General

  • Target

    62bafe3c1e7c3f37d989761b0342748f_JaffaCakes118

  • Size

    12.8MB

  • MD5

    62bafe3c1e7c3f37d989761b0342748f

  • SHA1

    796640578bca62eb65e7b0d0dae1521db509a08b

  • SHA256

    3ee14f3daf7c04c043a237326d631629883c1c713136f8d175a346f8fd4ea51d

  • SHA512

    bf502c5bd21502eb73c6db1818dc22610bed298d9302929695f83b42dcaedb79817832ea86df9912c3357f6b1b26e0e2ee4fde72d610796e2f60260253953911

  • SSDEEP

    393216:hEGIaVLQpFDVXV/dpqc894xMA9X1xl4AKJCVu9kyDJ:hELaWhX1TEwMU1nMkVu+yt

Score
3/10

Malware Config

Signatures

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

Files

  • 62bafe3c1e7c3f37d989761b0342748f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    1f23f452093b5c1ff091a2f9fb4fa3e9


    Code Sign

    Headers

    Imports

    Sections

  • $APPDATA/kuai8/data/database.gmx
  • $APPDATA/kuai8/data/plugin/inwl.gmx
  • $APPDATA/kuai8/data/plugin/netwl.gmx
  • $APPDATA/kuai8/data/plugin/pc.gmx
  • $APPDATA/kuai8/data/plugin/scan.gmx
  • $APPDATA/kuai8/data/plugin/search.gmx
  • $APPDATA/kuai8/data/plugin/top.gmx
  • $APPDATA/kuai8/data/plugin/window.gmx
  • $PLUGINSDIR/ButtonEvent.dll
    .dll windows:4 windows x86 arch:x86

    4f33600ea976902305b03f1374d76bdb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/K8NsisMiniExtend.dll
    .dll windows:4 windows x86 arch:x86

    3d6f5d19937fbcc03e50a5a51d751a36


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/K8NsisUI.dll
    .dll windows:4 windows x86 arch:x86

    b443dbb117e21e289d1a8ccfe88a5a64


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/K8Skin.dll
    .dll windows:4 windows x86 arch:x86

    e0bac717c2c045706bebb1d1c71925fa


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NsisAdvance.dll
    .dll windows:4 windows x86 arch:x86

    dd808e53c83cbef141172288e5af9ea2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/k8nsis_skin_image.zip
    .zip
  • skin.xml
  • skin/arrow.png
    .png
  • skin/arrow_down.png
    .png
  • skin/arrow_up.png
    .png
  • skin/bk.png
    .png
  • skin/bkup.png
    .png
  • skin/btn.png
    .png
  • skin/btncustom.png
    .png
  • skin/btnlarge.png
    .png
  • skin/btnrun.png
    .png
  • skin/check.png
    .png
  • skin/close.png
    .png
  • skin/defaultbk.png
    .png
  • skin/dottedLine.png
    .png
  • skin/edit.png
    .png
  • skin/finish.png
    .png
  • skin/grayclose.png
    .png
  • skin/icon1.png
    .png
  • skin/installprogress.png
    .png
  • skin/installprogressbk.png
    .png
  • skin/line.png
    .png
  • skin/mainbtn.png
    .png
  • skin/messagebox_btn.png
    .png
  • skin/messagebox_close.png
    .png
  • skin/min.png
    .png
  • skin/progress.png
    .png
  • skin/progressbk.png
    .png
  • skin/slides01.png
    .png
  • skin/slides02.png
    .png
  • skin/slides03.png
    .png
  • skin/slides04.png
    .png
  • skin/textinstalling.png
    .png
  • skin/welcome.png
    .png
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    e2ee55bddad4241d619d6a8a38e2d869


    Headers

    Imports

    Exports

    Sections

  • K8Browser.exe
    .exe windows:4 windows x86 arch:x86

    6b2f97bc9710de2a01362b089c166cc4


    Code Sign

    Headers

    Imports

    Sections

  • K8BugReport.exe
    .exe windows:4 windows x86 arch:x86

    f67879dc4407d193a5bc37b8be81cceb


    Code Sign

    Headers

    Imports

    Sections

  • K8Common.dll
    .dll windows:4 windows x86 arch:x86

    4d9a487441151104e6d2998d06a12bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • K8DLPlatform.exe
    .exe windows:4 windows x86 arch:x86

    d59d16d8db1474120feaf5834836507d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • K8DLUtils.dll
    .dll windows:4 windows x86 arch:x86

    fd18edc2a5b16c449ba00d451ef94862


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • K8Flash.exe
    .exe windows:4 windows x86 arch:x86

    91afcc9824b2ee3072739e98ae34aaab


    Code Sign

    Headers

    Imports

    Sections

  • K8GM.exe
    .exe windows:4 windows x86 arch:x86

    c33d032b9256416d0d07b26d8c50c4bf


    Code Sign

    Headers

    Imports

    Sections

  • K8UIRender.dll
    .dll windows:4 windows x86 arch:x86

    bff08901a75f261e7439e4adb1423964


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • K8Update.exe
    .exe windows:4 windows x86 arch:x86

    43e325528e9b685f9996d285048be8fa


    Code Sign

    Headers

    Imports

    Sections

  • K8UrlEncrypt.dll
    .dll windows:4 windows x86 arch:x86

    c0768c7c872516b7caccaa7265d8d1d6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • K8Version.dll
    .dll windows:4 windows x86 arch:x86

    24da43a02b017d3044f9525b61004f90


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • K8Web.exe
    .exe windows:4 windows x86 arch:x86

    6ec15dfb79fe6446e0df66ccd5675c5e


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.VC80.CRT.manifest
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/K8NsisMiniExtend.dll
    .dll windows:4 windows x86 arch:x86

    3d6f5d19937fbcc03e50a5a51d751a36


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/K8Skin.dll
    .dll windows:4 windows x86 arch:x86

    e0bac717c2c045706bebb1d1c71925fa


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/k8nsis_skin_image.zip
    .zip
  • skin.xml
  • skin/btn.png
    .png
  • skin/btncomplete.png
    .png
  • skin/btndefault.png
    .png
  • skin/btnnormal.png
    .png
  • skin/check.png
    .png
  • skin/choice.png
    .png
  • skin/close.png
    .png
  • skin/defaultbk.png
    .png
  • skin/edit.png
    .png
  • skin/icon1.png
    .png
  • skin/line.png
    .png
  • skin/options.png
    .png
  • skin/progress.png
    .png
  • skin/progressbk.png
    .png
  • skin/radio.png
    .png
  • skin/repairing.png
    .png
  • skin/uninstalling.png
    .png
  • skin/uninstbk.png
    .png
  • skin/uninstbk2.png
    .png
  • skin/uninstfinish.png
    .png
  • skin/uninstfinish_icon.png
    .png
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    e2ee55bddad4241d619d6a8a38e2d869


    Headers

    Imports

    Exports

    Sections

  • audio/complete.wav
  • msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Headers

    Imports

    Exports

    Sections

  • msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections

  • tool/K8Bubble.exe
    .exe windows:4 windows x86 arch:x86

    391adb5bd1f6e48699c9c549d9584709


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8Common.dll
    .dll windows:4 windows x86 arch:x86

    4d9a487441151104e6d2998d06a12bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool/K8DLUtils.dll
    .dll windows:4 windows x86 arch:x86

    fd18edc2a5b16c449ba00d451ef94862


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool/K8External.exe
    .exe windows:4 windows x86 arch:x86

    49640e6876e7b27af3422f70ff8605d4


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8MiniPage.exe
    .exe windows:4 windows x86 arch:x86

    294cd716402064a9c1563bc1b46dab35


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8NetDetect.exe
    .exe windows:4 windows x86 arch:x86

    607181ae82b5003f85cfbab12c68a766


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8PluginFix.exe
    .exe windows:4 windows x86 arch:x86

    c92be1ac8fb1f5f151bc02aa5d77de9a


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8RTLFix.exe
    .exe windows:4 windows x86 arch:x86

    da00a85fa2c9d04e922452e8a21e4381


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8RestoreWindow.dll
    .dll windows:4 windows x86 arch:x86

    5ca237cfa74068362f5c882ed4818356


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool/K8Shell.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    95a08a9adbb958af9453fd6acf308ce4


    Headers

    Imports

    Exports

    Sections

  • tool/K8ShellIcon.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    1a58c343988d893094627585ebc7abdc


    Headers

    Imports

    Exports

    Sections

  • tool/K8Tray.exe
    .exe windows:4 windows x86 arch:x86

    2a38fe750c995d00e1eac9d84d2074f9


    Code Sign

    Headers

    Imports

    Sections

  • tool/K8UIRender.dll
    .dll windows:4 windows x86 arch:x86

    bff08901a75f261e7439e4adb1423964


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool/Microsoft.VC80.CRT.manifest
  • tool/msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Headers

    Imports

    Exports

    Sections

  • tool/msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections

  • tool_x64/K8Shell.dll
    .dll regsvr32 windows:4 windows x64 arch:x64

    f7c6370e65bd82f31d9eaf4cc7b39208


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool_x64/K8ShellIcon.dll
    .dll regsvr32 windows:4 windows x64 arch:x64

    2e66db1d60a1afbc3ad71f74078ff191


    Code Sign

    Headers

    Imports

    Exports

    Sections