General

  • Target

    57646658823c49a26a517e360746f2a7_JaffaCakes118

  • Size

    4.0MB

  • MD5

    57646658823c49a26a517e360746f2a7

  • SHA1

    9f72601fb664358bc666a2754d41d81fd362b736

  • SHA256

    74ae6f1ee17959064c9ceed0af1bbdf49d787860943967f9e936b9da2282f465

  • SHA512

    a17d83671731422523e68e68e8d19e27d89a4fdb9810cc9e55d6484d92f090187344e4dbb5a0c1a1df6fa914962159252bd6e6d65d1450f80404ed5969f442c4

  • SSDEEP

    98304:DrNGe8jAPHaYyP8IlpR5y8ORVbcZsXjsjCjaHuZW8i7:DrwjAfaTTzKbnXHri7

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 57646658823c49a26a517e360746f2a7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    237a51742fed62d237b6f1b75452402f


    Headers

    Imports

    Sections

  • $PLUGINSDIR/AnimGif.dll
    .dll windows:4 windows x86 arch:x86

    b4b71331b921e2f441a2b05306cd7dae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KuWoNsis.dll
    .dll windows:4 windows x86 arch:x86

    d44c16403468dc57c73ebca319ddbe16


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $SMSTARTUP/ֺ.exe
    .exe windows:4 windows x86 arch:x86

    6e9116e001ca2c00f3eb0d8a5dd299be


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/PluginNotifier.exe
    .exe windows:4 windows x86 arch:x86

    4036c10534cc95f45603952e069d8abe


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/config.ini
  • $WINDIR/KwYl.dat
  • Encode.exe
    .exe windows:4 windows x86 arch:x86

    ed68ecb0b59026e2523986973d66d91b


    Code Sign

    Headers

    Imports

    Sections

  • EncodeBnd.exe
    .exe windows:4 windows x86 arch:x86

    78f160eb7866ebc0f1481a827449de0a


    Code Sign

    Headers

    Imports

    Sections

  • KwFlashHolder.exe
    .exe windows:4 windows x86 arch:x86

    72314eca20b8f52ae5af44c7368c4bf3


    Code Sign

    Headers

    Imports

    Sections

  • KwInfos.exe
    .exe windows:4 windows x86 arch:x86

    b44f63da11aeb1e2eba3adef41113958


    Code Sign

    Headers

    Imports

    Sections

  • KwLogSvr.dll
    .dll windows:4 windows x86 arch:x86

    a767aaf8906ad6c1c34ef5795c257578


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • KwMV.exe
    .exe windows:4 windows x86 arch:x86

    52ad5d63fd90ec755fb0416e5f853bfc


    Code Sign

    Headers

    Imports

    Sections

  • KwMusic.exe
    .exe windows:4 windows x86 arch:x86

    f6e2e10b7e84cae3fda66c5737fc0928


    Code Sign

    Headers

    Imports

    Sections

  • KwUpdate.dll
    .dll windows:4 windows x86 arch:x86

    d7c41b0216bf2416ee4b2f5e505fd73b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Local/FirstSearchPath
  • Local/LastSearchPath
  • Local/NotSearchPath
  • LocalServer.dll
    .dll windows:4 windows x86 arch:x86

    70f69bbcc99a96ca038b6edfac1edb8e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MFC71.dll
    .dll windows:4 windows x86 arch:x86

    7397fb8b8633dd76aa9cbc7e2e0c24bd


    Code Sign

    Headers

    Imports

    Sections

  • NowPCfg.ini
  • Skin/CommonSkin/DeskLyricPng/Close.png
    .png
  • Skin/CommonSkin/DeskLyricPng/FindLyric.png
    .png
  • Skin/CommonSkin/DeskLyricPng/KaraClose.png
    .png
  • Skin/CommonSkin/DeskLyricPng/KaraOpen.png
    .png
  • Skin/CommonSkin/DeskLyricPng/Lock.png
    .png
  • Skin/CommonSkin/DeskLyricPng/Next.png
    .png
  • Skin/CommonSkin/DeskLyricPng/NowPlayingLyric.png
    .png
  • Skin/CommonSkin/DeskLyricPng/Pause.png
    .png
  • Skin/CommonSkin/DeskLyricPng/Play.png
    .png
  • Skin/CommonSkin/DeskLyricPng/Pre.png
    .png
  • Skin/CommonSkin/DeskLyricPng/Setting.png
    .png
  • Skin/CommonSkin/DeskLyricPng/Theme1.png
    .png
  • Skin/CommonSkin/DeskLyricPng/Theme2.png
    .png
  • Skin/CommonSkin/DeskLyricPng/Theme3.png
    .png
  • Skin/CommonSkin/DeskLyricPng/Theme4.png
    .png
  • Skin/CommonSkin/DeskLyricPng/Theme5.png
    .png
  • Skin/CommonSkin/DeskLyricPng/logo.png
    .png
  • Skin/CommonSkin/Login/LoginBK.bmp
  • Skin/CommonSkin/Login/LoginBanner.bmp
  • Skin/CommonSkin/Login/LoginBtnCloseDown.bmp
  • Skin/CommonSkin/Login/LoginBtnCloseNormal.bmp
  • Skin/CommonSkin/Login/LoginBtnCloseOver.bmp
  • Skin/CommonSkin/Login/LoginEditBorderGlow.bmp
  • Skin/CommonSkin/Login/LoginEditBorderGlow.png
    .png
  • Skin/CommonSkin/Login/LoginEditBorderNormal.bmp
  • Skin/CommonSkin/Login/LoginEditBorderNormal.png
    .png
  • Skin/CommonSkin/Login/LoginEditRegBorderNormal.bmp
  • Skin/CommonSkin/Login/LoginPass.bmp
  • Skin/CommonSkin/Login/_2LoginBtnAccept.bmp
  • Skin/CommonSkin/Login/_2LoginBtnAutologin.bmp
  • Skin/CommonSkin/Login/_2LoginBtnRemPassword.bmp
  • Skin/CommonSkin/Login/_3LoginBtnLogin.bmp
  • Skin/CommonSkin/SayHello/SayHelloBK.bmp
  • Skin/CommonSkin/SayHello/SayHelloCloseDown.bmp
  • Skin/CommonSkin/SayHello/SayHelloCloseNormal.bmp
  • Skin/CommonSkin/SayHello/SayHelloCloseOver.bmp
  • Skin/SuperRap/skin.ini
  • Skin/SuperRap/small.jpg
    .jpg
  • Skin/ĬƤ/LoadingGif.gif
    .gif
  • Skin/ĬƤ/PNG/DeleteDown.png
    .png
  • Skin/ĬƤ/PNG/DeleteNormal.png
    .png
  • Skin/ĬƤ/PNG/DeleteOver.png
    .png
  • Skin/ĬƤ/PNG/PhotoTipHover.png
    .png
  • Skin/ĬƤ/PNG/PhotoTipNormal.png
    .png
  • Skin/ĬƤ/PNG/PhotoTipPress.png
    .png
  • Skin/ĬƤ/PNG/SkinFrame.png
    .png
  • Skin/ĬƤ/PNG/SmallDown_mask.png
    .png
  • Skin/ĬƤ/PNG/SmallNormal_mask.png
    .png
  • Skin/ĬƤ/PNG/TopPanelBtnAppNormal-b.png
    .png
  • Skin/ĬƤ/PNG/TopPanelBtnAppNormal.png
    .png
  • Skin/ĬƤ/PNG/TopPanelBtnClose.png
    .png
  • Skin/ĬƤ/PNG/TopPanelBtnDownMask.png
    .png
  • Skin/ĬƤ/PNG/TopPanelBtnDownloadNormal-b.png
    .png
  • Skin/ĬƤ/PNG/TopPanelBtnDownloadNormal.png
    .png
  • Skin/ĬƤ/PNG/TopPanelBtnFeedback.png
    .png
  • Skin/ĬƤ/PNG/TopPanelBtnMax.png
    .png
  • Skin/ĬƤ/PNG/TopPanelBtnMin.png
    .png
  • Skin/ĬƤ/PNG/TopPanelBtnMini.png
    .png
  • Skin/ĬƤ/PNG/TopPanelBtnMusicSearchNormal-b.png
    .png
  • Skin/ĬƤ/PNG/TopPanelBtnMusicSearchNormal.png
    .png
  • Skin/ĬƤ/PNG/TopPanelBtnNowPlayNormal-b.png
    .png
  • Skin/ĬƤ/PNG/TopPanelBtnNowPlayNormal.png
    .png
  • Skin/ĬƤ/PNG/TopPanelBtnOverMask.png
    .png
  • Skin/ĬƤ/PNG/TopPanelBtnRestore.png
    .png
  • Skin/ĬƤ/PNG/TopPanelBtnSetting.png
    .png
  • Skin/ĬƤ/PNG/TopPanelBtnSkin.png
    .png
  • Skin/ĬƤ/PNG/TopPanelBtnWangWang.png
    .png
  • Skin/ĬƤ/PNG/TopPanelBtnWebCommendNormal-b.png
    .png
  • Skin/ĬƤ/PNG/TopPanelBtnWebCommendNormal.png
    .png
  • Skin/ĬƤ/PNG/TopPanelLog.png
    .png
  • Skin/ĬƤ/PNG/blank.png
    .png
  • Skin/ĬƤ/PNG/right.png
    .png
  • Skin/ĬƤ/PNG/yes.png
    .png
  • Skin/ĬƤ/SbujectSkin/1/TopPanelBKLeft.bmp
  • Skin/ĬƤ/SbujectSkin/1/TopPanelBKMid.bmp
  • Skin/ĬƤ/SbujectSkin/1/TopPanelBKRight.bmp
  • Skin/ĬƤ/SbujectSkin/1/conf.ini
  • Skin/ĬƤ/SbujectSkin/1/small.jpg
    .jpg
  • Skin/ĬƤ/SbujectSkin/2/TopPanelBKLeft.bmp
  • Skin/ĬƤ/SbujectSkin/2/TopPanelBKMid.bmp
  • Skin/ĬƤ/SbujectSkin/2/TopPanelBKRight.bmp
  • Skin/ĬƤ/SbujectSkin/2/conf.ini
  • Skin/ĬƤ/SbujectSkin/2/small.jpg
    .jpg
  • Skin/ĬƤ/SbujectSkin/3/TopPanelBKLeft.bmp
  • Skin/ĬƤ/SbujectSkin/3/TopPanelBKMid.bmp
  • Skin/ĬƤ/SbujectSkin/3/TopPanelBKRight.bmp
  • Skin/ĬƤ/SbujectSkin/3/conf.ini
  • Skin/ĬƤ/SbujectSkin/3/small.jpg
    .jpg
  • Skin/ĬƤ/SbujectSkin/33/TopPanelBKLeft.bmp
  • Skin/ĬƤ/SbujectSkin/33/TopPanelBKMid.bmp
  • Skin/ĬƤ/SbujectSkin/33/TopPanelBKRight.bmp
  • Skin/ĬƤ/SbujectSkin/33/conf.ini
  • Skin/ĬƤ/SbujectSkin/33/small.jpg
    .jpg
  • Skin/ĬƤ/SbujectSkin/33/topleft.swf
  • Skin/ĬƤ/SbujectSkin/33/topright.png
    .png
  • Skin/ĬƤ/SbujectSkin/33/topright.swf
  • Skin/ĬƤ/SbujectSkin/4/TopPanelBKLeft.bmp
  • Skin/ĬƤ/SbujectSkin/4/TopPanelBKMid.bmp
  • Skin/ĬƤ/SbujectSkin/4/TopPanelBKRight.bmp
  • Skin/ĬƤ/SbujectSkin/4/conf.ini
  • Skin/ĬƤ/SbujectSkin/4/small.jpg
    .jpg
  • Skin/ĬƤ/VoteWait.gif
    .gif
  • Skin/ĬƤ/defaultRichInfoPic.JPG
    .jpg
  • Skin/ĬƤ/down-icon.gif
    .gif
  • Skin/ĬƤ/downnotice.gif
    .gif
  • Skin/ĬƤ/localnotice.gif
    .gif
  • Skin/ĬƤ/new.png
    .png
  • Skin/ĬƤ/panel.xml
    .xml
  • Skin/ĬƤ/skin.ini
  • Skin/ĬƤ/skin.jpg
    .jpg
  • Skin/ĬƤ/skinpack.pkg
  • Skin/ĬƤ/small.jpg
    .jpg
  • Skin/ĬƤ/vis.cfg
  • Skin//skin.ini
  • Skin//small.jpg
    .jpg
  • appendDL.ini
  • config.ini
  • face/GameIcon.ico
  • face/KuwoPngSkinMaker.ico
  • face/KwDownloadLnk.ico
  • face/ac3.ico
  • face/ape.ico
  • face/back.bmp
  • face/cda.ico
  • face/cue.ico
  • face/default.jpg
    .jpg
  • face/defaultbak/bk2_r1_c1.jpg
    .jpg
  • face/defaultbak/bk4_r1_c1.jpg
    .jpg
  • face/defaultbak/bkground1.jpg
    .jpg
  • face/flac.ico
  • face/font.bmp
  • face/font.jpg
    .jpg
  • face/hand-close.cur
  • face/hand-open.cur
  • face/kwc.img
  • face/kwpcmd.img
  • face/kwplog.img
  • face/left.bmp
  • face/lrcx.ico
  • face/m4a.ico
  • face/mid.ico
  • face/mp3.ico
  • face/ogg.ico
  • face/pub.img
  • face/rigt.bmp
  • face/tta.ico
  • face/wav.ico
  • face/wma.ico
  • font-bk/defaultuserdefine.jpg
    .jpg
  • font-bk/dew.bmp
  • font-bk/flower.bmp
  • font-bk/flower2.bmp
  • font-bk/paw.bmp
  • font-bk/sand.bmp
  • font-bk/theme1.jpg
    .jpg
  • font-bk/theme2.jpg
    .jpg
  • font-bk/theme3.jpg
    .jpg
  • font-bk/theme4.jpg
    .jpg
  • font-bk/wheat.bmp
  • font-bk/.bmp
  • hanzi_pinyin.dict
  • highlight.jpg
    .jpg
  • html/404.gif
    .gif
  • html/apperr.html
    .html .js polyglot
  • html/default.gif
    .gif
  • html/loads.gif
    .gif
  • html/lstbg.gif
    .gif
  • html/nomv.htm
    .html
  • html/ref.gif
    .gif
  • html/skin404.gif
    .gif
  • html/skinerror.htm
    .html .js polyglot
  • html/weberror.htm
    .html .js polyglot
  • instpage.gif
    .gif
  • kuwo-bk/black-grey.jpg
    .jpg
  • kuwo-bk/blue-crystal.jpg
    .jpg
  • kuwo-bk/blue-red.jpg
    .jpg
  • kuwo-bk/green-crystal.jpg
    .jpg
  • kuwo-bk/green-yellow.jpg
    .jpg
  • kuwo-bk/green.jpg
    .jpg
  • kuwo-bk/orange-crystal.jpg
    .jpg
  • kuwo-bk/pink-crystal.jpg
    .jpg
  • kuwo-bk/red-yellow.jpg
    .jpg
  • kuwo-bk/red-yellow2.jpg
    .jpg
  • kwmvconf.ini
  • lidx.dll
    .dll windows:4 windows x86 arch:x86

    b40d5d10588552270a87332c4d9645a6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • loading/ad/ad.ini
  • loading/ad/default_xjytualasfd001212123441lsfaoe.gif
    .gif
  • loading/ad/default_xjytualasfd001212123441lsfaoe.htm
    .html
  • loading/ad/index0_loading.htm
    .html .js polyglot
  • loading/default/default_xjytualasfd001212123441lsfaoe.gif
    .gif
  • loading/default/default_xjytualasfd001212123441lsfaoe.htm
    .html
  • lrcCfg.ini
  • msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nomal.jpg
    .jpg
  • pet.dll
    .dll windows:4 windows x86 arch:x86

    db069c1b81749004daebc5178662c509


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • pet.exe
    .exe windows:4 windows x86 arch:x86

    0748e7a67f4eda6894e015cb7cd207ec


    Code Sign

    Headers

    Imports

    Sections

  • plugin/EQ_KWEQ.dll
    .dll windows:4 windows x86 arch:x86

    5e99ac0b5f6a9ca09cf315796f21211b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugin/in_dshow.dll
    .dll windows:4 windows x86 arch:x86

    c98b6c6cc965a92d614dc5ac1e75de3b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugin/in_mpg123.dll
    .dll windows:4 windows x86 arch:x86

    497d5e185b8a5c4c7a71b88974583455


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugin/in_wma.dll
    .dll windows:4 windows x86 arch:x86

    9525ed37dd57511798a1e1c164cb9514


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugin/out_kw_ds.dll
    .dll windows:4 windows x86 arch:x86

    2ddb1b11e32fc6046d618dfde426235a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugin/vis_classic.dll
    .dll windows:4 windows x86 arch:x86

    8c498c89f71c634f98861724759e0efe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • readme.txt
  • recoEngine.exe
    .exe windows:4 windows x86 arch:x86

    cd6dee777e3a74d660504498cb1aa380


    Code Sign

    Headers

    Imports

    Sections

  • res/PanesData.xml
    .xml
  • res/SayHello/SayHelloFrame.png
    .png
  • res/WikiEntryDefault.html
    .html
  • res/artists.xml
  • res/coverflow/001.jpg
    .jpg
  • res/coverflow/1.JPG
    .jpg
  • res/coverflow/2.JPG
    .jpg
  • res/coverflow/3.JPG
    .jpg
  • res/coverflow/4.JPG
    .jpg
  • res/coverflow/5.JPG
    .jpg
  • res/coverflow/6.JPG
    .jpg
  • res/coverflow/7.JPG
    .jpg
  • res/coverflow/8.jpg
    .jpg
  • res/hot_singer.xml
  • res/mblistcount.xml
  • res/msg/bk.gif
    .gif
  • res/msg/bt1.gif
    .gif
  • res/msg/bt2.gif
    .gif
  • res/msg/msg.htm
    .html .js polyglot
  • res/oumei_singer.xml
  • res/ranks/ȸ.xml
  • res/rihan_singer.xml
  • res/search/11.sng
  • res/search/12.sng
  • res/starmenu2.0.xml
  • run.exe
    .exe windows:4 windows x86 arch:x86

    6e9116e001ca2c00f3eb0d8a5dd299be


    Code Sign

    Headers

    Imports

    Sections

  • swf/MvComplete.swf
  • swf/MvMiniComplete.swf
  • swf/coverflow.swf
  • swf/directx.swf
  • swf/enjoy.swf
  • swf/initplay.swf
  • swf/load.swf
  • swf/mvstop.swf
  • swf/neterror.swf
  • swf/netload.swf
  • swf/no.swf
  • swf/nomv.swf
  • swf/nores.swf
  • swf/picexception.swf
  • swf/serverbusy.swf
  • swf/win7tip.swf
  • tag.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections