9127b460832d1ce9149807069a6c0ed7_JaffaCakes118

  • IMPHASH e35978f9b14e27758b9af197fa20aaa4
  • SHA256 f46f914cb253053d69ed66edd98d1a328b98354687cc45c297963637f9420fc6
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
e9:1d:e4:ce:0a:e5:d1:b0:ec:56:97:92:c1:ec:e3:8d:52:99:a2:84:c8:03:1c:93:4a:ef:db:41:52:a3:49:90
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Kunshan Bainuo Information Technology Co.\, Ltd.,O=Kunshan Bainuo Information Technology Co.\, Ltd.,L=Kunshan,ST=Jiangsu,C=CN
Chains

Aug 11, 2017

PE Signature issue

Digest
f2:61:0b:29:ce:16:09:5f:18:a1:eb:73:44:7a:a3:8a:78:e8:2f:3a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Kunshan Bainuo Information Technology Co.\, Ltd.,O=Kunshan Bainuo Information Technology Co.\, Ltd.,L=Kunshan,ST=Jiangsu,C=CN
Chains

Aug 11, 2017

Minor OS version
0
Major OS version
5
Entry point
932743
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
e:\leyouPacket1\trunk\bin\Win32\Release\build\leyoubox\igame_08111958.pdb