General

  • Target

    407554638863832a85501284e28bb653_JaffaCakes118

  • Size

    2.0MB

  • MD5

    407554638863832a85501284e28bb653

  • SHA1

    15da1c05df4497f36571fab20f2eeb872fe9ab3c

  • SHA256

    71bbe82e7efc035f8f5fded943a83649cba61929ffeca1b615d8bfde104df9ef

  • SHA512

    adbbb87fc15f006d97638bef1234c0c04ae903bd5f5b902e2cc859fd2c617bdabdac6f2cb1d747bc87fc80c551d1ae584af30c30b60bca39f983b4a9a9ec8bc0

  • SSDEEP

    49152:ipXbxRXojakAuGXnwAkqqvMmVPwJDOlY4f8fwM1F2eKhI:2LrogNXwAkqqv0ClJfMF2RI

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 407554638863832a85501284e28bb653_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    237a51742fed62d237b6f1b75452402f


    Headers

    Imports

    Sections

  • $PLUGINSDIR/AnimGif.dll
    .dll windows:4 windows x86 arch:x86

    b4b71331b921e2f441a2b05306cd7dae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KuWoNsis_new.dll
    .dll windows:4 windows x86 arch:x86

    188422af675275317874dcc96bd6779b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • 360Inst-kuwo.exe
    .exe windows:4 windows x86 arch:x86

    6ddbd50b0947319d109c43d495431eee


    Code Sign

    Headers

    Imports

    Sections

  • EncodeBnd.exe
    .exe windows:4 windows x86 arch:x86

    78f160eb7866ebc0f1481a827449de0a


    Code Sign

    Headers

    Imports

    Sections

  • Install360AV.exe
    .exe windows:4 windows x86 arch:x86

    5314869c22211c933a19852a20d08453


    Code Sign

    Headers

    Imports

    Sections

  • bin/CKuwoPlayer.dll
    .dll windows:5 windows x86 arch:x86

    cc3290c3217d058fcd1a545829056489


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/CWmpPlayer.dll
    .dll windows:5 windows x86 arch:x86

    ffa030b08ed1f9b091f130d76d941a26


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/CoreAVC0.ax
    .dll regsvr32 windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • bin/DshowPlayer.dll
    .dll windows:5 windows x86 arch:x86

    51011157c8eff9ae62263977212e0b44


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/Encode.exe
    .exe windows:5 windows x86 arch:x86

    da51d131c2d14a263ced57385b829735


    Code Sign

    Headers

    Imports

    Sections

  • bin/KwAni.dll
    .dll windows:5 windows x86 arch:x86

    42f0a66ccc29a28cd542a63f4ad4eb08


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwCommonUI.dll
    .dll windows:5 windows x86 arch:x86

    6fb54d142812ad6f7bb8a3538b5ee76e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwDataDef.dll
    .dll windows:5 windows x86 arch:x86

    aa702046c72aed9d51fc3fc4e8dee619


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwHttpRequestMgr.dll
    .dll windows:5 windows x86 arch:x86

    d85133437b5c5224b68c0cd4135d6e0f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwInfos.exe
    .exe windows:5 windows x86 arch:x86

    b19d01a4507760d99b71d57202310dd9


    Code Sign

    Headers

    Imports

    Sections

  • bin/KwLayoutMgr.dll
    .dll windows:5 windows x86 arch:x86

    f040f2896fce7a93cdb179c367b46a18


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwLib.dll
    .dll windows:5 windows x86 arch:x86

    80fb743ceeaf8846cbb0f188e2f19f42


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwLog.dll
    .dll windows:5 windows x86 arch:x86

    ceb217a344dff32a23c9c5f880b547e8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwMV.exe
    .exe windows:5 windows x86 arch:x86

    f23dc9a03f56db1320fc38a78bda3a47


    Code Sign

    Headers

    Imports

    Sections

  • bin/KwModAppStore.dll
    .dll windows:5 windows x86 arch:x86

    1e6eba50802006eea8456cc8eefba99e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModConfig.dll
    .dll windows:5 windows x86 arch:x86

    98b0c46198507b102b17de196fa9ab59


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModDownload.dll
    .dll windows:5 windows x86 arch:x86

    a6437262493294e3130f4979d4a10c0b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModGameEntry.dll
    .dll windows:5 windows x86 arch:x86

    5174ebbb538db1cf18290fb233f6501c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModHotKey.dll
    .dll windows:5 windows x86 arch:x86

    e4a7d279b921e2ccc73c424f05c23435


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModLocalMusic.dll
    .dll windows:5 windows x86 arch:x86

    7de1e284693f8f4e06b37536be09e82b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModLyric.dll
    .dll windows:5 windows x86 arch:x86

    a00aea2e78794fc0b5229a72c521016c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModLyricShow.dll
    .dll windows:5 windows x86 arch:x86

    ce7dc012b739927ac47cbf27d78b4a9a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModNetSong.dll
    .dll windows:5 windows x86 arch:x86

    2efaa4bf8865fcf9eca3faef3dc5634f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModPicShow.dll
    .dll windows:5 windows x86 arch:x86

    941ec3918ac11b662aa2ac409f01e1e4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModPlaylist.dll
    .dll windows:5 windows x86 arch:x86

    41249c81fc3b1bedfc8681c70c584d76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModSayHello.dll
    .dll windows:5 windows x86 arch:x86

    1c64e5207219932bc4fbe24746fa4175


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModSkinManager.dll
    .dll windows:5 windows x86 arch:x86

    48b1b09fd2c980a835e81d39fda4bc35


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModSynList.dll
    .dll windows:5 windows x86 arch:x86

    4865a105334bd4f791a160ce1905bbd9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModWebRecommend.dll
    .dll windows:5 windows x86 arch:x86

    64f0779fffd3b0f196ba51a0caed0fd3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwMusic.exe
    .exe windows:5 windows x86 arch:x86

    5041c4f03a6d8be44512bdb1874c95e1


    Code Sign

    Headers

    Imports

    Sections

  • bin/KwMusicCore.dll
    .dll windows:5 windows x86 arch:x86

    69007de6b0e2b0e1e657c7a0879d1202


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwPlayerConf.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • instpage.gif
    .gif