General

  • Target

    da0aa8ecc65ec23f6655ecd0a3655360_JaffaCakes118

  • Size

    5.9MB

  • MD5

    da0aa8ecc65ec23f6655ecd0a3655360

  • SHA1

    7b53bc9b3e420f5a960e380020ec43dfe11e8365

  • SHA256

    043a82ccf5eb5c65d4d90729dd3e697320262ad6500a509dd8b87913a04e366a

  • SHA512

    770d18043fe69556b64c4c5522191c123808b14d383d25e327864fed8ae6a9b13a68b8401383ca86d46a6eb278d95c07b37bf132c090f2d4b9458f45e4276071

  • SSDEEP

    98304:q14AAkA+ZlsATm7UrVJfppF2VWAnvkW+KriZyuqiZB7OLAOifaprATUHn/6XU6BK:Dn/2UZ2S7111lCYpcGVXUqv1P

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • da0aa8ecc65ec23f6655ecd0a3655360_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/Base64.dll
    .dll windows:4 windows x86 arch:x86

    472def3d6dc5d4ffe27376a831b4d49b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KWGameBox.dll
    .dll windows:5 windows x86 arch:x86

    0214c00ca345b4ffa8325c14eba9e8a7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KuWoNsis_new.dll
    .dll windows:5 windows x86 arch:x86

    4ab986f64a1874664feabca76ad3c867


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KuWoRes/KwGameBoxLicense.txt
  • $PLUGINSDIR/KuWoRes/ad01.png
    .png
  • $PLUGINSDIR/KuWoRes/ad02.png
    .png
  • $PLUGINSDIR/KuWoRes/ad03.png
    .png
  • $PLUGINSDIR/KuWoRes/arrowd.png
    .png
  • $PLUGINSDIR/KuWoRes/arrows.png
    .png
  • $PLUGINSDIR/KuWoRes/bg.png
    .png
  • $PLUGINSDIR/KuWoRes/bg_repair.png
    .png
  • $PLUGINSDIR/KuWoRes/browsed.png
    .png
  • $PLUGINSDIR/KuWoRes/browseh.png
    .png
  • $PLUGINSDIR/KuWoRes/browsen.png
    .png
  • $PLUGINSDIR/KuWoRes/browsep.png
    .png
  • $PLUGINSDIR/KuWoRes/btnd.png
    .png
  • $PLUGINSDIR/KuWoRes/btnh.png
    .png
  • $PLUGINSDIR/KuWoRes/btnn.png
    .png
  • $PLUGINSDIR/KuWoRes/btnp.png
    .png
  • $PLUGINSDIR/KuWoRes/check.bmp
  • $PLUGINSDIR/KuWoRes/checkc.png
    .png
  • $PLUGINSDIR/KuWoRes/checku.png
    .png
  • $PLUGINSDIR/KuWoRes/close0.png
    .png
  • $PLUGINSDIR/KuWoRes/close1.png
    .png
  • $PLUGINSDIR/KuWoRes/close2.png
    .png
  • $PLUGINSDIR/KuWoRes/complete.ini
  • $PLUGINSDIR/KuWoRes/directory.ini
  • $PLUGINSDIR/KuWoRes/instfiles.ini
  • $PLUGINSDIR/KuWoRes/main.ini
  • $PLUGINSDIR/KuWoRes/minimize0.png
    .png
  • $PLUGINSDIR/KuWoRes/minimize1.png
    .png
  • $PLUGINSDIR/KuWoRes/minimize2.png
    .png
  • $PLUGINSDIR/KuWoRes/prog_fill_l.png
    .png
  • $PLUGINSDIR/KuWoRes/prog_fill_m.png
    .png
  • $PLUGINSDIR/KuWoRes/prog_fill_r.png
    .png
  • $PLUGINSDIR/KuWoRes/prog_l.png
    .png
  • $PLUGINSDIR/KuWoRes/prog_m.png
    .png
  • $PLUGINSDIR/KuWoRes/prog_r.png
    .png
  • $PLUGINSDIR/KuWoRes/radioc.png
    .png
  • $PLUGINSDIR/KuWoRes/radiou.png
    .png
  • $PLUGINSDIR/KuWoRes/reinstfiles.ini
  • $PLUGINSDIR/KuWoRes/reinstfiles_suc.ini
  • $PLUGINSDIR/KuWoRes/remain.ini
  • $PLUGINSDIR/KuWoRes/remain_suc.ini
  • $PLUGINSDIR/KuWoRes/repair_failed.png
    .png
  • $PLUGINSDIR/KuWoRes/repair_ing.png
    .png
  • $PLUGINSDIR/KuWoRes/repair_suc.png
    .png
  • $PLUGINSDIR/KuWoRes/unconfirm.ini
  • $PLUGINSDIR/KuWoRes/unfeedback.ini
  • $PLUGINSDIR/KuWoRes/uninstfiles.ini
  • $PLUGINSDIR/KuWoRes/unmain.ini
  • $PLUGINSDIR/KuWoRes/unrepair.ini
  • $PLUGINSDIR/ShellLink.dll
    .dll windows:5 windows x86 arch:x86

