General

  • Target
    a3bdeaf171f46fe0954d0557e6501ae3_JaffaCakes118
  • Size 2.4MB
  • Sample240613-ef1rmstclf
  • SHA256 31c7e889c9376c67f1ca6dfe3c9212c0ca520e4b9f89b2f5323b1dd625ce9aa0
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • a3bdeaf171f46fe0954d0557e6501ae3_JaffaCakes118
    .exe 2.4MB

a3bdeaf171f46fe0954d0557e6501ae3_JaffaCakes118

  • IMPHASH e9b4fde2f1bf7cd0889623f1786de75e
  • SHA256 31c7e889c9376c67f1ca6dfe3c9212c0ca520e4b9f89b2f5323b1dd625ce9aa0
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
98:89:8a:93:7b:51:d6:d1:d2:6a:7c:ac:fe:1b:98:89:ab:88:c1:5f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=珠海市内维淼科技有限公司,O=珠海市内维淼科技有限公司,L=珠海市,ST=广东省,C=CN
Chains

Jan 10, 2019

Minor OS version
0
Major OS version
5
Entry point
619741
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
e:\works\LankuaiSetup\Release\LankuaiUpdateCheck.pdb