Overview

overview

7

Static

static

3

d204c8d6b8...18.exe

windows7-x64

7

d204c8d6b8...18.exe

windows10-2004-x64

7

$2/Plugins...rc.dll

windows7-x64

3

$2/Plugins...rc.dll

windows10-2004-x64

3

$3/compone...rc.dll

windows7-x64

3

$3/compone...rc.dll

windows10-2004-x64

3

$3/compone...ns.dll

windows7-x64

3

$3/compone...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PROGRAM_F...or.exe

windows7-x64

3

$PROGRAM_F...or.exe

windows10-2004-x64

3

$PROGRAM_F...ll.dll

windows7-x64

3

$PROGRAM_F...ll.dll

windows10-2004-x64

3

$PROGRAM_F...mp.dll

windows7-x64

3

$PROGRAM_F...mp.dll

windows10-2004-x64

3

$PROGRAM_F...in.dll

windows7-x64

3

$PROGRAM_F...in.dll

windows10-2004-x64

3

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d204c8d6b8b73631b540fc9992cf6501_JaffaCakes118

  • Size

    887KB

  • MD5

    d204c8d6b8b73631b540fc9992cf6501

  • SHA1

    ee8c0561c49e94f0e8204317dc72ce1426cbf4a3

  • SHA256

    fe67c31e0527d03fe73cf5e167042931b2cd3674debaeb1d8a3aff604b855be2

  • SHA512

    70f0ebb75ef31e90eb2fba8f6268016c5b36e1508017be714f9fd09786ce255ae8551e2cdaa1784de16b1f10d72558e9b47376dfc9552a6df857e20220aa6bf6

  • SSDEEP

    24576:V/9fd/fb87h6yAU+eObfnUHqKffsxq/Op8UDCP:Vf/j87cyueObtKffsxBp1Dk

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • d204c8d6b8b73631b540fc9992cf6501_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    237a51742fed62d237b6f1b75452402f


    Headers

    Imports

    Sections

  • $2/Plugins/gen_klrc.dll
    .dll windows:4 windows x86 arch:x86

    24f59e6ecc8e911e44418a403347a912


    Headers

    Imports

    Exports

    Sections

  • $3/components/foo_klrc.dll
    .dll windows:4 windows x86 arch:x86

    0bf4c24e26ac2274fe0cb96fbef0238d


    Headers

    Imports

    Exports

    Sections

  • $3/components/foo_ui_columns.dll
    .dll windows:4 windows x86 arch:x86

    f52b1f4a36cc5eb266a810c2cc0b45a5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7d85f9c30f9e87a65fff848de2c96ac1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PROGRAM_FILES/Super Rabbit/KLPlayer/KLrcEditor.exe
    .exe windows:4 windows x86 arch:x86

    22d913ec74d42eb0ac124d659738c95e


    Headers

    Imports

    Sections

  • $PROGRAM_FILES/Super Rabbit/KLPlayer/KLyricDll.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    29bc98f66cbd5a1564ccdcd6709b917f


    Headers

    Imports

    Exports

    Sections

  • $PROGRAM_FILES/Super Rabbit/KLPlayer/ReadMe.txt
  • $PROGRAM_FILES/Windows Media Player/KLrcWmp.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    39599a158cf1733f12a32c94907350ad


    Headers

    Imports

    Exports

    Sections

  • $PROGRAM_FILES_COMMON/real/visualizations/KLrcPlugin.rpv
    .dll windows:4 windows x86 arch:x86

    68153bff67cdb7c7c91e1573ed7d9fad


    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    237a51742fed62d237b6f1b75452402f


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp