General

  • Target

    0f521bf4ade17a42542d08b5afcf1b57_JaffaCakes118

  • Size

    13.9MB

  • MD5

    0f521bf4ade17a42542d08b5afcf1b57

  • SHA1

    75db9d2964dbccc856d3188047f8e49872a3c4b1

  • SHA256

    30db5091ea9c18b2cf40da3366ae8cdeb31e033e3a989695187b859a5e651636

  • SHA512

    78b1cdd54d7877a17797afbac4ebfcd3f5fcf90cdd70d0b4fbcef08964f5cec01e32ee3f0f12365b4c22a0e7a68c19b22d553d1e9eb7cc7a6e88e0042ce2537a

  • SSDEEP

    393216:v1IKCd8/HA+MuQrp9IVLh74VIjsPtUyDbGQmyZTY:v8lu+IV5iesPOmbGQjs

Score
3/10

Malware Config

Signatures

  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

Files

  • 0f521bf4ade17a42542d08b5afcf1b57_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Code Sign

    Headers

    Imports

    Sections

  • $APPDATA/kuai8/data/database.gmx
  • $APPDATA/kuai8/data/plugin/inwl.gmx
  • $APPDATA/kuai8/data/plugin/netwl.gmx
  • $APPDATA/kuai8/data/plugin/pc.gmx
  • $APPDATA/kuai8/data/plugin/scan.gmx
  • $APPDATA/kuai8/data/plugin/search.gmx
  • $APPDATA/kuai8/data/plugin/top.gmx
  • $APPDATA/kuai8/data/plugin/window.gmx
  • $PLUGINSDIR/ButtonEvent.dll
    .dll windows:4 windows x86 arch:x86

    4f33600ea976902305b03f1374d76bdb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    4b45b7e00344a87332fbd12653854d1a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/K8NsisMiniExtend.dll
    .dll windows:4 windows x86 arch:x86

    f2ee3113ac3852ecea2b8a843446f112


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/K8Skin.dll
    .dll windows:4 windows x86 arch:x86

    e0bac717c2c045706bebb1d1c71925fa


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NsisAdvance.dll
    .dll windows:4 windows x86 arch:x86

    dd808e53c83cbef141172288e5af9ea2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/k8nsis_skin_image.zip
    .zip
  • skin.xml
  • skin/bk.png
    .png
  • skin/bkup.png
    .png
  • skin/btn.png
    .png
  • skin/btnrun.png
    .png
  • skin/check.png
    .png
  • skin/defaultbk.png
    .png
  • skin/dottedLine.png
    .png
  • skin/finish.png
    .png
  • skin/grayclose.png
    .png
  • skin/icon1.png
    .png
  • skin/instclose.png
    .png
  • skin/progress.png
    .png
  • skin/progressbk.png
    .png
  • skin/slides01.png
    .png
  • skin/slides02.png
    .png
  • skin/slides03.png
    .png
  • skin/slides04.png
    .png
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $_0_/tool/K8Shell.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    95a08a9adbb958af9453fd6acf308ce4


    Headers

    Imports

    Exports

    Sections

  • $_0_/tool/K8ShellIcon.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    1a58c343988d893094627585ebc7abdc


    Headers

    Imports

    Exports

    Sections

  • $_0_/tool_x64/K8Shell.dll
    .dll regsvr32 windows:4 windows x64 arch:x64

    f7c6370e65bd82f31d9eaf4cc7b39208


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_0_/tool_x64/K8ShellIcon.dll
    .dll regsvr32 windows:4 windows x64 arch:x64

    2e66db1d60a1afbc3ad71f74078ff191


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • K8Browser.exe
    .exe windows:4 windows x86 arch:x86

    8c431873007cbc30938ae06ad96bd632


    Code Sign

    Headers

    Imports

    Sections

  • K8BugReport.exe
    .exe windows:4 windows x86 arch:x86

    f67879dc4407d193a5bc37b8be81cceb


    Code Sign

    Headers

    Imports

    Sections

  • K8Common.dll
    .dll windows:4 windows x86 arch:x86

    4d9a487441151104e6d2998d06a12bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • K8DLPlatform.exe
    .exe windows:4 windows x86 arch:x86

    2b11e4bc07c57df0cc84021b72a8696f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • K8DLUtils.dll
    .dll windows:4 windows x86 arch:x86

    fd18edc2a5b16c449ba00d451ef94862


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • K8Flash.exe
    .exe windows:4 windows x86 arch:x86

    71f47efb21a753ed374ae4a4cf8427d7


    Code Sign

    Headers

    Imports

    Sections

  • K8GM.exe
    .exe windows:4 windows x86 arch:x86

    0c8c3d191e0cdbbc9843c9bf6618e99e


    Code Sign

    Headers

    Imports

    Sections

  • K8UIRender.dll
    .dll windows:4 windows x86 arch:x86

    024ba7d8e928993d9bb76490dc41339b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • K8Update.exe
    .exe windows:4 windows x86 arch:x86

    594ba25e66bb50443e3a926fc702533e


    Code Sign

    Headers

    Imports

    Sections

  • K8UrlEncrypt.dll
    .dll windows:4 windows x86 arch:x86

    c0768c7c872516b7caccaa7265d8d1d6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • K8Version.dll
    .dll windows:4 windows x86 arch:x86

    24da43a02b017d3044f9525b61004f90


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • K8Web.exe
    .exe windows:4 windows x86 arch:x86

    83e813221d9bb686b7c8f501f753bef1


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.VC80.CRT.manifest
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/K8NsisMiniExtend.dll
    .dll windows:4 windows x86 arch:x86

    f2ee3113ac3852ecea2b8a843446f112


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/K8Skin.dll
    .dll windows:4 windows x86 arch:x86

    e0bac717c2c045706bebb1d1c71925fa


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/k8nsis_skin_image.zip
    .zip
  • skin.xml
  • skin/btn.png
    .png
  • skin/btncomplete.png
    .png
  • skin/btndefault.png
    .png
  • skin/btnnormal.png
    .png
  • skin/check.png
    .png
  • skin/choice.png
    .png
  • skin/close.png
    .png
  • skin/defaultbk.png
    .png
  • skin/edit.png
    .png
  • skin/icon1.png
    .png
  • skin/line.png
    .png
  • skin/options.png
    .png
  • skin/progress.png
    .png
  • skin/progressbk.png
    .png
  • skin/radio.png
    .png
  • skin/repairing.png
    .png
  • skin/uninstalling.png
    .png
  • skin/uninstbk.png
    .png
  • skin/uninstbk2.png
    .png
  • skin/uninstfinish.png
    .png
  • skin/uninstfinish_icon.png
    .png
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    e2ee55bddad4241d619d6a8a38e2d869


    Headers

    Imports

    Exports

    Sections

  • audio/complete.wav
  • msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Headers

    Imports

    Exports

    Sections

  • msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections

  • tool/K8Bubble.exe
    .exe windows:4 windows x86 arch:x86

    6677b267d2f9fa157ee9e7936c6223f7


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8Common.dll
    .dll windows:4 windows x86 arch:x86

    4d9a487441151104e6d2998d06a12bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool/K8DLUtils.dll
    .dll windows:4 windows x86 arch:x86

    fd18edc2a5b16c449ba00d451ef94862


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool/K8External.exe
    .exe windows:4 windows x86 arch:x86

    a2002db6e9d7950e86bb389e13cf2e43


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8MiniPage.exe
    .exe windows:4 windows x86 arch:x86

    578aa5d3f4c78c827f8b97f68bf8dd5c


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8NetDetect.exe
    .exe windows:4 windows x86 arch:x86

    a6331ef64cec560de13fc72db757c039


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8PluginFix.exe
    .exe windows:4 windows x86 arch:x86

    0870b563dc448c7572fa127259df14e3


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8RTLFix.exe
    .exe windows:4 windows x86 arch:x86

    17b92a9c05c8f8e4c9ce5d2313710413


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8RestoreWindow.dll
    .dll windows:4 windows x86 arch:x86

    5ca237cfa74068362f5c882ed4818356


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool/K8Shell.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    95a08a9adbb958af9453fd6acf308ce4


    Headers

    Imports

    Exports

    Sections

  • tool/K8ShellIcon.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    1a58c343988d893094627585ebc7abdc


    Headers

    Imports

    Exports

    Sections

  • tool/K8Tray.exe
    .exe windows:4 windows x86 arch:x86

    7db1e98f3765ff16db00f6573a31d4fb


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8UIRender.dll
    .dll windows:4 windows x86 arch:x86

    024ba7d8e928993d9bb76490dc41339b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool/Microsoft.VC80.CRT.manifest
  • tool/msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Headers

    Imports

    Exports

    Sections

  • tool/msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections

  • tool_x64/K8Shell.dll
    .dll regsvr32 windows:4 windows x64 arch:x64

    f7c6370e65bd82f31d9eaf4cc7b39208


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool_x64/K8ShellIcon.dll
    .dll regsvr32 windows:4 windows x64 arch:x64

    2e66db1d60a1afbc3ad71f74078ff191


    Code Sign

    Headers

    Imports

    Exports

    Sections