General

  • Target

    77bf7650862416b4a2b3b6f47e819b27_JaffaCakes118

  • Size

    10.7MB

  • MD5

    77bf7650862416b4a2b3b6f47e819b27

  • SHA1

    79f1c103b0bc4f54bbce6587c53d8a3b31795f44

  • SHA256

    a6e2e85e413a40d79d40f3f19e486a9ee291dee161f61572e0326c5165728aa0

  • SHA512

    68816532938a269768811597e7ef72d9cd286221bf46d664f0dff6d12d5e6e64259d3fe295f4be264fa9db176b2648b0a572189804e3e240e6fb028644538362

  • SSDEEP

    196608:f56M2fagb0cHGW95ExGz3Q0kNvb34P6SKBv5vI2LVokX6StW6l3gcbUQ:VEagb00GWM8D5kNv/bBvJokX6QFPAQ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 77bf7650862416b4a2b3b6f47e819b27_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $APPDATA/kuai8/data/database.gmx
  • $APPDATA/kuai8/data/plugin/hot.gmx
  • $APPDATA/kuai8/data/plugin/inwl.gmx
  • $APPDATA/kuai8/data/plugin/netwl.gmx
  • $APPDATA/kuai8/data/plugin/pc.gmx
  • $APPDATA/kuai8/data/plugin/scan.gmx
  • $APPDATA/kuai8/data/plugin/top.gmx
  • $APPDATA/kuai8/data/plugin/window.gmx
  • $PLUGINSDIR/ButtonEvent.dll
    .dll windows:4 windows x86 arch:x86

    787fdfcd6ccda19dad419aa86219469e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/K8NsisMiniExtend.dll
    .dll windows:4 windows x86 arch:x86

    0b61f9899b269706054b8a0deab2f1d4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $TEMP/K8Skin.dll
    .dll windows:4 windows x86 arch:x86

    959121ce4a658ed6647e2df61aa3b50d


    Headers

    Imports

    Exports

    Sections

  • $TEMP/k8nsis_skin_image.zip
    .zip
  • skin.xml
  • skin/arrow.png
    .png
  • skin/arrow_down.png
    .png
  • skin/arrow_up.png
    .png
  • skin/bk.png
    .png
  • skin/bkup.png
    .png
  • skin/btn.png
    .png
  • skin/btncustom.png
    .png
  • skin/btnlarge.png
    .png
  • skin/btnrun.png
    .png
  • skin/check.png
    .png
  • skin/close.png
    .png
  • skin/defaultbk.png
    .png
  • skin/dottedLine.png
    .png
  • skin/edit.png
    .png
  • skin/file.png
    .png
  • skin/finish.png
    .png
  • skin/icon1.png
    .png
  • skin/installclose.png
    .png
  • skin/installprogress.png
    .png
  • skin/line.png
    .png
  • skin/mainbtn.png
    .png
  • skin/messagebox_bkimage.png
    .png
  • skin/messagebox_btn.png
    .png
  • skin/messagebox_close.png
    .png
  • skin/minimax.png
    .png
  • skin/progress.png
    .png
  • skin/progressbk.png
    .png
  • skin/slides01.png
    .png
  • skin/slides02.png
    .png
  • skin/slides03.png
    .png
  • skin/slides04.png
    .png
  • skin/slides05.png
    .png
  • skin/textinstalling.png
    .png
  • skin/uninstbk.png
    .png
  • skin/uninstfinish.png
    .png
  • skin/welcome.png
    .png
  • skin/welcome01.png
    .png
  • K8Browser.exe
    .exe windows:4 windows x86 arch:x86

    34c7f140d0bcf503a1cec70deb2282ad


    Code Sign

    Headers

    Imports

    Sections

  • K8BugReport.exe
    .exe windows:4 windows x86 arch:x86

    28b46fc29797c7214229e3c1e58a71fe


    Headers

    Imports

    Sections

  • K8Common.dll
    .dll windows:4 windows x86 arch:x86

    75298d972bc52b9df20d2283d155872b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • K8DLPlatform.exe
    .exe windows:4 windows x86 arch:x86

    eb02700c593e9e500bb272b5ca5931b2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • K8DLUtils.dll
    .dll windows:4 windows x86 arch:x86

    c66c5d1ee501ade858b3dd0157e73b40


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • K8Flash.exe
    .exe windows:4 windows x86 arch:x86

    6059d6be7ccb9bb214af18a7145c8215


    Code Sign

    Headers

    Imports

    Sections

  • K8GM.exe
    .exe windows:4 windows x86 arch:x86

    73b86be9907fc1ee224b6cbdac66655c


    Code Sign

    Headers

    Imports

    Sections

  • K8UIRender.dll
    .dll windows:4 windows x86 arch:x86

    110a0a92abcd00bc89d735fd1bda0380


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • K8Update.exe
    .exe windows:4 windows x86 arch:x86

    c7ea5bb3962b53302106a0a5b8b1e553


    Code Sign

    Headers

    Imports

    Sections

  • K8UrlEncrypt.dll
    .dll windows:4 windows x86 arch:x86

    38e912a6f5ad6e89d8d50ab157ff8ae4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • K8Version.dll
    .dll windows:4 windows x86 arch:x86

    24da43a02b017d3044f9525b61004f90


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Microsoft.VC80.CRT.manifest
  • Uninstall.exe.nsis
  • audio/complete.wav
  • msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Headers

    Imports

    Exports

    Sections

  • msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections

  • tool/K8Bubble.exe
    .exe windows:4 windows x86 arch:x86

    853f64104705ad0acd3db079eaf822aa


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8Common.dll
    .dll windows:4 windows x86 arch:x86

    75298d972bc52b9df20d2283d155872b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool/K8DLUtils.dll
    .dll windows:4 windows x86 arch:x86

    c66c5d1ee501ade858b3dd0157e73b40


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool/K8DesktopAssist.exe
    .exe windows:4 windows x86 arch:x86

    8e469a2f51e04114c27c44f9ccee9fc5


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8DesktopExt.dll
    .dll windows:4 windows x86 arch:x86

    6ee424bd78f7eab9816a2277941f637b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool/K8DesktopIcon.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    c6d03b4516cd6f0d2e2548ca74af6306


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool/K8GamePacker.exe
    .exe windows:4 windows x86 arch:x86

    63f8e4704bd59be36bb9354173b8b462


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8NetDetect.exe
    .exe windows:4 windows x86 arch:x86

    ef3bf3ce87fa673510ca655c1206ea22


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8PluginFix.exe
    .exe windows:4 windows x86 arch:x86

    306bc20eeb72421b9657e66e722338de


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8RTLFix.exe
    .exe windows:4 windows x86 arch:x86

    801b50456c2e74af9a170dc9030d8565


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8RestoreWindow.dll
    .dll windows:4 windows x86 arch:x86

    c0a4d2f01990152ab1ff236753d1ff1d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool/K8Sfx.exe
    .exe windows:4 windows x86 arch:x86

    4d7d7c3e94c124524c12f312b66e705c


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8Tip.exe
    .exe windows:4 windows x86 arch:x86

    44d098d576e67f7aaa62ea71e8a003d1


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8UIRender.dll
    .dll windows:4 windows x86 arch:x86

    110a0a92abcd00bc89d735fd1bda0380


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool/Microsoft.VC80.CRT.manifest
  • tool/msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Headers

    Imports

    Exports

    Sections

  • tool/msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections