General

  • Target

    4172638e4bdde4213717ceb57c7aacc0_JaffaCakes118

  • Size

    6.2MB

  • MD5

    4172638e4bdde4213717ceb57c7aacc0

  • SHA1

    a5268f3e633ffbf1feb79496599786c1c5aa7318

  • SHA256

    ad8f833fb43b6469826d26d1aee623951648546622b6e1ab4b3aef10eb143ef1

  • SHA512

    820f97a4789a934303575825e605e6356cd391d390053b5ab5e0ca896902692b72ae05648209380c9b9525b8a24f07b8472221c9bd9a335ad52c31209e52ff82

  • SSDEEP

    98304:5AGfVDbrb1lu7H8zFsn6AKFotJLTFEPdphC7QaMMvuiFQ5qWjDIZfK:P5OqFs6fFoF448Mmx

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 4172638e4bdde4213717ceb57c7aacc0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    d23fbd09100caad5e10f17163f511668


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/QvodInit.exe
    .exe windows:4 windows x86 arch:x86

    0b2a31acea7c8272b8d6e27bd03aa847


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/kuwo_logo.bmp
  • $PLUGINSDIR/left.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/plugs.ini
  • $PLUGINSDIR/qvod1.ini
  • $PLUGINSDIR/sobar.bmp
  • AddIn/ASBarBroker.exe
    .exe windows:4 windows x86 arch:x86

    8cb73f23fc4ffce04345bba981c347fe


    Code Sign

    Headers

    Imports

    Sections

  • AddIn/QvodAddr.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    c6079cff13dd538f8c2b93227d9d6d6c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AddIn/conf.xml
    .xml
  • Baidu-Toolbar-utf8kb_cb.exe
    .exe windows:4 windows x86 arch:x86

    73b73e00f465fa1a2a3bf6377a40219b


    Code Sign

    Headers

    Imports

    Sections

  • $PROGRAM_FILES/Baidu/Toolbar/BaiduBarX_Tmp/BaiduBarX.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    78760b90e51e152ef6c8a33a5e909edc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QvodInit.exe
    .exe windows:4 windows x86 arch:x86

    0b2a31acea7c8272b8d6e27bd03aa847


    Code Sign

    Headers

    Imports

    Sections

  • QvodPlayer.exe
    .exe windows:4 windows x86 arch:x86

    2abfce40897f3cfc19cfe1b196778076


    Code Sign

    Headers

    Imports

    Sections

  • QvodTerminal.exe
    .exe windows:4 windows x86 arch:x86

    ab3720bea80ad42dc7af1b82fad3592a


    Code Sign

    Headers

    Imports

    Sections

  • kuwo_jm42.exe
    .exe windows:4 windows x86 arch:x86

    237a51742fed62d237b6f1b75452402f


    Headers

    Imports

    Sections

  • $1
  • $APPDATA/kuwo/Conf/p2pconf/setup.xml
    .xml
  • $PLUGINSDIR/Base64.dll
    .dll windows:4 windows x86 arch:x86

    472def3d6dc5d4ffe27376a831b4d49b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KuWoNsis_new.dll
    .dll windows:4 windows x86 arch:x86

    188422af675275317874dcc96bd6779b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    5d31a4a9e83c0a8e38bab1f57d28402c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $SMSTARTUP/ֺ.exe
    .exe windows:5 windows x86 arch:x86

    e218909ab4a3f97c29a041834db29de8


    Code Sign

    Headers

    Imports

    Sections

  • EncodeBnd.exe
    .exe windows:4 windows x86 arch:x86

    78f160eb7866ebc0f1481a827449de0a


    Code Sign

    Headers

    Imports

    Sections

  • KwMusic.exe
    .exe windows:5 windows x86 arch:x86

    d37436deaf839aaae619193b8b8393aa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.VC90.CRT.manifest
  • Microsoft.VC90.MFC.manifest
  • bin/CKuwoPlayer.dll
    .dll windows:5 windows x86 arch:x86

    cc3290c3217d058fcd1a545829056489


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/CWmpPlayer.dll
    .dll windows:5 windows x86 arch:x86

    ffa030b08ed1f9b091f130d76d941a26


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/CoreAVC0.ax
    .dll regsvr32 windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • bin/DshowPlayer.dll
    .dll windows:5 windows x86 arch:x86

    51011157c8eff9ae62263977212e0b44


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/Encode.exe
    .exe windows:5 windows x86 arch:x86

    da51d131c2d14a263ced57385b829735


    Code Sign

    Headers

    Imports

    Sections

  • bin/KwAni.dll
    .dll windows:5 windows x86 arch:x86

    42f0a66ccc29a28cd542a63f4ad4eb08


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwCommonUI.dll
    .dll windows:5 windows x86 arch:x86

    1c275135fb6b3bebe8b59802530851a4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwDataDef.dll
    .dll windows:5 windows x86 arch:x86

    aa702046c72aed9d51fc3fc4e8dee619


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwHttpRequestMgr.dll
    .dll windows:5 windows x86 arch:x86

    d85133437b5c5224b68c0cd4135d6e0f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwInfos.exe
    .exe windows:5 windows x86 arch:x86

    b19d01a4507760d99b71d57202310dd9


    Code Sign

    Headers

    Imports

    Sections

  • bin/KwLayoutMgr.dll
    .dll windows:5 windows x86 arch:x86

    6f66f61d5fb66b4d510596bf0fb71492


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwLib.dll
    .dll windows:5 windows x86 arch:x86

    670f944c48ca4cd34f52461a67ba3bad


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwLog.dll
    .dll windows:5 windows x86 arch:x86

    ceb217a344dff32a23c9c5f880b547e8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwMV.exe
    .exe windows:5 windows x86 arch:x86

    f23dc9a03f56db1320fc38a78bda3a47


    Code Sign

    Headers

    Imports

    Sections

  • bin/KwModAppStore.dll
    .dll windows:5 windows x86 arch:x86

    1e6eba50802006eea8456cc8eefba99e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModConfig.dll
    .dll windows:5 windows x86 arch:x86

    98b0c46198507b102b17de196fa9ab59


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModDownload.dll
    .dll windows:5 windows x86 arch:x86

    ee7571af19a633d882029ee1667ccf34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModGameEntry.dll
    .dll windows:5 windows x86 arch:x86

    32283bc8666cab4e131581b325d79603


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModHotKey.dll
    .dll windows:5 windows x86 arch:x86

    e4a7d279b921e2ccc73c424f05c23435


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModLocalMusic.dll
    .dll windows:5 windows x86 arch:x86

    7de1e284693f8f4e06b37536be09e82b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModLyric.dll
    .dll windows:5 windows x86 arch:x86

    a00aea2e78794fc0b5229a72c521016c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModLyricShow.dll
    .dll windows:5 windows x86 arch:x86

    1fc4165add3710dd36a4bf30e4c705f1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModNetSong.dll
    .dll windows:5 windows x86 arch:x86

    3ca2fea82186022703e00e7f9f8c4aba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModPicShow.dll
    .dll windows:5 windows x86 arch:x86

    941ec3918ac11b662aa2ac409f01e1e4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModPlaylist.dll
    .dll windows:5 windows x86 arch:x86

    41249c81fc3b1bedfc8681c70c584d76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModSayHello.dll
    .dll windows:5 windows x86 arch:x86

    1c64e5207219932bc4fbe24746fa4175


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModSkinManager.dll
    .dll windows:5 windows x86 arch:x86

    48b1b09fd2c980a835e81d39fda4bc35


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModSynList.dll
    .dll windows:5 windows x86 arch:x86

    4865a105334bd4f791a160ce1905bbd9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModUpdateWeb.dll
    .dll windows:5 windows x86 arch:x86

    ed79d0909c59b5b43567d57285072040


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModWebRecommend.dll
    .dll windows:5 windows x86 arch:x86

    ee7d8c52628b1a5d4f42d22908a072a8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwMusic.exe
    .exe windows:5 windows x86 arch:x86

    e9b210b2d662575461f01fdd3ca73a93


    Code Sign

    Headers

    Imports

    Sections

  • bin/KwMusicCore.dll
    .dll windows:5 windows x86 arch:x86

    69007de6b0e2b0e1e657c7a0879d1202


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwPlayerConf.dll
    .dll windows:5 windows x86 arch:x86

    6b643a3d2a38a4405dfb865ce7183191


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwRecoSong.dll
    .dll windows:5 windows x86 arch:x86

    9e4681316308b44da7e078165842bc74


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwTagLib.dll
    .dll windows:5 windows x86 arch:x86

    7415c99ece6ff715821d8e5ab4486bd5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwUpdate.dll
    .dll windows:5 windows x86 arch:x86

    08d0897518193306b481d8cff91e23d7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/MatroskaSplitter.ax
    .dll regsvr32 windows:5 windows x86 arch:x86

    201800fb7a5c798ffd72fee7d23cc650


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/MediaInfo.dll
    .dll windows:5 windows x86 arch:x86

    f94b2501cb412c90755b7f0be1dedd32


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/Microsoft.VC90.CRT.manifest
  • bin/Microsoft.VC90.MFC.manifest
  • bin/Module.xml
  • bin/MpaDecFilter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    49fe25334afea175223d3ae146a8e0b9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/Pet.exe
    .exe windows:5 windows x86 arch:x86

    23a76947ec632acb9fe8805703b5491c


    Code Sign

    Headers

    Imports

    Sections

  • bin/PetD.dll
    .dll windows:5 windows x86 arch:x86

    a063581d4c724f9f78229e856ac14cc1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/PetU.dll
    .dll windows:5 windows x86 arch:x86

    03ad75b9f5a4f3e6a378d27c591434d7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/PlayerCore.dll
    .dll windows:5 windows x86 arch:x86

    11a52137370e8f584f49f9bac688b58e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UIAvMgr.dll
    .dll windows:5 windows x86 arch:x86

    c28d4e90c4940d0c7b2a4858df2a87d2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UICPTool.dll
    .dll windows:5 windows x86 arch:x86

    1215a0b91cd90056a05e86097284b00f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UIConfig.dll
    .dll windows:5 windows x86 arch:x86

    06df8fb4d0847b2b5d921ee157d0ccb7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UIDownload.dll
    .dll windows:5 windows x86 arch:x86

    6f79cf5b3da98f1aac51ec2626ea4fd7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UIDrawLyricMgr.dll
    .dll windows:5 windows x86 arch:x86

    70e0ef9ff8100f30f7e340e63fb67917


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UIEqualizer.dll
    .dll windows:5 windows x86 arch:x86

    8a5c9f1f7f628ac50a47f06a20cbd3fc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UILocalMusic.dll
    .dll windows:5 windows x86 arch:x86

    dc7ec24cf81eb53b6917cd2698b0bd89


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UILyricDesk.dll
    .dll windows:5 windows x86 arch:x86

    eabde7ce36ef0b7ccbe720823a941bbc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UILyricNowPlay.dll
    .dll windows:5 windows x86 arch:x86

    f3e1e72dda9fbf0c8625f55e0dc43e98


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UIMVWnd.dll
    .dll windows:5 windows x86 arch:x86

    d0b3c0756a1f0aa0471efda37be70934


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UIMiniPanel.dll
    .dll windows:5 windows x86 arch:x86

    38cec1685590595eb6e8e19ecc0d8335


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UINetSongLib.dll
    .dll windows:5 windows x86 arch:x86

    ebdad43901931454faaccb3ed30b191c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UINowPlayCommonCtrl.dll
    .dll windows:5 windows x86 arch:x86

    418315e2a157e3fd037f0e2647c23562


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UINowPlayFloatingLayer.dll
    .dll windows:5 windows x86 arch:x86

    96c1b10f518281dfd3c5504d570d63a9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UIPic.dll
    .dll windows:5 windows x86 arch:x86

    e98fa06f65983af5a4bad0b4434dd719


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UIPlayerControl.dll
    .dll windows:5 windows x86 arch:x86

    41d4e247ddac5676fad092aa9d1db65e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UIPlaylist.dll
    .dll windows:5 windows x86 arch:x86

    c8d24d22a2c656172afbe52e2d48cb41


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UIPopupWnd.dll
    .dll windows:5 windows x86 arch:x86

    519262ca2f6427d6414f574929d12393


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UITopPanel.dll
    .dll windows:5 windows x86 arch:x86

    3d0599ca4a5a13d4358d53a8c700b59a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UIUserMan.dll
    .dll windows:5 windows x86 arch:x86

    da7f826b1099a4fcb5548be9ab53dc20


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UIWebRecommend.dll
    .dll windows:5 windows x86 arch:x86

    21ef9bf2d07890c25e24c6e1907b1f3e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/Win7Trait.dll
    .dll windows:5 windows x86 arch:x86

    55f43f021a055aa3a9a85c2c04d46bd3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/WriteMbox.exe
    .exe windows:4 windows x86 arch:x86

    42134c4fb1b2d3cf6b447e018a5de700


    Code Sign

    Headers

    Imports

    Sections

  • bin/Zlib.dll
    .dll windows:5 windows x86 arch:x86

    b961c4dc5c6274964fb2995c8ec3244e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/auto.exe
    .exe windows:5 windows x86 arch:x86

    e218909ab4a3f97c29a041834db29de8


    Code Sign

    Headers

    Imports

    Sections

  • bin/plugin/Microsoft.VC90.CRT.manifest
  • bin/plugin/Microsoft.VC90.MFC.manifest
  • readme.txt