General

  • Target

    5c036c08b07fd9531f9e82d0b71cbb54_JaffaCakes118

  • Size

    13.4MB

  • MD5

    5c036c08b07fd9531f9e82d0b71cbb54

  • SHA1

    f04faf7cee3c1e7c8723474d465fb6cef2efe4c3

  • SHA256

    06be1cbbf31dc8b9c539a47e14c32f5daffcaa146e5b26a23e030259ece3777a

  • SHA512

    041bb7522d47e4234edcb06f1d5bcf3bd8a802b9ef19fee17b28d86032630609a018ecef4a34dc3b8c6aed8c2371d36253f5d8ea310fb6280a595572c6e5d611

  • SSDEEP

    393216:c6gyhvQIS/VtMo1TX6S6Oo/xBsnHwyYTLfpYkA:c6liIc/MEXe/AnHuTLffA

Score
3/10

Malware Config

Signatures

  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 5c036c08b07fd9531f9e82d0b71cbb54_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    57e98d9a5a72c8d7ad8fb7a6a58b3daf


    Code Sign

    Headers

    Imports

    Sections

  • $APPDATA/kuai8/data/database.gmx
  • $APPDATA/kuai8/data/plugin/hot.gmx
  • $APPDATA/kuai8/data/plugin/inwl.gmx
  • $APPDATA/kuai8/data/plugin/netwl.gmx
  • $APPDATA/kuai8/data/plugin/pc.gmx
  • $APPDATA/kuai8/data/plugin/scan.gmx
  • $APPDATA/kuai8/data/plugin/top.gmx
  • $APPDATA/kuai8/data/plugin/window.gmx
  • $PLUGINSDIR/ButtonEvent.dll
    .dll windows:4 windows x86 arch:x86

    fb51f7633cef058a2c614ae637b51d0d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/K8NsisMiniExtend.dll
    .dll windows:4 windows x86 arch:x86

    dcc7b855a75793bd501845850fc4906f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/K8Skin.dll
    .dll windows:4 windows x86 arch:x86

    a7cec1a14f869d6a2f409c4cbb778f3a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NsisAdvance.dll
    .dll windows:4 windows x86 arch:x86

    efad0333cab140f74f608a17de80ce20


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/k8nsis_skin_image.zip
    .zip
  • skin.xml
  • skin/arrow.png
    .png
  • skin/arrow_down.png
    .png
  • skin/arrow_up.png
    .png
  • skin/bk.png
    .png
  • skin/bkup.png
    .png
  • skin/btn.png
    .png
  • skin/btncustom.png
    .png
  • skin/btnlarge.png
    .png
  • skin/btnrun.png
    .png
  • skin/check.png
    .png
  • skin/close.png
    .png
  • skin/defaultbk.png
    .png
  • skin/dottedLine.png
    .png
  • skin/edit.png
    .png
  • skin/finish.png
    .png
  • skin/grayclose.png
    .png
  • skin/icon1.png
    .png
  • skin/installprogress.png
    .png
  • skin/installprogressbk.png
    .png
  • skin/line.png
    .png
  • skin/mainbtn.png
    .png
  • skin/messagebox_btn.png
    .png
  • skin/messagebox_close.png
    .png
  • skin/min.png
    .png
  • skin/progress.png
    .png
  • skin/progressbk.png
    .png
  • skin/slides01.png
    .png
  • skin/slides02.png
    .png
  • skin/slides03.png
    .png
  • skin/slides04.png
    .png
  • skin/textinstalling.png
    .png
  • skin/welcome.png
    .png
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    ddbd50fe6279559edf7d1f1d89b42c2c


    Headers

    Imports

    Exports

    Sections

  • K8Browser.exe
    .exe windows:4 windows x86 arch:x86

    9e05f4fdf62bb8e193d39032578dfac2


    Code Sign

    Headers

    Imports

    Sections

  • K8BugReport.exe
    .exe windows:4 windows x86 arch:x86

    2cb0da421410cc53a9ef1040cdd6bc81


    Code Sign

    Headers

    Imports

    Sections

  • K8Common.dll
    .dll windows:4 windows x86 arch:x86

    998f4ff81f67466a06792a20ea90a69e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • K8DLPlatform.exe
    .exe windows:4 windows x86 arch:x86

    ed221e90fab4febe6cdae9cbca304248


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • K8DLUtils.dll
    .dll windows:4 windows x86 arch:x86

    ebed37e48fedc296cbd987d8545c6cf8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • K8Flash.exe
    .exe windows:4 windows x86 arch:x86

    0061a7ec687f94730a3b6bdc8e051360


    Code Sign

    Headers

    Imports

    Sections

  • K8GM.exe
    .exe windows:4 windows x86 arch:x86

    1ab0bd17bb02267f10257dfc6c108764


    Code Sign

    Headers

    Imports

    Sections

  • K8UIRender.dll
    .dll windows:4 windows x86 arch:x86

    5e7e04bbcba2275e9e403cb52db9a2a6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • K8Update.exe
    .exe windows:4 windows x86 arch:x86

    3464651bdc61b4f05778be00643c352d


    Code Sign

    Headers

    Imports

    Sections

  • K8UrlEncrypt.dll
    .dll windows:4 windows x86 arch:x86

    c0768c7c872516b7caccaa7265d8d1d6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • K8Version.dll
    .dll windows:4 windows x86 arch:x86

    24da43a02b017d3044f9525b61004f90


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • K8Web.exe
    .exe windows:4 windows x86 arch:x86

    1e8025d6b88c29195ef4f327356cf2bb


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.VC80.CRT.manifest
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    3abe302b6d9a1256e6a915429af4ffd2


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/K8NsisMiniExtend.dll
    .dll windows:4 windows x86 arch:x86

    dcc7b855a75793bd501845850fc4906f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/K8Skin.dll
    .dll windows:4 windows x86 arch:x86

    a7cec1a14f869d6a2f409c4cbb778f3a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/k8nsis_skin_image.zip
    .zip
  • skin.xml
  • skin/btn.png
    .png
  • skin/btncomplete.png
    .png
  • skin/btndefault.png
    .png
  • skin/btnnormal.png
    .png
  • skin/check.png
    .png
  • skin/choice.png
    .png
  • skin/close.png
    .png
  • skin/defaultbk.png
    .png
  • skin/edit.png
    .png
  • skin/icon1.png
    .png
  • skin/line.png
    .png
  • skin/options.png
    .png
  • skin/progress.png
    .png
  • skin/progressbk.png
    .png
  • skin/radio.png
    .png
  • skin/repairing.png
    .png
  • skin/uninstalling.png
    .png
  • skin/uninstbk.png
    .png
  • skin/uninstbk2.png
    .png
  • skin/uninstfinish.png
    .png
  • skin/uninstfinish_icon.png
    .png
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    ddbd50fe6279559edf7d1f1d89b42c2c


    Headers

    Imports

    Exports

    Sections

  • audio/complete.wav
  • msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Headers

    Imports

    Exports

    Sections

  • msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections

  • tool/K8Bubble.exe
    .exe windows:4 windows x86 arch:x86

    c34c6d81afc2c2473bacbbab01f09bdd


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8Common.dll
    .dll windows:4 windows x86 arch:x86

    998f4ff81f67466a06792a20ea90a69e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool/K8DLUtils.dll
    .dll windows:4 windows x86 arch:x86

    ebed37e48fedc296cbd987d8545c6cf8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool/K8External.exe
    .exe windows:4 windows x86 arch:x86

    966c7900c0f0269f17affb2174be6112


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8MiniPage.exe
    .exe windows:4 windows x86 arch:x86

    e7fc72755a739ad8eac06e63b76f7383


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8NetDetect.exe
    .exe windows:4 windows x86 arch:x86

    c25b324b49525d7da2c77bb86acd1b4e


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8PluginFix.exe
    .exe windows:4 windows x86 arch:x86

    24291d8bd58d8d94f3c05bd378234d2c


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8RTLFix.exe
    .exe windows:4 windows x86 arch:x86

    1f4af0cf5c1bce96a29a8f936b1b2787


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8RestoreWindow.dll
    .dll windows:4 windows x86 arch:x86

    5ca237cfa74068362f5c882ed4818356


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool/K8Shell.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    91919fe13a5a345decbfe963364f35ed


    Headers

    Imports

    Exports

    Sections

  • tool/K8ShellIcon.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    1b2fc9be5cfd8694c689af35ed90c32d


    Headers

    Imports

    Exports

    Sections

  • tool/K8Tray.exe
    .exe windows:4 windows x86 arch:x86

    4a4e766eee5922fac55b08989de23d7e


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8UIRender.dll
    .dll windows:4 windows x86 arch:x86

    5e7e04bbcba2275e9e403cb52db9a2a6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool/Microsoft.VC80.CRT.manifest
  • tool/msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Headers

    Imports

    Exports

    Sections

  • tool/msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections

  • tool_x64/K8Common.dll
    .dll windows:4 windows x64 arch:x64

    5cf89e2088920f4e1d1cf1414de048ba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool_x64/K8Shell.dll
    .dll regsvr32 windows:4 windows x64 arch:x64

    83523524998aa1f9e9b91946d63cbf00


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool_x64/K8ShellIcon.dll
    .dll regsvr32 windows:4 windows x64 arch:x64

    1dc5360c5a03d8fc651dcb08335ec7ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool_x64/K8UrlEncrypt.dll
    .dll windows:4 windows x64 arch:x64

    a296ac25677f88edfa58e40fa8975d2b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool_x64/Microsoft.VC80.CRT.manifest
  • tool_x64/msvcp80.dll
    .dll windows:4 windows x64 arch:x64

    8518d5765ff2216e24ba6753bf91456b


    Headers

    Imports

    Exports

    Sections

  • tool_x64/msvcr80.dll
    .dll windows:4 windows x64 arch:x64

    6c31ff1756690f37d3e2c95f96fa9b5a


    Headers

    Imports

    Exports

    Sections