General

  • Target

    4cbd4eddf3a83b88ecbf1b16e3d96359_JaffaCakes118

  • Size

    10.9MB

  • MD5

    4cbd4eddf3a83b88ecbf1b16e3d96359

  • SHA1

    16b29d43efbe1f1cffc3b29dc642380a442633c9

  • SHA256

    2a3f928955893e6810408be597a7b15008d5b1999d1b70e3f7a73fcf8cddde58

  • SHA512

    9601cd96aebcc3cc7474c9ec3edf10796ba887f5af0f2d894404ef102fb49409b0512efb372b3a35a1276aaaa3c00501fd1deabcb1db18d9350a5be1f4f0fba6

  • SSDEEP

    196608:dV2RRVt/PJXkUoTDjencmbtMwDt1UQsMyOfolNqq7upWlig9bX+uenSAM69TdbOO:dMNt5B4DCnhjt1mMyJNmg9bXOnSA1BF5

Score
3/10

Malware Config

Signatures

  • Unsigned PE 37 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 4cbd4eddf3a83b88ecbf1b16e3d96359_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    4f67aeda01a0484282e8c59006b0b352


    Headers

    Imports

    Sections

  • $APPDATA/kuai8/data/database.gmx
  • $APPDATA/kuai8/data/plugin/hot.gmx
  • $APPDATA/kuai8/data/plugin/inwl.gmx
  • $APPDATA/kuai8/data/plugin/netwl.gmx
  • $APPDATA/kuai8/data/plugin/pc.gmx
  • $APPDATA/kuai8/data/plugin/scan.gmx
  • $APPDATA/kuai8/data/plugin/top.gmx
  • $APPDATA/kuai8/data/plugin/window.gmx
  • $PLUGINSDIR/ButtonEvent.dll
    .dll windows:4 windows x86 arch:x86

    fb51f7633cef058a2c614ae637b51d0d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/K8NsisMiniExtend.dll
    .dll windows:4 windows x86 arch:x86

    3834992e43e61a5a345876227f756644


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/K8Skin.dll
    .dll windows:4 windows x86 arch:x86

    1ee07921ef047cde98be0199c3552159


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NsisAdvance.dll
    .dll windows:4 windows x86 arch:x86

    3118321df7cb7cdec6b1cfd5740d4589


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/k8nsis_skin_image.zip
    .zip
  • skin.xml
  • skin/arrow.png
    .png
  • skin/arrow_down.png
    .png
  • skin/arrow_up.png
    .png
  • skin/bk.png
    .png
  • skin/bkup.png
    .png
  • skin/btn.png
    .png
  • skin/btncustom.png
    .png
  • skin/btnlarge.png
    .png
  • skin/btnrun.png
    .png
  • skin/check.png
    .png
  • skin/close.png
    .png
  • skin/defaultbk.png
    .png
  • skin/dottedLine.png
    .png
  • skin/edit.png
    .png
  • skin/finish.png
    .png
  • skin/grayclose.png
    .png
  • skin/icon1.png
    .png
  • skin/installprogress.png
    .png
  • skin/installprogressbk.png
    .png
  • skin/line.png
    .png
  • skin/mainbtn.png
    .png
  • skin/messagebox_btn.png
    .png
  • skin/messagebox_close.png
    .png
  • skin/min.png
    .png
  • skin/progress.png
    .png
  • skin/progressbk.png
    .png
  • skin/slides01.png
    .png
  • skin/slides02.png
    .png
  • skin/slides03.png
    .png
  • skin/slides04.png
    .png
  • skin/textinstalling.png
    .png
  • skin/welcome.png
    .png
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    ddbd50fe6279559edf7d1f1d89b42c2c


    Headers

    Imports

    Exports

    Sections

  • K8Browser.exe
    .exe windows:4 windows x86 arch:x86

    faed770a366dbe652f93927e4e16ee52


    Headers

    Imports

    Sections

  • K8BugReport.exe
    .exe windows:4 windows x86 arch:x86

    0afd00043db8cb5a5ad7caf82a2f749f


    Headers

    Imports

    Sections

  • K8Common.dll
    .dll windows:4 windows x86 arch:x86

    86039f6f7e80d75c1023fbaba4108708


    Headers

    Imports

    Exports

    Sections

  • K8DLPlatform.exe
    .exe windows:4 windows x86 arch:x86

    48480018fe60065b97db7a85b0017062


    Headers

    Imports

    Exports

    Sections

  • K8DLUtils.dll
    .dll windows:4 windows x86 arch:x86

    ebed37e48fedc296cbd987d8545c6cf8


    Headers

    Imports

    Exports

    Sections

  • K8Flash.exe
    .exe windows:4 windows x86 arch:x86

    30976f49f799638ab00c19699306f70d


    Headers

    Imports

    Sections

  • K8GM.exe
    .exe windows:4 windows x86 arch:x86

    63bf3ecb806169f23bbe25b3e1e9a89e


    Headers

    Imports

    Sections

  • K8UIRender.dll
    .dll windows:4 windows x86 arch:x86

    aa4c134b2d95eba4e19f046e997552ba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • K8Update.exe
    .exe windows:4 windows x86 arch:x86

    59c24638efe2dd49b09c72e0c9c23b7b


    Headers

    Imports

    Sections

  • K8UrlEncrypt.dll
    .dll windows:4 windows x86 arch:x86

    38e912a6f5ad6e89d8d50ab157ff8ae4


    Headers

    Imports

    Exports

    Sections

  • K8Version.dll
    .dll windows:4 windows x86 arch:x86

    24da43a02b017d3044f9525b61004f90


    Headers

    Imports

    Exports

    Sections

  • K8Web.exe
    .exe windows:4 windows x86 arch:x86

    32558a8657444d222808b34d4b6e0a42


    Headers

    Imports

    Sections

  • Microsoft.VC80.CRT.manifest
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    b78ecf47c0a3e24a6f4af114e2d1f5de


    Headers

    Imports

    Sections

  • $PLUGINSDIR/ButtonEvent.dll
    .dll windows:4 windows x86 arch:x86

    fb51f7633cef058a2c614ae637b51d0d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/K8NsisMiniExtend.dll
    .dll windows:4 windows x86 arch:x86

    3834992e43e61a5a345876227f756644


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/K8Skin.dll
    .dll windows:4 windows x86 arch:x86

    1ee07921ef047cde98be0199c3552159


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/k8nsis_skin_image.zip
    .zip
  • skin.xml
  • skin/btn.png
    .png
  • skin/btncomplete.png
    .png
  • skin/btndefault.png
    .png
  • skin/btnnormal.png
    .png
  • skin/check.png
    .png
  • skin/choice.png
    .png
  • skin/close.png
    .png
  • skin/defaultbk.png
    .png
  • skin/edit.png
    .png
  • skin/icon1.png
    .png
  • skin/line.png
    .png
  • skin/options.png
    .png
  • skin/progress.png
    .png
  • skin/progressbk.png
    .png
  • skin/radio.png
    .png
  • skin/repairing.png
    .png
  • skin/uninstalling.png
    .png
  • skin/uninstbk.png
    .png
  • skin/uninstbk2.png
    .png
  • skin/uninstfinish.png
    .png
  • skin/uninstfinish_icon.png
    .png
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    ddbd50fe6279559edf7d1f1d89b42c2c


    Headers

    Imports

    Exports

    Sections

  • audio/complete.wav
  • msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Headers

    Imports

    Exports

    Sections

  • msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections

  • tool/K8Bubble.exe
    .exe windows:4 windows x86 arch:x86

    d659ac948077527f8b52b790d00e1008


    Headers

    Imports

    Sections

  • tool/K8Common.dll
    .dll windows:4 windows x86 arch:x86

    86039f6f7e80d75c1023fbaba4108708


    Headers

    Imports

    Exports

    Sections

  • tool/K8DLUtils.dll
    .dll windows:4 windows x86 arch:x86

    ebed37e48fedc296cbd987d8545c6cf8


    Headers

    Imports

    Exports

    Sections

  • tool/K8External.exe
    .exe windows:4 windows x86 arch:x86

    a02d61df42d8d2a3ae0bbcb81532b805


    Headers

    Imports

    Sections

  • tool/K8Mini.exe
    .exe windows:4 windows x86 arch:x86

    b36eeb0d5f3454d57abdc135c5e114f3


    Headers

    Imports

    Sections

  • tool/K8NetDetect.exe
    .exe windows:4 windows x86 arch:x86

    fc3adc348b13bd6ee6f0ee28af850102


    Headers

    Imports

    Sections

  • tool/K8PluginFix.exe
    .exe windows:4 windows x86 arch:x86

    193ec1bc107359501b3afcdcc5d7b737


    Headers

    Imports

    Sections

  • tool/K8RTLFix.exe
    .exe windows:4 windows x86 arch:x86

    3a424f29c196952678ae64b4cfa13cfa


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8RestoreWindow.dll
    .dll windows:4 windows x86 arch:x86

    5ca237cfa74068362f5c882ed4818356


    Headers

    Imports

    Exports

    Sections

  • tool/K8Tray.exe
    .exe windows:4 windows x86 arch:x86

    81677b0b3c68463fb1c8e37eba423133


    Headers

    Imports

    Sections

  • tool/K8UIRender.dll
    .dll windows:4 windows x86 arch:x86

    aa4c134b2d95eba4e19f046e997552ba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool/Microsoft.VC80.CRT.manifest
  • tool/msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Headers

    Imports

    Exports

    Sections

  • tool/msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections