General

  • Target

    309b143fe547d2eee16186554578c8c3_JaffaCakes118

  • Size

    1.6MB

  • MD5

    309b143fe547d2eee16186554578c8c3

  • SHA1

    6c4e18d7f2c54ab9a3346e725ab30438d7545117

  • SHA256

    09a59dd04c18b8e50734ef85081c566d9a131a4ed8e8b91bd0660462165369ae

  • SHA512

    17695229955fa72f16f7c340ab6fd55c3791e505e38e6b727e7c26a8d9dcb3876189d694f7c0c4c0eff13cef5e6ae6e4b3a3163d55282989cedc50c27ef07a53

  • SSDEEP

    49152:XuaceE36NZALz31rEyVSbwtvzCD/m+Ii9ViOF:XuacXRFrEXbwtG/ViOF

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 309b143fe547d2eee16186554578c8c3_JaffaCakes118
    .rar
  • 155绿色软件站.url
    .url
  • KKCaptureSetup.exe
    .exe windows:4 windows x86 arch:x86

    1c042238f43557c055fca8642de8a074


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    0b51ce6ce6bf8d5c68b3ea9f3ac1bf2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/KKCaptureDll.dll
    .dll windows:4 windows x86 arch:x86

    aa7fdeb74ae27b03cc43fbe8c2db3bea


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CoreAvc.ax
    .dll regsvr32 windows:5 windows x86 arch:x86

    a51dab6f4a70c7f5108331c3fee35df0


    Headers

    Imports

    Exports

    Sections

  • KKCapture.exe
    .exe windows:5 windows x86 arch:x86

    12e118ddf2c7aad96353c7e49c4bed3a


    Code Sign

    Headers

    Imports

    Sections

  • KKCaptureASFMuxer.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    1a307300fc4a9e80846d454a799c94f0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • KKCaptureAudioEnc.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    93bc4fc9f2294a201d902f337904c358


    Headers

    Imports

    Exports

    Sections

  • KKCaptureDll.dll
    .dll windows:4 windows x86 arch:x86

    aa7fdeb74ae27b03cc43fbe8c2db3bea


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • KKCaptureSource.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    a752322aed4c54a2072622c2b27f2930


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • KKCaptureVideoEnc.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    3f577a3d575a6878c38a027b9e4800b3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • uninst.exe.nsis