General

  • Target

    5e2d307efacf6410642e90c4c19bb67e_JaffaCakes118

  • Size

    30.2MB

  • MD5

    5e2d307efacf6410642e90c4c19bb67e

  • SHA1

    25e5862a5efdc38a13480ddd58e4ecdb5347ef04

  • SHA256

    24752a9dc2b47f35a7ef062a7dd1a053cfe7524136706daa896872f075d63a05

  • SHA512

    fd73fc19bb58926cd647046cf72c085784470ae5d819976d92be3bc32f7d3297ad61b4bc32950da14e7caf0cc4f45bdc6b47d66f363542bab553ad030e60b1e4

  • SSDEEP

    786432:K7qWBuonO6xPgeDMTos2Qpu0+qyUE175/8oCJmGyHf:stBuonBoosO0+qyFNuo6G

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 5e2d307efacf6410642e90c4c19bb67e_JaffaCakes118
    .7z
  • AudioQuality.exe
    .exe windows:5 windows x86 arch:x86

    4b390f4a66ce791d2d2d422dcba64a8b


    Code Sign

    Headers

    Imports

    Sections

  • CrashReporter.exe
    .exe windows:5 windows x86 arch:x86

    b427139e9c5667cfaca561dbb3078dca


    Code Sign

    Headers

    Imports

    Sections

  • KGDaemon.exe
    .exe windows:5 windows x86 arch:x86

    decd2c9cead2c3c3cb456378e2e2f934


    Code Sign

    Headers

    Imports

    Sections

  • KGFlashBox.exe
    .exe windows:5 windows x86 arch:x86

    f823d9756451e5a04568000d3124cb73


    Code Sign

    Headers

    Imports

    Sections

  • KGService.exe
    .exe windows:5 windows x86 arch:x86

    3456d163cfb8027dbde779e4c3529079


    Code Sign

    Headers

    Imports

    Sections

  • KuGoo3DownXControl.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    ed7c697fd8558a203dd8c0e782422aa9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • KuGou.exe
    .exe windows:5 windows x86 arch:x86

    87b726caeb685625550da4b9df0e5aef


    Code Sign

    Headers

    Imports

    Sections

  • KuGouMusic.ico
  • MobileIdentifyDLL.dll
    .dll windows:5 windows x86 arch:x86

    3073a156c060bc8935c14347b634878c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RunGame.exe
    .exe windows:5 windows x86 arch:x86

    17ea0951b5b79b4cac9a74b3a020bfbb


    Code Sign

    Headers

    Imports

    Sections

  • active_desktop_launcher.exe
    .exe windows:5 windows x86 arch:x86

    fd008fbfdc73170ba1f1598c4c3a6b88


    Code Sign

    Headers

    Imports

    Sections

  • active_desktop_launcher_x64.exe
    .exe windows:5 windows x64 arch:x64

    1ad7d70d7b6c16d05f66818c394cb860


    Code Sign

    Headers

    Imports

    Sections

  • active_desktop_render.dll
    .dll windows:5 windows x86 arch:x86

    54258efee14e9f41a917ddc7b72a8fc3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • active_desktop_render_x64.dll
    .dll windows:5 windows x64 arch:x64

    d6d47dcf5d08b8857f1394ed003fe1b8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cef.pak
    .js
  • cef_100_percent.pak
  • cef_200_percent.pak
  • codecs.dll
    .dll windows:5 windows x86 arch:x86

    d4cefab984fbe4b4dce94e3393d73ff1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • curl-ca-bundle.crt
  • dataimporter.exe
    .exe windows:5 windows x86 arch:x86

    f823d9756451e5a04568000d3124cb73


    Code Sign

    Headers

    Imports

    Sections

  • deferred.dll
    .dll windows:5 windows x86 arch:x86

    966c9ca3eb99f3d18f5e0fb351b7da19


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dsp.dll
    .dll windows:5 windows x86 arch:x86

    be37bc4afa70c0bd189539953f28cc4b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • flash.dll
    .dll windows:5 windows x86 arch:x86

    be81651cae7e109cae628b1eb09a681e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • icudtl.dat
  • infra.dll
    .dll windows:5 windows x86 arch:x86

    5f3ef6c2e5659878919c06ed0b7a5d2f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • kadb.exe
    .exe windows:5 windows x86 arch:x86

    9a3d8ebe3ae04c9f43dbe2edb51c8768


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • kgplayer.dll
    .dll windows:5 windows x86 arch:x86

    8ab7bdcd2f7ba906a6a66981d5d83bbf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • kgupnp.exe
    .exe windows:5 windows x86 arch:x86

    03af92e75704822507189dd60f0a7ac2


    Code Sign

    Headers

    Imports

    Sections

  • kugou.dll
    .dll windows:5 windows x86 arch:x86

    55185af833e8cea85dfca2d4262601d8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • kugou.skn
  • locales/zh-CN.pak
  • login.wav
  • manifest.json
  • msdmo.dll
    .dll windows:5 windows x86 arch:x86

    d14cdab623538d7d303a3ce24b59bba4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp120.dll
    .dll windows:6 windows x86 arch:x86

    6ccda270a497a2c5a36a7f385cc9910d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • natives_blob.bin
    .js
  • netcore.dll
    .dll windows:5 windows x86 arch:x86

    df650951be00bf94c19f6cea17c072f8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • peripheral.dll
    .dll windows:5 windows x86 arch:x86

    673288783483e89922e01650313c9f14


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • snapshot_blob.bin
  • ui.dll
    .dll windows:5 windows x86 arch:x86

    02db794a282b15a6b8b1396507748d81


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    e644d8080c0d8d6edb0733f8965fd30e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/close.png
    .png
  • $PLUGINSDIR/isx.dll
    .dll windows:5 windows x86 arch:x86

    9ac38474450bee2e598cdb43a9e297c4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/kgskin.dll
    .dll windows:5 windows x86 arch:x86

    86a0a8cbdc7a4268382ea88f8798ed45


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/progressbar.png
    .png
  • $PLUGINSDIR/radio0.png
    .png
  • $PLUGINSDIR/radio1.png
    .png
  • $PLUGINSDIR/song.png
    .png
  • $PLUGINSDIR/unbg1.jpg
    .jpg
  • $PLUGINSDIR/unbg2.jpg
    .jpg
  • $PLUGINSDIR/unbg3.jpg
    .jpg
  • $PLUGINSDIR/uncancel.png
    .png
  • $PLUGINSDIR/uninstall.skn
  • $PLUGINSDIR/unnext.png
    .png
  • $PLUGINSDIR/unok.png
    .png
  • winusb.dll
    .dll windows:6 windows x86 arch:x86

    2520a640b1fa42e17abe0c7a1b0c2425


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • wmadmod.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    3eebe58d99fd89aac201fc9b9efdf0c8


    Code Sign

    Headers

    Imports

    Exports

    Sections