jaffacakes118_MDE_File_Sample_Update.zip
- SHA256 01f9fcf47d808c0267588190fb24741655c01f906d2e7847244f63cc3bd47f1f
Password
malware
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Update.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Update.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target jaffacakes118_MDE_File_Sample_Update.zip
- Size 127KB
- Sample260922-ngg6csvbkc
- SHA256 01f9fcf47d808c0267588190fb24741655c01f906d2e7847244f63cc3bd47f1f
- MD5 cf1cb01a315b7ca1607ef4f16dbd9bcb
- SHA1 1542c758ea4a030a600cd00f92cdc2573f10fa20
- SHA512 b454b6e41cd5ab562a0d3494d8b8a3192e3cabbe958bdec387353e25e1a74ba6ec12f2dd6c3c314b9c96c6f8c1b51e5e81acf0743988c3f50daec54fe2717924
- SSDEEP 3072:fhRHveSr1peVTRo+lZequuRJ95kc5oD9XCUGC1i4p8k7O5id4Uy3/LIwsKPpjR:frH9xpwTRo+mHuvzo5SW1i4pnCBj3/kQ
- TLSH T172D323C5FDB1D9B2E9E84A8A070ED90E0CA4825E18DFB38E532C74937C599D8157DE23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Update.exe
File Explorer
-
jaffacakes118_MDE_File_Sample_Update.zip.zip 127KB
-
Update.exe.exe 249KB
Update.exe
- IMPHASH 947f8fed071043d6aa5127cb74097a70
- SHA256 1341aa5cf652c0ed873fb42986543bfdb1ab3336a9372a79c2a73ff2257872d4
- MD5 27bb2ff03946980809bb1489977f0e37
- SHA1 62d1e4c201f093b4b26ed125f34fa8600423cb65
- SHA512 c62a31422c909c33dbfa7585ba0171b40247a91ca1e98fe0c73df8a57ea98558562836b5355204a323eefa874800e68d09d2776e6f867ac9b299d3605101a0d1
- SSDEEP 6144:9vXHgO7r4BV5vsJM0H6TW29ov4NzVvQT6eT:xHgO7r4labaQv4NzVvQ2eT
- TLSH T1A744AE56AC90C4A2DE1B4DF949FCE7B2A05E6E315F1148C6BA307D0C2571EEE0139BB6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5312
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
qt5core
_Z21qRegisterResourceDataiPKhS0_S0_
_Z23qUnregisterResourceDataiPKhS0_S0_
_ZN10QArrayData10deallocateEPS_jj
_ZN10QArrayData11shared_nullE
_ZN10QByteArray11reallocDataEj6QFlagsIN10QArrayData16AllocationOptionEE
_ZN10QByteArray6appendEPKc
_ZN10QByteArray6appendEc
_ZN11QFileDevice5closeEv
_ZN11QMetaObject10ConnectionD1Ev
_ZN11QMetaObject18connectSlotsByNameEP7QObject
_ZN11QMetaObject8activateEP7QObjectPKS_iPPv
_ZN11QTextStream8readLineEx
_ZN11QTextStreamC1ERK10QByteArray6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN11QTextStreamD1Ev
_ZN16QCoreApplication19applicationFilePathEv
_ZN16QCoreApplication4quitEv
_ZN16QCoreApplication9translateEPKcS1_S1_i
_ZN18QCryptographicHash4hashERK10QByteArrayNS_9AlgorithmE
_ZN4QDirC1ERK7QString
_ZN4QDirD1Ev
_ZN4QUrlC1ERK7QStringNS_11ParsingModeE
_ZN4QUrlC1ERKS_
_ZN4QUrlD1Ev
_ZN5QFile4openE6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN5QFileC1ERK7QString
_ZN5QFileD1Ev
_ZN6QTimer5startEi
_ZN6QTimerC1EP7QObject
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11connectImplEPKS_PPvS1_S3_PN9QtPrivate15QSlotObjectBaseEN2Qt14ConnectionTypeEPKiPK11QMetaObject
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11deleteLaterEv
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QObject11qt_metacastEPKc
_ZN7QObject13connectNotifyERK11QMetaMethod
_ZN7QObject13setObjectNameERK7QString
_ZN7QObject16disconnectNotifyERK11QMetaMethod
_ZN7QObject16staticMetaObjectE
_ZN7QObject5eventEP6QEvent
_ZN7QObject7connectEPKS_PKcS1_S3_N2Qt14ConnectionTypeE
_ZN7QObjectC2EPS_
_ZN7QObjectD2Ev
_ZN7QString14compare_helperEPK5QChariPKciN2Qt15CaseSensitivityE
_ZN7QString15fromUtf8_helperEPKci
_ZN7QString16fromAscii_helperEPKci
_ZN7QString6appendERKS_
_ZN7QString6numberEii
_ZN7QStringaSERKS_
_ZN8QProcess13startDetachedERK7QString
_ZN8QProcessC1EP7QObject
_ZN8QVariantC1Eb
_ZN8QVariantD1Ev
_ZN9QFileInfoC1ERK7QString
_ZN9QFileInfoD1Ev
_ZN9QIODevice5writeEPKcx
_ZN9QIODevice7readAllEv
_ZN9QListData11shared_nullE
_ZN9QListData7disposeEPNS_4DataE
_ZN9QMetaType22registerNormalizedTypeERK10QByteArrayPFvPvEPFS3_S3_PKvEi6QFlagsINS_8TypeFlagEEPK11QMetaObject
_ZNK10QByteArray5toHexEv
_ZNK11QMetaObject2trEPKcS1_i
_ZNK11QMetaObject9classNameEv
_ZNK11QObjectData17dynamicMetaObjectEv
_ZNK11QTextStream5atEndEv
_ZNK4QDir12absolutePathEv
_ZNK4QDir6existsEv
_ZNK4QDir6mkpathERK7QString
_ZNK7QObject10objectNameEv
_ZNK7QString5splitERKS_NS_13SplitBehaviorEN2Qt15CaseSensitivityE
_ZNK7QString8multiArgEiPPKS_
_ZNK9QFileInfo11absoluteDirEv
_ZNK9QIODevice11errorStringEv
_ZeqRK7QStringS1_
qt5gui
_ZN6QBrush8setStyleEN2Qt10BrushStyleE
_ZN6QBrushC1ERK6QColorN2Qt10BrushStyleE
_ZN6QBrushD1Ev
_ZN6QColor6setRgbEiiii
_ZN7QRegionC1ERK5QRectNS_10RegionTypeE
_ZN7QRegionD1Ev
_ZN8QPalette8setBrushENS_10ColorGroupENS_9ColorRoleERK6QBrush
_ZN8QPaletteC1Ev
_ZN8QPaletteD1Ev
qt5network
_ZN13QNetworkReply16downloadProgressExx
_ZN13QNetworkReply16staticMetaObjectE
_ZN15QNetworkRequest12setAttributeENS_9AttributeERK8QVariant
_ZN15QNetworkRequestC1ERK4QUrl
_ZN15QNetworkRequestD1Ev
_ZN21QNetworkAccessManager3getERK15QNetworkRequest
_ZN21QNetworkAccessManagerC1EP7QObject
_ZN21QNetworkAccessManagerD1Ev
qt5widgets
_ZN11QMainWindow11qt_metacallEN11QMetaObject4CallEiPPv
_ZN11QMainWindow11qt_metacastEPKc
_ZN11QMainWindow11setAnimatedEb
_ZN11QMainWindow15createPopupMenuEv
_ZN11QMainWindow16contextMenuEventEP17QContextMenuEvent
_ZN11QMainWindow16setCentralWidgetEP7QWidget
_ZN11QMainWindow16staticMetaObjectE
_ZN11QMainWindow30setUnifiedTitleAndToolBarOnMacEb
_ZN11QMainWindow5eventEP6QEvent
_ZN11QMainWindowC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN11QMainWindowD2Ev
_ZN11QMessageBox11informationEP7QWidgetRK7QStringS4_6QFlagsINS_14StandardButtonEES6_
_ZN11QMessageBox5aboutEP7QWidgetRK7QStringS4_
_ZN12QApplication4execEv
_ZN12QApplicationC1ERiPPci
_ZN12QApplicationD1Ev
_ZN12QProgressBar10setMaximumEi
_ZN12QProgressBar8setValueEi
_ZN12QProgressBarC1EP7QWidget
_ZN13QGraphicsViewC1EP7QWidget
_ZN6QFrame13setFrameShapeENS_5ShapeE
_ZN6QFrame14setFrameShadowENS_6ShadowE
_ZN6QLabel11setWordWrapEb
_ZN6QLabel13setTextFormatEN2Qt10TextFormatE
_ZN6QLabel17setScaledContentsEb
_ZN6QLabel20setOpenExternalLinksEb
_ZN6QLabel7setTextERK7QString
_ZN6QLabelC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN7QWidget10closeEventEP11QCloseEvent
_ZN7QWidget10enterEventEP6QEvent
_ZN7QWidget10leaveEventEP6QEvent
_ZN7QWidget10paintEventEP11QPaintEvent
_ZN7QWidget10setEnabledEb
_ZN7QWidget10setPaletteERK8QPalette
_ZN7QWidget10setVisibleEb
_ZN7QWidget10wheelEventEP11QWheelEvent
_ZN7QWidget11actionEventEP12QActionEvent
_ZN7QWidget11changeEventEP6QEvent
_ZN7QWidget11nativeEventERK10QByteArrayPvPl
_ZN7QWidget11resizeEventEP12QResizeEvent
_ZN7QWidget11setGeometryERK5QRect
_ZN7QWidget11tabletEventEP12QTabletEvent
_ZN7QWidget12focusInEventEP11QFocusEvent
_ZN7QWidget12setAttributeEN2Qt15WidgetAttributeEb
_ZN7QWidget13dragMoveEventEP14QDragMoveEvent
_ZN7QWidget13focusOutEventEP11QFocusEvent
_ZN7QWidget13keyPressEventEP9QKeyEvent
_ZN7QWidget13setStyleSheetERK7QString
_ZN7QWidget14dragEnterEventEP15QDragEnterEvent
_ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent
_ZN7QWidget14setAcceptDropsEb
_ZN7QWidget14setWindowFlagsE6QFlagsIN2Qt10WindowTypeEE
_ZN7QWidget14setWindowTitleERK7QString
_ZN7QWidget15keyReleaseEventEP9QKeyEvent
_ZN7QWidget16inputMethodEventEP17QInputMethodEvent
_ZN7QWidget17mouseReleaseEventEP11QMouseEvent
_ZN7QWidget18focusNextPrevChildEb
_ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent
_ZN7QWidget21setAutoFillBackgroundEb
_ZN7QWidget4hideEv
_ZN7QWidget4moveERK6QPoint
_ZN7QWidget4showEv
_ZN7QWidget6resizeERK5QSize
_ZN7QWidget7setMaskERK7QRegion
_ZN7QWidget9dropEventEP10QDropEvent
_ZN7QWidget9hideEventEP10QHideEvent
_ZN7QWidget9moveEventEP10QMoveEvent
_ZN7QWidget9showEventEP10QShowEvent
_ZN7QWidgetC1EPS_6QFlagsIN2Qt10WindowTypeEE
_ZNK7QWidget10redirectedEP6QPoint
_ZNK7QWidget11initPainterEP8QPainter
_ZNK7QWidget11paintEngineEv
_ZNK7QWidget13frameGeometryEv
_ZNK7QWidget13sharedPainterEv
_ZNK7QWidget14heightForWidthEi
_ZNK7QWidget15minimumSizeHintEv
_ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE
_ZNK7QWidget17hasHeightForWidthEv
_ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZNK7QWidget7devTypeEv
_ZNK7QWidget8sizeHintEv
_ZThn8_NK7QWidget10redirectedEP6QPoint
_ZThn8_NK7QWidget11initPainterEP8QPainter
_ZThn8_NK7QWidget11paintEngineEv
_ZThn8_NK7QWidget13sharedPainterEv
_ZThn8_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZThn8_NK7QWidget7devTypeEv
libgcc_s_dw2-1
_Unwind_Resume
__deregister_frame_info
__divdi3
__register_frame_info
kernel32
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalFree
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_initterm
_iob
_lock
_onexit
_unlock
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
signal
strcmp
strlen
strncmp
system
vfprintf
shell32
CommandLineToArgvW
libstdc++-6
_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZTVN10__cxxabiv121__vmi_class_type_infoE
_ZdaPv
_ZdlPv
_Znaj
_Znwj
__gxx_personality_v0
Name
.text
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
128B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
82KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.eh_fram
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
52B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
119KB
Virtual Size
119KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE