Static task
static1
Behavioral task
behavioral1
Sample
MP3SortV2.chm
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
MP3SortV2.chm
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
MP3SortV2.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
MP3SortV2.exe
Resource
win10v2004-20240709-en
General
-
Target
5e774f4c340848949494186709d59e83_JaffaCakes118
-
Size
698KB
-
MD5
5e774f4c340848949494186709d59e83
-
SHA1
f0b620162dfaedafe39a2e8944cc6e2542ca59fa
-
SHA256
dba0963a4a8d1da286de28e529005c6952c6ad9ad7a45a990cc11683cd19e7e5
-
SHA512
33b6b6e1adbf8de8d9247717cdf2772da058d1c559519b3369d3e3482c2bf906d6ec940f4040d171e253d792c871cc94c48acb26834608247c5ce78d83be11a8
-
SSDEEP
12288:kbtFykfVK+1o4cQu7DpdjVMyenDthTxLPKH0s7IKmCIsNq+0GTS171:kJfdK+15fu3ThMNnxh92UssK4+PS11
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/MP3SortV2.exe
Files
-
5e774f4c340848949494186709d59e83_JaffaCakes118.rar
-
MP3SortV2.chm.chm
-
MP3SortV2.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
nsp0 Size: 442B - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 453KB - Virtual size: 462KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
下载说明.htm.html .js polyglot