General

  • Target

    0e3e6bd3f1c3cac4c72b22602f2677bc_JaffaCakes118

  • Size

    4.7MB

  • MD5

    0e3e6bd3f1c3cac4c72b22602f2677bc

  • SHA1

    e0bc6dfb5c723a32d7b9753f695feb32d78d280d

  • SHA256

    c735bc871b73fb5082795eaa26fc3f05a5e5d94abc4e527df55bceab30e79581

  • SHA512

    1d4896670d384cc0b7323f35dac62fcb6f13f0bf63fcdc0fbe85c2d71f930483b7b67f0e23e8fdb9b5a86c71615aa27f9be006a1956720deeac6a6c04601ad62

  • SSDEEP

    98304:a+mDdGpS+Q+Y+gha3y7cQzsQkVk+ed6i/4YM92iGT5BnJpVZTwo:aDxGpFQYLgPsredP/HoO5BJfRwo

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 0e3e6bd3f1c3cac4c72b22602f2677bc_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    237a51742fed62d237b6f1b75452402f


    Headers

    Imports

    Sections

  • $1
  • $APPDATA/kuwo/Conf/p2pconf/setup.xml
    .xml
  • $PLUGINSDIR/Base64.dll
    .dll windows:4 windows x86 arch:x86

    472def3d6dc5d4ffe27376a831b4d49b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KuWoNsis_new.dll
    .dll windows:4 windows x86 arch:x86

    c1c7e2e49a726b988d79dc6456f258fb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    5d31a4a9e83c0a8e38bab1f57d28402c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $SMSTARTUP/¿áÎÒÒôÀÖºÐ.exe
    .exe windows:5 windows x86 arch:x86

    e218909ab4a3f97c29a041834db29de8


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/KWMUSIC/BindConfig.ini
  • KwMusic.exe
    .exe windows:5 windows x86 arch:x86

    d37436deaf839aaae619193b8b8393aa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.VC90.CRT.manifest
  • Microsoft.VC90.MFC.manifest
  • bin/CKuwoPlayer.dll
    .dll windows:5 windows x86 arch:x86

    cc3290c3217d058fcd1a545829056489


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/CWmpPlayer.dll
    .dll windows:5 windows x86 arch:x86

    ffa030b08ed1f9b091f130d76d941a26


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/CoreAVC0.ax
    .dll regsvr32 windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • bin/DshowPlayer.dll
    .dll windows:5 windows x86 arch:x86

    51011157c8eff9ae62263977212e0b44


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/Encode.exe
    .exe windows:5 windows x86 arch:x86

    da51d131c2d14a263ced57385b829735


    Code Sign

    Headers

    Imports

    Sections

  • bin/KwAni.dll
    .dll windows:5 windows x86 arch:x86

    42f0a66ccc29a28cd542a63f4ad4eb08


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwCommonUI.dll
    .dll windows:5 windows x86 arch:x86

    66de8f1102c5b4f543dc4ac9fa8d8c5a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwDataDef.dll
    .dll windows:5 windows x86 arch:x86

    7bc676dcbb32d196edab6ba660d57e3d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwHttpRequestMgr.dll
    .dll windows:5 windows x86 arch:x86

    e09ad193200233ea12a43b30e5dc89e3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwInfos.exe
    .exe windows:5 windows x86 arch:x86

    b19d01a4507760d99b71d57202310dd9


    Code Sign

    Headers

    Imports

    Sections

  • bin/KwLayoutMgr.dll
    .dll windows:5 windows x86 arch:x86

    81d36c8031e259ebf89aec78d4dc8ccb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwLib.dll
    .dll windows:5 windows x86 arch:x86

    6169068a4d5d86a57515d5fa2c4b7b45


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwLog.dll
    .dll windows:5 windows x86 arch:x86

