I'm new to all this so there's a good chance it's me that's doing something wrong, but "shasum Kali-Linux-2016.1-vbox-amd64.ova" returned "c869fce9c03199ae072a8fa68eb2bae241072c1a" which doesn't match the signature on the official page, which is "2b49bf1e77c11ecb5618249ca69a46f23a6f5d2d" for the 64bit vbox image.
Am I doing something wrong or did I really somehow get a fake version of Kali? I downloaded it directly from the official website.
EDIT: I would just use the torrent and try again, but there's literally only one seeder and I don't really want to wait a month.