Overview

overview

7

Static

static

3

QMPlayer-v1.1.1.exe

windows7-x64

7

QMPlayer-v1.1.1.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

Codecs/14_43260.dll

windows7-x64

1

Codecs/14_43260.dll

windows10-2004-x64

3

Codecs/28_83260.dll

windows7-x64

1

Codecs/28_83260.dll

windows10-2004-x64

3

Codecs/Avi...er.dll

windows7-x64

1

Codecs/Avi...er.dll

windows10-2004-x64

1

Codecs/Col...er.dll

windows7-x64

1

Codecs/Col...er.dll

windows10-2004-x64

1

Codecs/FLV...er.dll

windows7-x64

1

Codecs/FLV...er.dll

windows10-2004-x64

1

Codecs/MP4...er.dll

windows7-x64

1

Codecs/MP4...er.dll

windows10-2004-x64

1

Codecs/Mpa...er.dll

windows7-x64

1

Codecs/Mpa...er.dll

windows10-2004-x64

1

Codecs/Mpe...er.dll

windows7-x64

1

Codecs/Mpe...er.dll

windows10-2004-x64

1

Codecs/Rea...er.dll

windows7-x64

1

Codecs/Rea...er.dll

windows10-2004-x64

1

Codecs/amrn.dll

windows7-x64

1

Codecs/amrn.dll

windows10-2004-x64

1

Codecs/amrw.dll

windows7-x64

1

Codecs/amrw.dll

windows10-2004-x64

1

Codecs/asf...er.dll

windows7-x64

1

Codecs/asf...er.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    467533f5b64c841c1e9814da8260d605_JaffaCakes118

  • Size

    3.1MB

  • MD5

    467533f5b64c841c1e9814da8260d605

  • SHA1

    870b190e3ba8b03535bdbcc55070d6991bfb4b81

  • SHA256

    6e89cb43c7b271ebe27d932d426e2348e3f0bd5b1115950b13b6633ef8083d54

  • SHA512

    289dbfcb82d0363c6ef26cf1cd80d3120ea86c75b142526bbd4dbb5178c1685f20f9b733e32bd0680151c49194f0047bd10b865af0f0a2fbb83a1003b7fc3f11

  • SSDEEP

    98304:G5wXhJSJ+TLhiPaOMAhykga1XLrAN2rz60:G5ASJ+TXOMkCa17ryWz60

Score
3/10

Malware Config

Signatures

  • Unsigned PE 39 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 467533f5b64c841c1e9814da8260d605_JaffaCakes118
    .rar
  • QMPlayer-v1.1.1.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/iotemp.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Codecs/14_43260.dll
    .dll windows:4 windows x86 arch:x86

    10cc1c83f991b066cba98aa471df4e60


    Headers

    Imports

    Exports

    Sections

  • Codecs/28_83260.dll
    .dll windows:4 windows x86 arch:x86

    3fde72e769c2ba8f88c009f3828dd015


    Headers

    Imports

    Exports

    Sections

  • Codecs/AviSplitter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    20bf7c33237159d9fccb09fc44ac293b


    Headers

    Imports

    Exports

    Sections

  • Codecs/ColorFilter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    d6358db2b2f2325d29c23c3433a0656f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Codecs/FLVSplitter.ax
    .dll regsvr32 windows:5 windows x86 arch:x86

    75b34b8f69e72fca5cbc2ead5d76fc7f


    Headers

    Imports

    Exports

    Sections

  • Codecs/MP4Splitter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    9e74896683cac98da1b2c36c4bd5c2f7


    Headers

    Imports

    Exports

    Sections

  • Codecs/MpaSplitter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    958ea697cbdbc71cfd4a0635ddfe5ce1


    Headers

    Imports

    Exports

    Sections

  • Codecs/MpegSplitter.ax
    .dll regsvr32 windows:5 windows x86 arch:x86

    2eefabc6326768236fb85c55fe15060c


    Headers

    Imports

    Exports

    Sections

  • Codecs/RealMediaSplitter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    f997ec0d87f18f92a6e420470c434ac2


    Headers

    Imports

    Exports

    Sections

  • Codecs/amrn.dll
    .dll windows:4 windows x86 arch:x86

    24a5c697dc92958cd37d2fdcb150283f


    Headers

    Imports

    Exports

    Sections

  • Codecs/amrw.dll
    .dll windows:4 windows x86 arch:x86

    9446144bbaf35aea17c3607557aeedbc


    Headers

    Imports

    Exports

    Sections

  • Codecs/asfsplliter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    61540ae4d5f1fe29babe6b430f77a241


    Headers

    Imports

    Exports

    Sections

  • Codecs/atrc.dll
    .dll windows:4 windows x86 arch:x86

    2f5ab2eb4b4ccc26411c35c942298cd3


    Headers

    Imports

    Exports

    Sections

  • Codecs/colorcvt.dll
    .dll windows:4 windows x86 arch:x86

    eab9bfd5871f3864184b197967c68ad1


    Headers

    Imports

    Exports

    Sections

  • Codecs/cook.dll
    .dll windows:4 windows x86 arch:x86

    7186ef18b8145b9efacd73914d40cee0


    Headers

    Imports

    Exports

    Sections

  • Codecs/ddnt3260.dll
    .dll windows:4 windows x86 arch:x86

    8e95a27a8e4ba9b82ac29a5cadfb4a42


    Headers

    Imports

    Exports

    Sections

  • Codecs/dmp4.dll
    .dll windows:4 windows x86 arch:x86

    c45cbe3a401d022f5f24f740ab2f4bdd


    Headers

    Imports

    Exports

    Sections

  • Codecs/dnet3260.dll
    .dll windows:4 windows x86 arch:x86

    65180debf0fb8ca6111cc949978941cb


    Headers

    Imports

    Exports

    Sections

  • Codecs/drv1.dll
    .dll windows:4 windows x86 arch:x86

    fd14eeed0dda8bc18c607ca0d274877a


    Headers

    Imports

    Exports

    Sections

  • Codecs/drv2.dll
    .dll windows:4 windows x86 arch:x86

    c45cbe3a401d022f5f24f740ab2f4bdd


    Headers

    Imports

    Exports

    Sections

  • Codecs/drvc.dll
    .dll windows:4 windows x86 arch:x86

    10ae9848d04978553ee06cd3369d224f


    Headers

    Imports

    Exports

    Sections

  • Codecs/f4v.swf
  • Codecs/mp4v.dll
    .dll windows:4 windows x86 arch:x86

    030a353bc87d0e0fdf976987b755ae8c


    Headers

    Imports

    Exports

    Sections

  • Codecs/pncrt.dll
    .dll windows:4 windows x86 arch:x86

    828907b7a8ec04c9c4031e40ef2f76ec


    Headers

    Imports

    Exports

    Sections

  • Codecs/qclp.dll
    .dll windows:4 windows x86 arch:x86

    007e6dc1f82610592dd2a5a1cf99c505


    Headers

    Imports

    Exports

    Sections

  • Codecs/ra32clv1.dll
    .dll windows:4 windows x86 arch:x86

    57de0eddd18335303b3f121e01e339f6


    Headers

    Imports

    Exports

    Sections

  • Codecs/raac.dll
    .dll windows:4 windows x86 arch:x86

    b7311c169764035ae596349aa82535a5


    Headers

    Imports

    Exports

    Sections

  • Codecs/ralf.dll
    .dll windows:4 windows x86 arch:x86

    767377fc50e5ae6ce3090eb813cf160b


    Headers

    Imports

    Exports

    Sections

  • Codecs/rv10.dll
    .dll windows:4 windows x86 arch:x86

    e48e037ee52a162020837a0230cdb4e6


    Headers

    Imports

    Exports

    Sections

  • Codecs/rv20.dll
    .dll windows:4 windows x86 arch:x86

    04951f6f66c4c07907a1f7dd203cf284


    Headers

    Imports

    Exports

    Sections

  • Codecs/rv30.dll
    .dll windows:4 windows x86 arch:x86

    eef3793aeff0d4aa1df3ef9fa84056e4


    Headers

    Imports

    Exports

    Sections

  • Codecs/rv40.dll
    .dll windows:4 windows x86 arch:x86

    eef3793aeff0d4aa1df3ef9fa84056e4


    Headers

    Imports

    Exports

    Sections

  • Codecs/sipr3260.dll
    .dll windows:4 windows x86 arch:x86

    11988e43fc80a688ab9ff299fb35b4c2


    Headers

    Imports

    Exports

    Sections

  • KKPlayer.exe
    .exe windows:4 windows x86 arch:x86

    a441f51b8890f6fd8dacff9078bee916


    Headers

    Imports

    Sections

  • QvodCfg.ini
  • QvodInsert.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b56249f6a8367bd8180830f0dae71472


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QvodTerminal.exe
    .exe windows:4 windows x86 arch:x86

    ab3720bea80ad42dc7af1b82fad3592a


    Code Sign

    Headers

    Imports

    Sections

  • Skin/Default.xml
  • Skin/Default/back.bmp
  • Skin/Default/backleft.bmp
  • Skin/Default/backmid.bmp
  • Skin/Default/backright.bmp
  • Skin/Default/bgline.bmp
  • Skin/Default/bleft1.bmp
  • Skin/Default/bottom.bmp
  • Skin/Default/bottomleft.bmp
  • Skin/Default/bottomright.bmp
  • Skin/Default/bright1.bmp
  • Skin/Default/caption.bmp
  • Skin/Default/close.bmp
  • Skin/Default/full.bmp
  • Skin/Default/icon.bmp
  • Skin/Default/info.bmp
  • Skin/Default/infofull.bmp
  • Skin/Default/left.bmp
  • Skin/Default/left1.bmp
  • Skin/Default/listbutton.bmp
  • Skin/Default/listbutton2.bmp
  • Skin/Default/listsplit.bmp
  • Skin/Default/lsearchb1.bmp
  • Skin/Default/lsearchb2.bmp
  • Skin/Default/lsearchbg.bmp
  • Skin/Default/lsearchbg1.bmp
  • Skin/Default/max.bmp
  • Skin/Default/media_del.bmp
  • Skin/Default/media_files.bmp
  • Skin/Default/media_files_2.bmp
  • Skin/Default/media_fill.bmp
  • Skin/Default/media_info.bmp
  • Skin/Default/media_search.bmp
  • Skin/Default/media_sham.bmp
  • Skin/Default/media_sham_2.bmp
  • Skin/Default/mediaeditdel.bmp
  • Skin/Default/mediare.bmp
  • Skin/Default/mediatolist.bmp
  • Skin/Default/mediatree.bmp
  • Skin/Default/menu.bmp
  • Skin/Default/min.bmp
  • Skin/Default/mtk.bmp
  • Skin/Default/mute.bmp
  • Skin/Default/mute2.bmp
  • Skin/Default/next.bmp
  • Skin/Default/nowplay.bmp
  • Skin/Default/open.bmp
  • Skin/Default/pause.bmp
  • Skin/Default/play.bmp
  • Skin/Default/playlist_toolbar.bmp
  • Skin/Default/pre.bmp
  • Skin/Default/processp.bmp
  • Skin/Default/progress.bmp
  • Skin/Default/progress_point_a.bmp
  • Skin/Default/progress_point_b.bmp
  • Skin/Default/progress_thumb.bmp
  • Skin/Default/reold.bmp
  • Skin/Default/right.bmp
  • Skin/Default/right1.bmp
  • Skin/Default/scroll_back.bmp
  • Skin/Default/scroll_back_h.bmp
  • Skin/Default/scroll_down.bmp
  • Skin/Default/scroll_left.bmp
  • Skin/Default/scroll_limit.bmp
  • Skin/Default/scroll_limit_h.bmp
  • Skin/Default/scroll_right.bmp
  • Skin/Default/scroll_up.bmp
  • Skin/Default/search_botton.bmp
  • Skin/Default/search_icon.bmp
  • Skin/Default/stop.bmp
  • Skin/Default/tab.bmp
  • Skin/Default/tab1.bmp
  • Skin/Default/tabs_fill.bmp
  • Skin/Default/tabs_left.bmp
  • Skin/Default/tabs_mid.bmp
  • Skin/Default/tabs_right.bmp
  • Skin/Default/tabs_search_fill.bmp
  • Skin/Default/tabs_search_left.bmp
  • Skin/Default/top.bmp
  • Skin/Default/topleft.bmp
  • Skin/Default/topleft1.bmp
  • Skin/Default/topright.bmp
  • Skin/Default/topright1.bmp
  • Skin/Default/volume.bmp
  • Skin/Default/volumeb.bmp
  • Skin/Default/volumep.bmp
  • Skin/logo.bmp
  • Update.exe
    .exe windows:4 windows x86 arch:x86

    bcb9175b2bece5dee43a1b1db9695e6e


    Headers

    Imports

    Sections

  • favorites.xml
    .xml
  • historylist.xml
    .xml
  • icons/3g2.ico
  • icons/3gp.ico
  • icons/aac.ico
  • icons/acp.ico
  • icons/aif.ico
  • icons/aiff.ico
  • icons/amr.ico
  • icons/asf.ico
  • icons/asx.ico
  • icons/au.ico
  • icons/avi.ico
  • icons/flv.ico
  • icons/m1v.ico
  • icons/m2v.ico
  • icons/m3u.ico
  • icons/m4a.ico
  • icons/m4e.ico
  • icons/m4p.ico
  • icons/m4u.ico
  • icons/midi.ico
  • icons/mkv.ico
  • icons/mls.ico
  • icons/mov.ico
  • icons/mp1.ico
  • icons/mp2.ico
  • icons/mp3.ico
  • icons/mp4.ico
  • icons/mpa.ico
  • icons/mpe.ico
  • icons/mpeg.ico
  • icons/mpg.ico
  • icons/mps.ico
  • icons/mpv.ico
  • icons/pls.ico
  • icons/qt.ico
  • icons/ra.ico
  • icons/rm.ico
  • icons/rmim.ico
  • icons/rmin.ico
  • icons/rmvb.ico
  • icons/rp.ico
  • icons/rpl.ico
  • icons/rt.ico
  • icons/rv.ico
  • icons/sdp.ico
  • icons/smi.ico
  • icons/smil.ico
  • icons/ssm.ico
  • icons/wav.ico
  • icons/wax.ico
  • icons/wm.ico
  • icons/wma.ico
  • icons/wmv.ico
  • icons/wmx.ico
  • icons/wvx.ico
  • icons/xpl.ico
  • locallist.xml
    .xml
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • 新云软件.url
    .url