    50112fdd20200a51dbedeae8f1f33cdb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    5bdcdde5acd7b395f3f3d19ebbb8c6cd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/messagebox.dll
    .dll windows:4 windows x86 arch:x86

    c3f3267799760b39c4e2763e70fc3909


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • Cfgs/Config.ini
  • DuiLib.dll
    .dll windows:5 windows x86 arch:x86

    c9ff825fc47d9545579532f608cb0f24


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • KWExtDataDef.dll
    .dll windows:5 windows x86 arch:x86

    3628e407815982ee28d0871a589c2b76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • KWGameBox.exe
    .exe windows:5 windows x86 arch:x86

    c7423fc7cd4e4827aca8c6f4fab239c9


    Code Sign

    Headers

    Imports

    Sections

  • KwGameBoxLogo.png
  • KwHttpRequestMgr.dll
    .dll windows:5 windows x86 arch:x86

    eb6101331e5e73f17eec52139cdefbf0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • KwLib.dll
    .dll windows:5 windows x86 arch:x86

    3625f1c757cff072758da61047554808


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • KwLog.dll
    .dll windows:5 windows x86 arch:x86

    564e9e4a7570bfcee28f21f858b9b480


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • KwModConfig.dll
    .dll windows:5 windows x86 arch:x86

    13e48c565b28fcd407d9e4e3dfadb48a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • KwModHotKey.dll
    .dll windows:5 windows x86 arch:x86

    2f65d6f7b693a98c6e2751753427f0c3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • KwMusicCore.dll
    .dll windows:5 windows x86 arch:x86

    677f10ebfe868a7b1976494a22f15e2f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • KwUIExt.dll
    .dll windows:5 windows x86 arch:x86

    6107a1ea2543fe35a79854fc6180373d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • KwUpdate.exe
    .exe windows:5 windows x86 arch:x86

