General

  • Target

    2819dd35cf32c504c2d4b9a20e3e5a9c_JaffaCakes118

  • Size

    13.8MB

  • MD5

    2819dd35cf32c504c2d4b9a20e3e5a9c

  • SHA1

    a73eec9cee39ee04cd841533e3a917398c03174b

  • SHA256

    c0820bc71851cc9cbc5bc6075c70579af0d71b4e4219330be7384f5e58802222

  • SHA512

    fa6188942fc91e73ec0ae4b0624b9788a48f859343f582d2e106e70a9c9f4a0be710979e45b0ad52c646e8663cbf209c525481c923a0583634b6e53959680c3d

  • SSDEEP

    196608:Q6jNCHUu6U83VqHazFhavMg0Ak7V8aB5gVfxEdY+eWeAxcIP22rsS1/ynKwkBZSk:QOA2Fq6phSMPAzR2e+em1rNFD18k

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 6 IoCs

Files

  • 2819dd35cf32c504c2d4b9a20e3e5a9c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • 1.bat
  • 91wanǹ59739.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • IE.ico
  • Thumbs.db
  • kugo.exe
    .exe windows:4 windows x86 arch:x86

    c473d11bb3ff67da8c49594d9642f004


    Headers

    Imports

    Sections

  • kugou7_1173-7.5.30.11857.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $APPDATA/KuGou8/AddIns/20130506114241454527.png
    .png
  • $APPDATA/KuGou8/AddIns/20130621110119361043.png
    .png
  • $APPDATA/KuGou8/FanxingAvatarRes/0/0.png
    .png
  • $APPDATA/KuGou8/FanxingAvatarRes/0/1.png
    .png
  • $APPDATA/KuGou8/FanxingAvatarRes/0/10.png
    .png
  • $APPDATA/KuGou8/FanxingAvatarRes/0/11.png
    .png
  • $APPDATA/KuGou8/FanxingAvatarRes/0/12.png
    .png
  • $APPDATA/KuGou8/FanxingAvatarRes/0/13.png
    .png
  • $APPDATA/KuGou8/FanxingAvatarRes/0/14.png
    .png
  • $APPDATA/KuGou8/FanxingAvatarRes/0/15.png
    .png
  • $APPDATA/KuGou8/FanxingAvatarRes/0/16.png
    .png
  • $APPDATA/KuGou8/FanxingAvatarRes/0/17.png
    .png
  • $APPDATA/KuGou8/FanxingAvatarRes/0/18.png
    .png
  • $APPDATA/KuGou8/FanxingAvatarRes/0/19.png
    .png
  • $APPDATA/KuGou8/FanxingAvatarRes/0/2.png
    .png
  • $APPDATA/KuGou8/FanxingAvatarRes/0/20.png
    .png
  • $APPDATA/KuGou8/FanxingAvatarRes/0/21.png
    .png
  • $APPDATA/KuGou8/FanxingAvatarRes/0/22.png
    .png
  • $APPDATA/KuGou8/FanxingAvatarRes/0/23.png
    .png
  • $APPDATA/KuGou8/FanxingAvatarRes/0/24.png
    .png
  • $APPDATA/KuGou8/FanxingAvatarRes/0/25.png
    .png
  • $APPDATA/KuGou8/FanxingAvatarRes/0/26.png
    .png
  • $APPDATA/KuGou8/FanxingAvatarRes/0/27.png
    .png
  • $APPDATA/KuGou8/FanxingAvatarRes/0/28.png
    .png
  • $APPDATA/KuGou8/FanxingAvatarRes/0/29.png
    .png
  • $APPDATA/KuGou8/FanxingAvatarRes/0/3.png
    .png
  • $APPDATA/KuGou8/FanxingAvatarRes/0/30.png
    .png
  • $APPDATA/KuGou8/FanxingAvatarRes/0/4.png
    .png
  • $APPDATA/KuGou8/FanxingAvatarRes/0/5.png
    .png
  • $APPDATA/KuGou8/FanxingAvatarRes/0/6.png
    .png
  • $APPDATA/KuGou8/FanxingAvatarRes/0/7.png
    .png
  • $APPDATA/KuGou8/FanxingAvatarRes/0/8.png
    .png
  • $APPDATA/KuGou8/FanxingAvatarRes/0/9.png
    .png
  • $APPDATA/KuGou8/Perfect.SVC
  • $APPDATA/KuGou8/RadioLocalData.ini
  • $APPDATA/KuGou8/SkinPic/NewSkin/0acf825ee57de7da97e5c0ec830cce49/Thumbnail.jpg
    .jpg
  • $APPDATA/KuGou8/SkinPic/NewSkin/0acf825ee57de7da97e5c0ec830cce49/back.png
    .jpg
  • $APPDATA/KuGou8/SkinPic/NewSkin/131e6bdabfc9be39c67efe7d84846699/Thumbnail.jpg
    .jpg
  • $APPDATA/KuGou8/SkinPic/NewSkin/131e6bdabfc9be39c67efe7d84846699/back.png
    .jpg
  • $APPDATA/KuGou8/SkinPic/NewSkin/4446f31eab069c519073608c8fa4231f/Thumbnail.jpg
    .jpg
  • $APPDATA/KuGou8/SkinPic/NewSkin/4446f31eab069c519073608c8fa4231f/back.png
    .jpg
  • $APPDATA/KuGou8/SkinPic/NewSkin/651e097fbedc696c5850bda5c846bce6/Thumbnail.jpg
    .jpg
  • $APPDATA/KuGou8/SkinPic/NewSkin/651e097fbedc696c5850bda5c846bce6/back.png
    .jpg
  • $APPDATA/KuGou8/SkinPic/NewSkin/696a8e75fe9f0772e9ae8f9ded7b339a/Thumbnail.jpg
    .jpg
  • $APPDATA/KuGou8/SkinPic/NewSkin/696a8e75fe9f0772e9ae8f9ded7b339a/back.png
    .jpg
  • $APPDATA/KuGou8/SkinPic/NewSkin/bd736fe936aa7fd25b8c99cf87c34006/Thumbnail.jpg
    .jpg
  • $APPDATA/KuGou8/SkinPic/NewSkin/bd736fe936aa7fd25b8c99cf87c34006/back.png
    .jpg
  • $APPDATA/KuGou8/SkinPic/NewSkin/d23cdbe88401ef787dcc0b8f14edc449/Thumbnail.jpg
    .jpg
  • $APPDATA/KuGou8/SkinPic/NewSkin/d23cdbe88401ef787dcc0b8f14edc449/back.png
    .jpg
  • $APPDATA/KuGou8/SkinPic/NewSkin/e021bcbaebbbb267a71365727b7d6dc4/Thumbnail.jpg
    .jpg
  • $APPDATA/KuGou8/SkinPic/NewSkin/e021bcbaebbbb267a71365727b7d6dc4/back.png
    .jpg
  • $APPDATA/KuGou8/SkinPic/NewSkin/e2dbf10998041f0d64e6e5d877b52ddb/Thumbnail.jpg
    .jpg
  • $APPDATA/KuGou8/SkinPic/NewSkin/e2dbf10998041f0d64e6e5d877b52ddb/back.png
    .jpg
  • $APPDATA/KuGou8/SkinPic/NewSkin/newskin.xml
  • $APPDATA/KuGou8/SkinPic/Promotion/92f95163b7bca935c66ff1d20dbd25e2.zip
    .zip
  • ĺ.jpg
    .jpg
  • ĺ_img.JPG
    .jpg
  • .JPG
    .jpg
  • _img.JPG
    .jpg
  • غ.JPG
    .jpg
  • غ_img.JPG
    .jpg
  • ׷.JPG
    .jpg
  • ׷_img.JPG
    .jpg
  • $APPDATA/KuGou8/SkinPic/default/166b36c6c06e895f3dfc9e471c36050b/Thumbnail.jpg
    .png
  • $APPDATA/KuGou8/SkinPic/default/166b36c6c06e895f3dfc9e471c36050b/back.png
    .jpg
  • $APPDATA/KuGou8/SkinPic/default/5cdf715b6736e851f78c86174ff0d839/Thumbnail.jpg
    .png
  • $APPDATA/KuGou8/SkinPic/default/5cdf715b6736e851f78c86174ff0d839/back.png
    .jpg
  • $APPDATA/KuGou8/SkinPic/default/6c34dff5f732331864cdd3ca833cf6d7/Thumbnail.jpg
    .png
  • $APPDATA/KuGou8/SkinPic/default/6c34dff5f732331864cdd3ca833cf6d7/back.png
    .jpg
  • $APPDATA/KuGou8/SkinPic/default/a603a6e27c34c2e078a3f59dffb252ca/Thumbnail.jpg
    .png
  • $APPDATA/KuGou8/SkinPic/default/a603a6e27c34c2e078a3f59dffb252ca/back.png
    .jpg
  • $APPDATA/KuGou8/SkinPic/default/eaf9e4323bb741f3e2a1141468dca8c0/Thumbnail.jpg
    .png
  • $APPDATA/KuGou8/SkinPic/default/eaf9e4323bb741f3e2a1141468dca8c0/back.png
    .jpg
  • $APPDATA/KuGou8/SkinPic/default/skin.xml
  • $APPDATA/KuGou8/app_option.ini
  • $APPDATA/KuGou8/app_option.inicfg
  • $APPDATA/KuGou8/net_option.ini
  • $APPDATA/KuGou8/net_option.inicfg
  • $PLUGINSDIR/Cancel.png
    .png
  • $PLUGINSDIR/ChangeFolder.png
    .png
  • $PLUGINSDIR/Close.png
    .png
  • $PLUGINSDIR/CommonRadio.png
    .png
  • $PLUGINSDIR/Complete.png
    .png
  • $PLUGINSDIR/DialogIcon.png
    .png
  • $PLUGINSDIR/DirEditBackImg.png
    .png
  • $PLUGINSDIR/License.png
    .png
  • $PLUGINSDIR/Light.png
    .png
  • $PLUGINSDIR/MsgDlgBg.png
    .png
  • $PLUGINSDIR/SilentClose.png
    .png
  • $PLUGINSDIR/SilentDlgBg.png
    .png
  • $PLUGINSDIR/SilentLight.png
    .png
  • $PLUGINSDIR/SilentProgressbar.png
    .png
  • $PLUGINSDIR/SplitLine.png
    .png
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/banner.png
    .png
  • $PLUGINSDIR/banner01.png
    .png
  • $PLUGINSDIR/banner02.png
    .png
  • $PLUGINSDIR/banner03.png
    .png
  • $PLUGINSDIR/banner04.png
    .png
  • $PLUGINSDIR/banner05.png
    .png
  • $PLUGINSDIR/bg.png
    .png
  • $PLUGINSDIR/bg01.png
    .png
  • $PLUGINSDIR/bg02.png
    .png
  • $PLUGINSDIR/bg03.png
    .png
  • $PLUGINSDIR/bg04.png
    .png
  • $PLUGINSDIR/bg05.png
    .png
  • $PLUGINSDIR/button.png
    .png
  • $PLUGINSDIR/isx.dll
    .dll windows:4 windows x86 arch:x86

    5186c47d4154c6438758b97930a667ad


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/licbg.png
    .png
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    58e4f7b5d88f65a94186b5270d11ed1e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsUI.dll
    .dll windows:4 windows x86 arch:x86

    89dabc453ba171df764d9739be8b503c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/progressbar.png
    .png
  • $PLUGINSDIR/select.png
    .png
  • $SYSDIR/msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ArtistList.bin
  • AudioQuality.exe
    .exe windows:5 windows x86 arch:x86

    4b390f4a66ce791d2d2d422dcba64a8b


    Code Sign

    Headers

    Imports

    Sections

  • CrashReporter.exe
    .exe windows:5 windows x86 arch:x86

    1336b6c2055c42d1b1df1cbbfddf2d47


    Code Sign

    Headers

    Imports

    Sections

  • IEBox.exe
    .exe windows:5 windows x86 arch:x86

    3f1bb338ef17456770c2201164e5b23d


    Code Sign

    Headers

    Imports

    Sections

  • KGDaemon.exe
    .exe windows:5 windows x86 arch:x86

    b485e9fc73e93f687a7a1f301c7d7143


    Code Sign

    Headers

    Imports

    Sections

  • KGService.exe
    .exe windows:5 windows x86 arch:x86

    ec16b0841620f7e068de41d017ca2dc5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • KuGoo3DownXControl.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    ed7c697fd8558a203dd8c0e782422aa9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • KuGou.exe
    .exe windows:5 windows x86 arch:x86

    b321f24596bc880015754cc3561383a7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • KuGouMusic.ico
  • MobileIdentifyDLL.dll
    .dll windows:5 windows x86 arch:x86

    77a5d1c57d4f0b390784d2504aeafb69


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RunGame.exe
    .exe windows:5 windows x86 arch:x86

    17ea0951b5b79b4cac9a74b3a020bfbb


    Code Sign

    Headers

    Imports

    Sections

  • codecs.dll
    .dll windows:5 windows x86 arch:x86

    ad9b6a85d56da822126b9eb3b3048cab


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • core.dll
    .dll windows:5 windows x86 arch:x86

    61605be3598c9c06dad052eaa7aadb65


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dataimporter.exe
    .exe windows:5 windows x86 arch:x86

    857769a8dc966528bf6380c3ca00299d


    Code Sign

    Headers

    Imports

    Sections

  • dpinst.exe
    .exe windows:5 windows x86 arch:x86

    a57d10b71bb18746eb27694cbc85495b


    Code Sign

    Headers

    Imports

    Sections

  • dpinst64.exe
    .exe windows:5 windows x64 arch:x64

    fb95640f3e1d722e0d0a2c15b1cec45b


    Code Sign

    Headers

    Imports

    Sections

  • kadb.exe
    .exe windows:5 windows x86 arch:x86

    7da0ecfeb10d1b7d1f16f2c32b1f567f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • kgplayer.dll
    .dll windows:5 windows x86 arch:x86

    a4ba04983715149992278333387d2f9f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • kugou.skn
  • login.wav
  • msdmo.dll
    .dll windows:5 windows x86 arch:x86

    d14cdab623538d7d303a3ce24b59bba4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugin.dll
    .dll windows:5 windows x86 arch:x86

    15dbf3dfea96dde1f617de42723990f1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • popads.dll
    .dll windows:5 windows x86 arch:x86

    72a23f0ddf0dfa4aae30f1621fad69b2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • statistics.dll
    .dll windows:5 windows x86 arch:x86

    3e56359da5da17ca1aada81d5dcb5511


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • storage.dll
    .dll windows:5 windows x86 arch:x86

    9e54d9ee9fb9c2de4a88454c6fd9442f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • suite.dll
    .dll windows:5 windows x86 arch:x86

    0a46ea2b3f9b93345e633ae8fe4d497e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • transmission.dll
    .dll windows:5 windows x86 arch:x86

    cb866320708f0b63d58541443046bedf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/isx.dll
    .dll windows:4 windows x86 arch:x86

    5186c47d4154c6438758b97930a667ad


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • upgrade.dll
    .dll windows:5 windows x86 arch:x86

    6878cb7bf2c48812c535a2dbf030dea5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • winusb.dll
    .dll windows:6 windows x86 arch:x86

    2520a640b1fa42e17abe0c7a1b0c2425


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • wmadmod.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    3eebe58d99fd89aac201fc9b9efdf0c8


    Code Sign

    Headers

    Imports

    Exports

    Sections