General

  • Target

    b2cf95a23a65114fe6c359a98bd3d9dc_JaffaCakes118

  • Size

    11.8MB

  • MD5

    b2cf95a23a65114fe6c359a98bd3d9dc

  • SHA1

    6e0398d35925711325ec0ab7e85a6a2dfd3703d4

  • SHA256

    45219bb6bc2c659cb4368a8d70cecce4405f727b88bd4d6cfa93bb4bcecf67cc

  • SHA512

    2adfac81cdc8beac08c4b60c93c0e44b6dcf8cfaa912271291b5873f605adc1f7425f37d99652a9e36546544a4d34ee32aa3207bf83a56109f82404a3264af79

  • SSDEEP

    196608:qdkzxtklvvgnLRHDzDlstn19nDFrRi7RVR4ML7LnSk7APicAbnCIsuYRL6E06:deHU1D0RiNVuMekiicaCkY9T

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

Files

  • b2cf95a23a65114fe6c359a98bd3d9dc_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    1f23f452093b5c1ff091a2f9fb4fa3e9


    Headers

    Imports

    Sections

  • $APPDATA/kuai8/data/database.gmx
  • $APPDATA/kuai8/data/plugin/inwl.gmx
  • $APPDATA/kuai8/data/plugin/netwl.gmx
  • $APPDATA/kuai8/data/plugin/pc.gmx
  • $APPDATA/kuai8/data/plugin/scan.gmx
  • $APPDATA/kuai8/data/plugin/search.gmx
  • $APPDATA/kuai8/data/plugin/top.gmx
  • $APPDATA/kuai8/data/plugin/window.gmx
  • $PLUGINSDIR/K8NsisMiniExtend.dll
    .dll windows:4 windows x86 arch:x86

    c6fdfb855b003f9c102b2f07350c898f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • K8Browser.exe
    .exe windows:4 windows x86 arch:x86

    031871d8c9864d6f476b7bef8bf21e9a


    Code Sign

    Headers

    Imports

    Sections

  • K8BugReport.exe
    .exe windows:4 windows x86 arch:x86

    9a87e0614450f70d8e86dfd503a9fad1


    Code Sign

    Headers

    Imports

    Sections

  • K8Common.dll
    .dll windows:4 windows x86 arch:x86

    4d9a487441151104e6d2998d06a12bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • K8DLPlatform.exe
    .exe windows:4 windows x86 arch:x86

    9a7e83b5c785b9342d49d965f5c2d672


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • K8DLUtils.dll
    .dll windows:4 windows x86 arch:x86

    f66b2558932edef8a6028752f32c0f2b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • K8Flash.exe
    .exe windows:4 windows x86 arch:x86

    522b7496c838225dccd23bfcfa4219b2


    Code Sign

    Headers

    Imports

    Sections

  • K8GM.exe
    .exe windows:4 windows x86 arch:x86

    c2c0eae1b16367716197c0a485158534


    Code Sign

    Headers

    Imports

    Sections

  • K8UIRender.dll
    .dll windows:4 windows x86 arch:x86

    024ba7d8e928993d9bb76490dc41339b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • K8Update.exe
    .exe windows:4 windows x86 arch:x86

    ad2485b14d084efde7cfb7c5a01f1376


    Code Sign

    Headers

    Imports

    Sections

  • K8UrlEncrypt.dll
    .dll windows:4 windows x86 arch:x86

    c0768c7c872516b7caccaa7265d8d1d6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • K8Version.dll
    .dll windows:4 windows x86 arch:x86

    24da43a02b017d3044f9525b61004f90


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • K8Web.exe
    .exe windows:4 windows x86 arch:x86

    b08424a86aff9a9f565fd6a0a0c03543


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.VC80.CRT.manifest
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/K8NsisMiniExtend.dll
    .dll windows:4 windows x86 arch:x86

    c6fdfb855b003f9c102b2f07350c898f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/K8Skin.dll
    .dll windows:4 windows x86 arch:x86

    3b65534d5e6833eb7fce24dbe2660f8a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    e2ee55bddad4241d619d6a8a38e2d869


    Headers

    Imports

    Exports

    Sections

  • audio/complete.wav
  • msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Headers

    Imports

    Exports

    Sections

  • msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections

  • tool/K8Bubble.exe
    .exe windows:4 windows x86 arch:x86

    e61c1b9011d89e9e58f2d492f40f0e5a


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8Common.dll
    .dll windows:4 windows x86 arch:x86

    4d9a487441151104e6d2998d06a12bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool/K8DLUtils.dll
    .dll windows:4 windows x86 arch:x86

    f66b2558932edef8a6028752f32c0f2b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool/K8External.exe
    .exe windows:4 windows x86 arch:x86

    405f34d8c22d6381d93489f15c03f9e4


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8MiniPage.exe
    .exe windows:4 windows x86 arch:x86

    3d54727b2f2815dce5ee35c00548056b


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8NetDetect.exe
    .exe windows:4 windows x86 arch:x86

    37b61d139727862cb94d46b5a78fbb77


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8PluginFix.exe
    .exe windows:4 windows x86 arch:x86

    3c225dab512bbef204295311dc5f543c


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8RTLFix.exe
    .exe windows:4 windows x86 arch:x86

    faec3a113ae821a157783de41f7bcf0e


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8RestoreWindow.dll
    .dll windows:4 windows x86 arch:x86

    5ca237cfa74068362f5c882ed4818356


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool/K8Shell.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    8134cdd6c0c2baff1f1dab2427b4ee61


    Headers

    Imports

    Exports

    Sections

  • tool/K8ShellIcon.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    8e0fae325055556cdde1b953b8a49b46


    Headers

    Imports

    Exports

    Sections

  • tool/K8Tray.exe
    .exe windows:4 windows x86 arch:x86

    90068fe4adcc689a0535e6b73c658baa


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8UIRender.dll
    .dll windows:4 windows x86 arch:x86

    024ba7d8e928993d9bb76490dc41339b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool/Microsoft.VC80.CRT.manifest
  • tool/msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Headers

    Imports

    Exports

    Sections

  • tool/msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections

  • tool_x64/K8Shell.dll
    .dll regsvr32 windows:4 windows x64 arch:x64

    76f735a2a6f764415ab67dd801875b94


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool_x64/K8ShellIcon.dll
    .dll regsvr32 windows:4 windows x64 arch:x64

    6a0565b64e3265045e978ffca7ee631a


    Code Sign

    Headers

    Imports

    Exports

    Sections