    6ab0b391b6abb5d1d2ebdd6bc638d385


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.VC90.CRT.manifest
  • Microsoft.VC90.MFC.manifest
  • Module.xml
    .xml
  • ReadMe.txt
  • Res/Template/DM_Recovery_5.html
    .js
  • Res/Template/Repair.html
    .html .js polyglot
  • Res/Template/SYS_Setup_10.html
    .html .js polyglot
  • Res/Template/Speed.html
    .html .js polyglot
  • Res/Template/clock.html
    .html .js polyglot
  • Res/Template/css/base.css
  • Res/Template/css/game.css
  • Res/Template/css/tips.css
  • Res/Template/css2/base.css
  • Res/Template/css2/xf.css
  • Res/Template/error.html
    .html
  • Res/Template/flash/alarm.mp3
  • Res/Template/flash/loading.swf
  • Res/Template/flash_new.html
    .html .js polyglot
  • Res/Template/funcInstall.html
    .html .js polyglot
  • Res/Template/gameHistory.html
    .html .js polyglot
  • Res/Template/giftCard.html
    .html .js polyglot
  • Res/Template/img/a.jpg
    .jpg
  • Res/Template/img/addGif.gif
    .gif
  • Res/Template/img/btnL.png
    .png
  • Res/Template/img/btnLhover.png
    .png
  • Res/Template/img/btnR.png
    .png
  • Res/Template/img/btnRhover.png
    .png
  • Res/Template/img/close.gif
    .gif
  • Res/Template/img/closeh.jpg
    .jpg
  • Res/Template/img/df.gif
    .gif
  • Res/Template/img/dit.png
    .png
  • Res/Template/img/ditHover.png
    .png
  • Res/Template/img/go.png
    .png
  • Res/Template/img/goActive.png
    .png
  • Res/Template/img/goHover.png
    .png
  • Res/Template/img/home.png
    .png
  • Res/Template/img/homeActive.png
    .png
  • Res/Template/img/homeHover.png
    .png
  • Res/Template/img/imga.jpg
    .jpg
  • Res/Template/img/jd.jpg
    .jpg
  • Res/Template/img/loading.gif
    .gif
  • Res/Template/img/loading2.gif
    .gif
  • Res/Template/img/ppss.jpg
    .jpg
  • Res/Template/img/qq.gif
    .gif
  • Res/Template/img/sn.gif
    .gif
  • Res/Template/img/ss.png
    .png
  • Res/Template/img/sta.gif
    .gif
  • Res/Template/img/stb.gif
    .gif
  • Res/Template/img/wa.jpg
    .jpg
  • Res/Template/img/wb.jpg
    .jpg
  • Res/Template/img/wc.jpg
    .jpg
  • Res/Template/index.html
    .html .js polyglot
  • Res/Template/js/common.js
    .js
  • Res/Template/js/cookie.js
    .js
  • Res/Template/js/jquery-1.6.2.min.js
    .js
  • Res/Template/js/jquery-ui.js
    .js
  • Res/Template/loadJump.html
    .html
  • Res/Template/loading1.html
  • Res/Template/login.html
    .html .js polyglot
  • Res/Template/loginIndex.html
    .html
  • Skin/DefaultSkin/WebLoading.png
    .png
  • Skin/DefaultSkin/bt_tools.png
    .png
  • Skin/DefaultSkin/btn_aftersign.png
    .png
  • Skin/DefaultSkin/btn_clock.png
    .png
  • Skin/DefaultSkin/btn_close.png
    .png
  • Skin/DefaultSkin/btn_closemute.png
    .png
  • Skin/DefaultSkin/btn_createicon.png
    .png
  • Skin/DefaultSkin/btn_dlg_refresh.png
    .png
  • Skin/DefaultSkin/btn_fullscreen.png
    .png
  • Skin/DefaultSkin/btn_gamebrief.png
    .png
  • Skin/DefaultSkin/btn_login.png
    .png
  • Skin/DefaultSkin/btn_max.png
    .png
  • Skin/DefaultSkin/btn_min.png
    .png
  • Skin/DefaultSkin/btn_more.png
    .png
  • Skin/DefaultSkin/btn_msgbox.png
    .png
  • Skin/DefaultSkin/btn_msgbox_focus.png
    .png
  • Skin/DefaultSkin/btn_mute.png
    .png
  • Skin/DefaultSkin/btn_navback.png
    .png
  • Skin/DefaultSkin/btn_operate.png
    .png
  • Skin/DefaultSkin/btn_recharge.png
    .png
  • Skin/DefaultSkin/btn_refresh.png
    .png
  • Skin/DefaultSkin/btn_register.png
    .png
  • Skin/DefaultSkin/btn_repair.png
    .png
  • Skin/DefaultSkin/btn_report.png
    .png
  • Skin/DefaultSkin/btn_restore.png
    .png
  • Skin/DefaultSkin/btn_saveprogress.png
    .png
  • Skin/DefaultSkin/btn_score.png
    .png
  • Skin/DefaultSkin/btn_screenshot.png
    .png
  • Skin/DefaultSkin/btn_search.png
    .png
  • Skin/DefaultSkin/btn_service.png
    .png
  • Skin/DefaultSkin/btn_setting.png
    .png
  • Skin/DefaultSkin/btn_showalltab.png
    .png
  • Skin/DefaultSkin/btn_sign.png
    .png
  • Skin/DefaultSkin/btn_skin.png
    .png
  • Skin/DefaultSkin/btn_speed.png
    .png
  • Skin/DefaultSkin/btn_strategy.png
    .png
  • Skin/DefaultSkin/btn_subaccount.png
    .png
  • Skin/DefaultSkin/btn_tool_restore.png
    .png
  • Skin/DefaultSkin/btn_username.png
    .png
  • Skin/DefaultSkin/changeskindlgskin.xml
  • Skin/DefaultSkin/edit_search_bk.png
    .png
  • Skin/DefaultSkin/gamewebskin.xml
    .xml
  • Skin/DefaultSkin/globalnotifyskin.xml
    .xml
  • Skin/DefaultSkin/htmlnewwindowskin.xml
    .xml
  • Skin/DefaultSkin/icon_answer.png
    .png
  • Skin/DefaultSkin/icon_clock.png
    .png
  • Skin/DefaultSkin/icon_createicon.png
    .png
  • Skin/DefaultSkin/icon_fullscreen.png
    .png
  • Skin/DefaultSkin/icon_more.png
    .png
  • Skin/DefaultSkin/icon_mute.png
    .png
  • Skin/DefaultSkin/icon_portrait.png
    .png
  • Skin/DefaultSkin/icon_qq.png
    .png
  • Skin/DefaultSkin/icon_recharge.png
    .png
  • Skin/DefaultSkin/icon_repair.png
    .png
  • Skin/DefaultSkin/icon_saveprogress.png
    .png
  • Skin/DefaultSkin/icon_screenshot.png
    .png
  • Skin/DefaultSkin/icon_service.png
    .png
  • Skin/DefaultSkin/icon_speed.png
    .png
  • Skin/DefaultSkin/icon_strategy.png
    .png
  • Skin/DefaultSkin/icon_subaccount.png
    .png
  • Skin/DefaultSkin/icon_title.png
    .png
  • Skin/DefaultSkin/icon_tool_restore.png
    .png
  • Skin/DefaultSkin/icon_weibo.png
    .png
  • Skin/DefaultSkin/menu_common_groupline.png
    .png
  • Skin/DefaultSkin/menu_common_sel.png
    .png
  • Skin/DefaultSkin/menu_item_comm_bk.png
    .png
  • Skin/DefaultSkin/menu_secondary_icon.png
    .png
  • Skin/DefaultSkin/msgboxskin.xml
    .xml
  • Skin/DefaultSkin/opt_flash.png
    .png
  • Skin/DefaultSkin/opt_store.png
    .png
  • Skin/DefaultSkin/opt_webgame.png
    .png
  • Skin/DefaultSkin/opt_xshow.png
    .png
  • Skin/DefaultSkin/popupdlgskin.xml
    .xml
  • Skin/DefaultSkin/searchdlgskin.xml
    .xml
  • Skin/DefaultSkin/skin.xml
    .xml
  • Skin/DefaultSkin/skin_more.jpg
    .jpg
  • Skin/DefaultSkin/tab_btn_close.png
    .png
  • Skin/DefaultSkin/tab_btn_close_select.png
    .png
  • Skin/DefaultSkin/tab_opt.png
    .png
  • Skin/DefaultSkin/tab_opt_home.png
    .png
  • Skin/LocalSkin/1/bk.jpg
    .jpg
  • Skin/LocalSkin/2/bk.jpg
    .jpg
  • Skin/LocalSkin/3/bk.jpg
    .jpg
  • Skin/LocalSkin/4/bk.jpg
    .jpg
  • Skin/LocalSkin/5/bk.jpg
    .jpg
  • Skin/LocalSkin/6/bk.jpg
    .jpg
  • Skin/LocalSkin/7/bk.jpg
    .jpg
  • Skin/LocalSkin/8/bk.jpg
    .jpg
  • ToolSort.ini
  • UIPopupDialog.dll
    .dll windows:5 windows x86 arch:x86

    da22ad46c5c69fa0518e9814d7adef0b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • UISkinManager.dll
    .dll windows:5 windows x86 arch:x86

    185481faa7e3d06e848c93a6e004bb65


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • UIUpdateDialog.dll
    .dll windows:5 windows x86 arch:x86

    397fc7a8aa5a3887a878b37b472d6829


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Uninst.exe.nsis
  • Win7Trait.dll
    .dll windows:5 windows x86 arch:x86

    55f43f021a055aa3a9a85c2c04d46bd3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Zlib.dll
    .dll windows:5 windows x86 arch:x86

    b961c4dc5c6274964fb2995c8ec3244e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • comx3.dll
    .dll windows:5 windows x86 arch:x86

    7ed71caf96fc9b35f81a6cb82a5a6237


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mfc90u.dll
    .dll windows:5 windows x86 arch:x86

    3894207feef799bfdbf86de5bc4b812d


    Code Sign

    Headers

    Imports

    Sections

  • msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    c2219f463c61f3122c87331837e12c34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections