General

  • Target

    269d6d6175ba001f7ff31863fa159055_JaffaCakes118

  • Size

    3.2MB

  • MD5

    269d6d6175ba001f7ff31863fa159055

  • SHA1

    1a4a1bc94bf026dd6d2bc7a90dfaaf743d4319ff

  • SHA256

    f6001c8b8d9084654ef5f429e672257b690d651f96e3c493e2f65457b8eabea1

  • SHA512

    9d4fddc5bf9365b94ef9108e0b957dc7ba93a2fbca71d4287f554534e93388347d9b81fcac8c79f957a3da07e9e8295dcc0a3eeae5b44f8457d07c5b000c71ff

  • SSDEEP

    98304:uQ2LOYMrtxGEqsfV/Eky2VZZ2JMF7GlDlf:7Qi+Ep/Eky2VbalDlf

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 269d6d6175ba001f7ff31863fa159055_JaffaCakes118
    .rar
  • GoKuaiSetup_5.1.0.38.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • GoKuai.exe
    .exe windows:5 windows x86 arch:x86

    c4e75fda4a61fee0e9d16d9abe1ea102


    Code Sign

    Headers

    Imports

    Sections

  • GoKuai.exe.manifest
  • GoKuaiUpdate.exe
    .exe windows:5 windows x86 arch:x86

    6b37670a6229b486b0b72889c2b900e2


    Code Sign

    Headers

    Imports

    Sections

  • Repair.exe
    .exe windows:5 windows x86 arch:x86

    caf082865b1715e8b04e2e9d9e3cd8f0


    Code Sign

    Headers

    Imports

    Sections

  • RunLaunch.exe
    .exe windows:5 windows x86 arch:x86

    8c76b60b5d10e58c4694d8c5c3da87bf


    Code Sign

    Headers

    Imports

    Sections

  • bugreport.exe
    .exe windows:5 windows x86 arch:x86

    56e197bd080a7fba3c49f1780ebbf6c2


    Code Sign

    Headers

    Imports

    Sections

  • image/aboutbkg.png
    .png
  • image/border.png
    .png
  • image/bordernormal.png
    .png
  • image/bt_forget.png
    .png
  • image/bt_logcancel.png
    .png
  • image/bt_login.png
    .png
  • image/bt_ok.png
    .png
  • image/bt_register.png
    .png
  • image/bt_setting.png
    .png
  • image/buttonspace.png
    .png
  • image/check.png
    .png
  • image/close.png
    .png
  • image/editbkg.png
    .png
  • image/editmoveon.png
    .png
  • image/listarrow.png
    .png
  • image/listfocusselect.png
    .png
  • image/listheader.png
    .png
  • image/listhover.png
    .png
  • image/listicon.png
    .png
  • image/listpercent.png
    .png
  • image/listpercentbkg.png
    .png
  • image/liststatus.png
    .png
  • image/listtitlebkg.png
    .png
  • image/listunfocusselect.png
    .png
  • image/loginbkg.png
    .png
  • image/loginclose.png
    .png
  • image/loginmin.png
    .png
  • image/loginmoving.png
    .png
  • image/max.png
    .png
  • image/menu.png
    .png
  • image/messagebkg.png
    .png
  • image/messageclose.png
    .png
  • image/min.png
    .png
  • image/navigation_arrow.png
    .png
  • image/navigation_back.png
    .png
  • image/navigation_bkg.png
    .png
  • image/navigation_next.png
    .png
  • image/navigation_search.png
    .png
  • image/navigation_searchbkg.png
    .png
  • image/navigation_update.png
    .png
  • image/netbutton.png
    .png
  • image/pagesetting.png
    .png
  • image/pageshadow.png
    .png
  • image/rootdrop.png
    .png
  • image/rootnormal.png
    .png
  • image/rootselect.png
    .png
  • image/statusbar.png
    .png
  • image/statusicon.png
    .png
  • image/tabapplication.png
    .png
  • image/tabbkg.png
    .png
  • image/tabinterest.png
    .png
  • image/tablibrary.png
    .png
  • image/tabmessage.png
    .png
  • image/tabpause.png
    .png
  • image/tabstart.png
    .png
  • image/tabsync.png
    .png
  • image/tabtransport.png
    .png
  • image/tabtransportbkg.png
    .png
  • image/tabtransportfinish.png
    .png
  • image/tabtransportpercent.png
    .png
  • image/tabtransporttime.png
    .png
  • image/tabwelcome.png
    .png
  • image/titlebkg.png
    .png
  • image/toolbar_addalbum.png
    .png
  • image/toolbar_bkg.png
    .png
  • image/toolbar_bkg1.png
    .png
  • image/toolbar_clearall.png
    .png
  • image/toolbar_copy.png
    .png
  • image/toolbar_delete.png
    .png
  • image/toolbar_download.png
    .png
  • image/toolbar_editalbum.png
    .png
  • image/toolbar_folder.png
    .png
  • image/toolbar_interestset.png
    .png
  • image/toolbar_more.png
    .png
  • image/toolbar_move.png
    .png
  • image/toolbar_newalbum.png
    .png
  • image/toolbar_open.png
    .png
  • image/toolbar_operation.png
    .png
  • image/toolbar_organization.png
    .png
  • image/toolbar_properties.png
    .png
  • image/toolbar_published.png
    .png
  • image/toolbar_receive.png
    .png
  • image/toolbar_recycling.png
    .png
  • image/toolbar_rename.png
    .png
  • image/toolbar_setting.png
    .png
  • image/toolbar_share.png
    .png
  • image/toolbar_stop.png
    .png
  • image/toolbar_syncstart.png
    .png
  • image/toolbar_syncstop.png
    .png
  • image/toolbar_top.png
    .png
  • image/toolbar_transtart.png
    .png
  • image/toolbar_upload.png
    .png
  • image/transporticon.png
    .png
  • image/transportselect.png
    .png
  • image/treebutton.png
    .png
  • image/treefocusselect.png
    .png
  • image/treehover.png
    .png
  • image/treeicon.png
    .png
  • image/treeunfocusselect.png
    .png
  • image/uncheck.png
    .png
  • image/update.png
    .png
  • mfc100.dll
    .dll windows:5 windows x86 arch:x86

    913659d5824252f76b6534ebb663565c


    Code Sign

    Headers

    Imports

    Sections

  • msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • uninst.exe.nsis
  • what's new.txt
  • 新云软件.url
    .url