    7195839c82feba93093939896b39b663


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwMV.exe
    .exe windows:5 windows x86 arch:x86

    f23dc9a03f56db1320fc38a78bda3a47


    Code Sign

    Headers

    Imports

    Sections

  • bin/KwModAppStore.dll
    .dll windows:5 windows x86 arch:x86

    1e6eba50802006eea8456cc8eefba99e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModConfig.dll
    .dll windows:5 windows x86 arch:x86

    637ef37b6e0205cce5b8cddc72dc5a10


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModDownload.dll
    .dll windows:5 windows x86 arch:x86

    8c8f0de6cf93a7e22eed07242ea1fbd0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModGameEntry.dll
    .dll windows:5 windows x86 arch:x86

    32283bc8666cab4e131581b325d79603


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModHotKey.dll
    .dll windows:5 windows x86 arch:x86

    e4a7d279b921e2ccc73c424f05c23435


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModLocalMusic.dll
    .dll windows:5 windows x86 arch:x86

    6fb4a3718d209803fb901724388fadd1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModLyric.dll
    .dll windows:5 windows x86 arch:x86

    73ffdd9b023d469696ade1480824c526


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModLyricShow.dll
    .dll windows:5 windows x86 arch:x86

    046b55cc27f33b11acd50202413c7371


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModNetSong.dll
    .dll windows:5 windows x86 arch:x86

    af32f91286dd6926a7fe0cb16a9d5e1a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModPicShow.dll
    .dll windows:5 windows x86 arch:x86

    35c7181209595787aad084d8a222d428


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModPlaylist.dll
    .dll windows:5 windows x86 arch:x86

    ccdbdc0552565ba17fc5c57a2f6e8799


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModSayHello.dll
    .dll windows:5 windows x86 arch:x86

    1c64e5207219932bc4fbe24746fa4175


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModSkinManager.dll
    .dll windows:5 windows x86 arch:x86

    730ad935309214a1043a2a03de3b09ad


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModSynList.dll
    .dll windows:5 windows x86 arch:x86

    9c9ed780d6ccea2c346d3aeb322a8c45


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModUpdateWeb.dll
    .dll windows:5 windows x86 arch:x86

    598f7ae6b7a647136d3be8a6b45939bf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModWebRecommend.dll
    .dll windows:5 windows x86 arch:x86

    ee7d8c52628b1a5d4f42d22908a072a8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwMusicCore.dll
    .dll windows:5 windows x86 arch:x86

    69007de6b0e2b0e1e657c7a0879d1202


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwPlayerConf.dll
    .dll windows:5 windows x86 arch:x86

    6b643a3d2a38a4405dfb865ce7183191


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwRecoSong.dll
    .dll windows:5 windows x86 arch:x86

    9e4681316308b44da7e078165842bc74


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwTagLib.dll
    .dll windows:5 windows x86 arch:x86

    7415c99ece6ff715821d8e5ab4486bd5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwUpdate.dll
    .dll windows:5 windows x86 arch:x86

    e79343b94d30677484f647b6a4a775cb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/Kwmusic.exe
    .exe windows:5 windows x86 arch:x86

    c8e2df1882fc80a2539a02feff8406cb


    Code Sign

    Headers

    Imports

    Sections

  • bin/MatroskaSplitter.ax
    .dll regsvr32 windows:5 windows x86 arch:x86

    201800fb7a5c798ffd72fee7d23cc650


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/MediaInfo.dll
    .dll windows:5 windows x86 arch:x86

    f94b2501cb412c90755b7f0be1dedd32


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/Microsoft.VC90.CRT.manifest
  • bin/Microsoft.VC90.MFC.manifest
  • bin/Module.xml
  • bin/MpaDecFilter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    49fe25334afea175223d3ae146a8e0b9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/Pet.exe
    .exe windows:5 windows x86 arch:x86

    23a76947ec632acb9fe8805703b5491c


    Code Sign

    Headers

    Imports

    Sections

  • bin/PetD.dll
    .dll windows:5 windows x86 arch:x86

    a063581d4c724f9f78229e856ac14cc1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/PetU.dll
    .dll windows:5 windows x86 arch:x86

    03ad75b9f5a4f3e6a378d27c591434d7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/PlayerCore.dll
    .dll windows:5 windows x86 arch:x86

    11a52137370e8f584f49f9bac688b58e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UIAvMgr.dll
    .dll windows:5 windows x86 arch:x86

    f06f2118b4af0ee181f1b80fb643b78a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UICPTool.dll
    .dll windows:5 windows x86 arch:x86

    7b322f6a9fe20f044e0b119354398c09


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UIConfig.dll
    .dll windows:5 windows x86 arch:x86

    da8b6cef38f7bc554bbb3f1fb6e174f2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UIDownload.dll
    .dll windows:5 windows x86 arch:x86

    5c9f61ebfc89f2b9c3a702f0cf954aad


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UIDrawLyricMgr.dll
    .dll windows:5 windows x86 arch:x86

    70e0ef9ff8100f30f7e340e63fb67917


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UIEqualizer.dll
    .dll windows:5 windows x86 arch:x86

    8a5c9f1f7f628ac50a47f06a20cbd3fc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UILocalMusic.dll
    .dll windows:5 windows x86 arch:x86

    ae210da187823942d339873038e2b104


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UILyricDesk.dll
    .dll windows:5 windows x86 arch:x86

    3653a7dd65872907e6fa94eab019d7e7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UILyricNowPlay.dll
    .dll windows:5 windows x86 arch:x86

    f3e1e72dda9fbf0c8625f55e0dc43e98


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UIMVWnd.dll
    .dll windows:5 windows x86 arch:x86

    d0b3c0756a1f0aa0471efda37be70934


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UIMiniPanel.dll
    .dll windows:5 windows x86 arch:x86

    38cec1685590595eb6e8e19ecc0d8335


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UINetSongLib.dll
    .dll windows:5 windows x86 arch:x86

    5fc2dde7cff8e1b8fb8fd9abcff67b4a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UINowPlayCommonCtrl.dll
    .dll windows:5 windows x86 arch:x86

    970d4dd5e74aab83d614d3a79b6f21a2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UINowPlayFloatingLayer.dll
    .dll windows:5 windows x86 arch:x86

    8090c2f9c158e76711d879e3c118caea


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UIPic.dll
    .dll windows:5 windows x86 arch:x86

    aed77ede0c347324ccb0f2d4f59afdd6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UIPlayerControl.dll
    .dll windows:5 windows x86 arch:x86

    ba5b2c83618f8325a01c96ca19187366


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UIPlaylist.dll
    .dll windows:5 windows x86 arch:x86

    cc095734e4e4fc45f948d08f61612292


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UIPopupWnd.dll
    .dll windows:5 windows x86 arch:x86

    e5551871c0cb6b4988892d2bdbf01e0b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UITopPanel.dll
    .dll windows:5 windows x86 arch:x86

    4ee3688fbfb23e17c73aaa3048b02968


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UIUserMan.dll
    .dll windows:5 windows x86 arch:x86

    3642d819c313db7b7485ec94f45d7ef1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UIWebRecommend.dll
    .dll windows:5 windows x86 arch:x86

    21ef9bf2d07890c25e24c6e1907b1f3e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/Win7Trait.dll
    .dll windows:5 windows x86 arch:x86

    55f43f021a055aa3a9a85c2c04d46bd3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/WriteMbox.exe
    .exe windows:4 windows x86 arch:x86

    42134c4fb1b2d3cf6b447e018a5de700


    Code Sign

    Headers

    Imports

    Sections

  • bin/Zlib.dll
    .dll windows:5 windows x86 arch:x86

    b961c4dc5c6274964fb2995c8ec3244e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/auto.exe
    .exe windows:5 windows x86 arch:x86

    e218909ab4a3f97c29a041834db29de8


    Code Sign

    Headers

    Imports

    Sections

  • bin/plugin/Microsoft.VC90.CRT.manifest
  • bin/plugin/Microsoft.VC90.MFC.manifest
  • readme.txt