General

  • Target

    626ea7f278ecac6590cc0fe36a0dc8ad_JaffaCakes118

  • Size

    2.1MB

  • MD5

    626ea7f278ecac6590cc0fe36a0dc8ad

  • SHA1

    a0cf72ff73bd92e4e8adbc2621be35451dd9fdcd

  • SHA256

    e3616f5a022c19dd7431ffef04054e5cf001bc57e6e199075dd96089ffb4f2a3

  • SHA512

    432d43906e9953e39ef9dd3a6e2ea48b08e7284322e11a4f3a85e26b9157048413bfbfb71d6728f31c517749a045783d00878efbbbf5e06194342f792bb2add0

  • SSDEEP

    49152:8Q7zfFZCUer9K27we9v89EevnTam/vlnUgX7z:84fFZQrwzea9EefTaOvagrz

Score
3/10

Malware Config

Signatures

  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 626ea7f278ecac6590cc0fe36a0dc8ad_JaffaCakes118
    .rar
  • kugoukk.exe
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    0b51ce6ce6bf8d5c68b3ea9f3ac1bf2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SimpleSC.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • AddIn/VisLrc.dll
    .dll windows:4 windows x86 arch:x86

    405f85e6c10ba505edbac8ea83c4ca8c


    Headers

    Imports

    Exports

    Sections

  • Codecs/ColorFilter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    7b62221aacb75e6b27bf0a69b85d624c


    Headers

    Imports

    Exports

    Sections

  • Codecs/RealMediaSplitter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    092c362fafa1e9277558c0e5612fdfba


    Headers

    Imports

    Exports

    Sections

  • Codecs/asfsplliter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    61540ae4d5f1fe29babe6b430f77a241


    Headers

    Imports

    Exports

    Sections

  • Codecs/atrc.dll
    .dll windows:4 windows x86 arch:x86

    5132cde9ac8899a69f40dfaacc320c4d


    Headers

    Imports

    Exports

    Sections

  • Codecs/cook.dll
    .dll windows:4 windows x86 arch:x86

    7186ef18b8145b9efacd73914d40cee0


    Headers

    Imports

    Exports

    Sections

  • Codecs/drvc.dll
    .dll windows:4 windows x86 arch:x86

    5d841dc9603dda4e7058b842c1dedbfc


    Headers

    Imports

    Exports

    Sections

  • Codecs/f4v.swf
  • Codecs/raac.dll
    .dll windows:4 windows x86 arch:x86

    2569b16af6a5e82c06ef6aed87f5e148


    Headers

    Imports

    Exports

    Sections

  • Favorite/--- ṷӰ 򲿵Ӱѿ ---.url
  • Favorite/---- ϲƬ ----.url
  • Favorite/---- սƬ ----.url
  • Favorite/---- Ƭ ----.url
  • Favorite/---- Ӿ ----.url
  • Favorite/---- Ƭ ----.url
  • Favorite/---- Ƭ ----.url
  • Favorite/---- Ƭ ----.url
  • Favorite/---- ƻƬ ----.url
  • Favorite/---- ֲƬ ----.url
  • Favorite/---- Ƭ ----.url
  • Favorite/---- Ƭ ----.url
  • Favorite/----- Ӱ -----.url
  • NetAgent.dll
    .dll windows:4 windows x86 arch:x86

    05e994e89bca2bc1de7a95f2797bfdb7


    Headers

    Imports

    Exports

    Sections

  • QvodInsert.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    60cb72d35ebb5bc64e3e7d919a5c2144


    Headers

    Imports

    Exports

    Sections

  • QvodPlayer.exe
    .exe windows:4 windows x86 arch:x86

    0b3a200f972cab73f55b14b241ccf288


    Headers

    Imports

    Sections

  • QvodPlayer.xml
  • QvodTerminal.exe
    .exe windows:4 windows x86 arch:x86

    b26eb3e02721b71f9f3e69e4c065bccb


    Headers

    Imports

    Sections

  • Skin/$R0
    .dll regsvr32 windows:4 windows x86 arch:x86

    60cb72d35ebb5bc64e3e7d919a5c2144


    Headers

    Imports

    Exports

    Sections

  • Skin/$R2/NSIS.Library.RegTool.v2.$_3_.exe
    .exe windows:4 windows x86 arch:x86

    a56a9c58ddb2b2da8fde66551747ce70


    Headers

    Imports

    Sections

  • Skin/Blue.xml
  • Skin/Blue/back.bmp
  • Skin/Blue/back1.bmp
  • Skin/Blue/bottom.bmp
  • Skin/Blue/bottomleft.bmp
  • Skin/Blue/bottomright.bmp
  • Skin/Blue/caption.bmp
  • Skin/Blue/caption1.bmp
  • Skin/Blue/caption_mask.bmp
  • Skin/Blue/close.bmp
  • Skin/Blue/full.bmp
  • Skin/Blue/icon.bmp
  • Skin/Blue/info.bmp
  • Skin/Blue/infofull.bmp
  • Skin/Blue/left.bmp
  • Skin/Blue/leftbottom.bmp
  • Skin/Blue/lefttop.bmp
  • Skin/Blue/listbutton.bmp
  • Skin/Blue/listbutton2.bmp
  • Skin/Blue/max.bmp
  • Skin/Blue/media_files.bmp
  • Skin/Blue/media_files_2.bmp
  • Skin/Blue/media_info.bmp
  • Skin/Blue/media_sham.bmp
  • Skin/Blue/media_sham_2.bmp
  • Skin/Blue/mediaback1.bmp
  • Skin/Blue/mediaback2.bmp
  • Skin/Blue/mediaback3.bmp
  • Skin/Blue/mediaeditdel.bmp
  • Skin/Blue/mediare.bmp
  • Skin/Blue/mediatolist.bmp
  • Skin/Blue/mediatree.bmp
  • Skin/Blue/menu.bmp
  • Skin/Blue/min.bmp
  • Skin/Blue/mtk.bmp
  • Skin/Blue/mute.bmp
  • Skin/Blue/mute2.bmp
  • Skin/Blue/next.bmp
  • Skin/Blue/nowplay.bmp
  • Skin/Blue/open.bmp
  • Skin/Blue/open1.bmp
  • Skin/Blue/pause.bmp
  • Skin/Blue/play.bmp
  • Skin/Blue/playlist_toolbar.bmp
  • Skin/Blue/pre.bmp
  • Skin/Blue/process_left.bmp
  • Skin/Blue/process_right.bmp
  • Skin/Blue/processp.bmp
  • Skin/Blue/progress.bmp
  • Skin/Blue/progress_point.bmp
  • Skin/Blue/progress_thumb.bmp
  • Skin/Blue/reold.bmp
  • Skin/Blue/right.bmp
  • Skin/Blue/rightbottom.bmp
  • Skin/Blue/righttop.bmp
  • Skin/Blue/scroll_back.bmp
  • Skin/Blue/scroll_back_h.bmp
  • Skin/Blue/scroll_down.bmp
  • Skin/Blue/scroll_left.bmp
  • Skin/Blue/scroll_limit.bmp
  • Skin/Blue/scroll_limit_h.bmp
  • Skin/Blue/scroll_right.bmp
  • Skin/Blue/scroll_up.bmp
  • Skin/Blue/stop.bmp
  • Skin/Blue/tab.bmp
  • Skin/Blue/tab1.bmp
  • Skin/Blue/tabs_left.bmp
  • Skin/Blue/tabs_mid.bmp
  • Skin/Blue/tabs_right.bmp
  • Skin/Blue/top.bmp
  • Skin/Blue/topleft.bmp
  • Skin/Blue/topright.bmp
  • Skin/Blue/volume.bmp
  • Skin/Blue/volumeb.bmp
  • Skin/Blue/volumep.bmp
  • Skin/Logo.bmp
  • 新云软件.url
    .url