General

  • Target

    27afd8876ff116298e774e1972a80510_JaffaCakes118

  • Size

    2.5MB

  • MD5

    27afd8876ff116298e774e1972a80510

  • SHA1

    5d7ea02a6c39d0688f1e66bbc2582cd3a7fb4121

  • SHA256

    d24d1726864be6bf4458f9c23ab89c03506bbb7d662cb68c27dff4c97e560e91

  • SHA512

    a67b4592fa9accd0e9ca20487cb7cdc519ff12cc9518d72540ae34807fadf14b95bb74d6d1ead4bd2a67af92560e5c4712b660e72928b61685d38edf408362e1

  • SSDEEP

    49152:dpkqQU8lEQjAqwheqPmlghAnv9DMeRipoUnFEc8KX/E9dfSiye5L62rK:DCUsEQE3e4Arv70powKjjfS+bK

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 27afd8876ff116298e774e1972a80510_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    237a51742fed62d237b6f1b75452402f


    Headers

    Imports

    Sections

  • $PLUGINSDIR/AnimGif.dll
    .dll windows:4 windows x86 arch:x86

    b4b71331b921e2f441a2b05306cd7dae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KuWoNsis_new.dll
    .dll windows:4 windows x86 arch:x86

    188422af675275317874dcc96bd6779b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • 360Inst-kuwo.exe
    .exe windows:4 windows x86 arch:x86

    6ddbd50b0947319d109c43d495431eee


    Code Sign

    Headers

    Imports

    Sections

  • EncodeBnd.exe
    .exe windows:4 windows x86 arch:x86

    78f160eb7866ebc0f1481a827449de0a


    Code Sign

    Headers

    Imports

    Sections

  • Install360AV.exe
    .exe windows:4 windows x86 arch:x86

    5314869c22211c933a19852a20d08453


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.VC90.CRT.manifest
  • Microsoft.VC90.MFC.manifest
  • bin/CKuwoPlayer.dll
    .dll windows:5 windows x86 arch:x86

    cc3290c3217d058fcd1a545829056489


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/CWmpPlayer.dll
    .dll windows:5 windows x86 arch:x86

    ffa030b08ed1f9b091f130d76d941a26


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/CoreAVC0.ax
    .dll regsvr32 windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • bin/DshowPlayer.dll
    .dll windows:5 windows x86 arch:x86

    51011157c8eff9ae62263977212e0b44


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/Encode.exe
    .exe windows:5 windows x86 arch:x86

    da51d131c2d14a263ced57385b829735


    Code Sign

    Headers

    Imports

    Sections

  • bin/KwAni.dll
    .dll windows:5 windows x86 arch:x86

    42f0a66ccc29a28cd542a63f4ad4eb08


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwCommonUI.dll
    .dll windows:5 windows x86 arch:x86

    6fb54d142812ad6f7bb8a3538b5ee76e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwDataDef.dll
    .dll windows:5 windows x86 arch:x86

    aa702046c72aed9d51fc3fc4e8dee619


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwHttpRequestMgr.dll
    .dll windows:5 windows x86 arch:x86

    d85133437b5c5224b68c0cd4135d6e0f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwInfos.exe
    .exe windows:5 windows x86 arch:x86

    b19d01a4507760d99b71d57202310dd9


    Code Sign

    Headers

    Imports

    Sections

  • bin/KwLayoutMgr.dll
    .dll windows:5 windows x86 arch:x86

    f040f2896fce7a93cdb179c367b46a18


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwLib.dll
    .dll windows:5 windows x86 arch:x86

    80fb743ceeaf8846cbb0f188e2f19f42


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwLog.dll
    .dll windows:5 windows x86 arch:x86

    ceb217a344dff32a23c9c5f880b547e8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwMV.exe
    .exe windows:5 windows x86 arch:x86

    f23dc9a03f56db1320fc38a78bda3a47


    Code Sign

    Headers

    Imports

    Sections

  • bin/KwModAppStore.dll
    .dll windows:5 windows x86 arch:x86

    1e6eba50802006eea8456cc8eefba99e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModConfig.dll
    .dll windows:5 windows x86 arch:x86

    98b0c46198507b102b17de196fa9ab59


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModDownload.dll
    .dll windows:5 windows x86 arch:x86

    a6437262493294e3130f4979d4a10c0b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModGameEntry.dll
    .dll windows:5 windows x86 arch:x86

    5174ebbb538db1cf18290fb233f6501c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModHotKey.dll
    .dll windows:5 windows x86 arch:x86

    e4a7d279b921e2ccc73c424f05c23435


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModLocalMusic.dll
    .dll windows:5 windows x86 arch:x86

    7de1e284693f8f4e06b37536be09e82b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModLyric.dll
    .dll windows:5 windows x86 arch:x86

    a00aea2e78794fc0b5229a72c521016c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModLyricShow.dll
    .dll windows:5 windows x86 arch:x86

    ce7dc012b739927ac47cbf27d78b4a9a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModNetSong.dll
    .dll windows:5 windows x86 arch:x86

    2efaa4bf8865fcf9eca3faef3dc5634f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModPicShow.dll
    .dll windows:5 windows x86 arch:x86

    941ec3918ac11b662aa2ac409f01e1e4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModPlaylist.dll
    .dll windows:5 windows x86 arch:x86

    41249c81fc3b1bedfc8681c70c584d76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModSayHello.dll
    .dll windows:5 windows x86 arch:x86

    1c64e5207219932bc4fbe24746fa4175


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModSkinManager.dll
    .dll windows:5 windows x86 arch:x86

    48b1b09fd2c980a835e81d39fda4bc35


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModSynList.dll
    .dll windows:5 windows x86 arch:x86

    4865a105334bd4f791a160ce1905bbd9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModWebRecommend.dll
    .dll windows:5 windows x86 arch:x86

    64f0779fffd3b0f196ba51a0caed0fd3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwMusic.exe
    .exe windows:5 windows x86 arch:x86

    5041c4f03a6d8be44512bdb1874c95e1


    Code Sign

    Headers

    Imports

    Sections

  • bin/KwMusicCore.dll
    .dll windows:5 windows x86 arch:x86

    69007de6b0e2b0e1e657c7a0879d1202


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwPlayerConf.dll
    .dll windows:5 windows x86 arch:x86

    6b643a3d2a38a4405dfb865ce7183191


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwRecoSong.dll
    .dll windows:5 windows x86 arch:x86

    9e4681316308b44da7e078165842bc74


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwTagLib.dll
    .dll windows:5 windows x86 arch:x86

    7415c99ece6ff715821d8e5ab4486bd5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwUpdate.dll
    .dll windows:5 windows x86 arch:x86

    08d0897518193306b481d8cff91e23d7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/MatroskaSplitter.ax
    .dll regsvr32 windows:5 windows x86 arch:x86

    201800fb7a5c798ffd72fee7d23cc650


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/MediaInfo.dll
    .dll windows:5 windows x86 arch:x86

    f94b2501cb412c90755b7f0be1dedd32


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/Microsoft.VC90.CRT.manifest
  • bin/Microsoft.VC90.MFC.manifest
  • bin/Module.xml
  • bin/MpaDecFilter.ax
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • bin/plugin/Microsoft.VC90.CRT.manifest
  • bin/plugin/Microsoft.VC90.MFC.manifest
  • instpage.gif
    .gif