Behavioral task
behavioral1
Sample
JaffaCakes118_d5574375eed106974425eaa24884b582bc2c7f20611fe344e493786d0c066eb2.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_d5574375eed106974425eaa24884b582bc2c7f20611fe344e493786d0c066eb2.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_d5574375eed106974425eaa24884b582bc2c7f20611fe344e493786d0c066eb2
-
Size
7.6MB
-
MD5
a4b83b877437a054f759549ac875460f
-
SHA1
ec1ba89496820726d29b5b64e5b5039e10a825bf
-
SHA256
d5574375eed106974425eaa24884b582bc2c7f20611fe344e493786d0c066eb2
-
SHA512
33ff6e7f683059dc68414d5a5f033311a5950ec5baeb63353e15b8d51586bdd8c04e02b292cf07e7e1e15efbcb71875fe9ba90d3aa9e80681e402dc5a0e986c6
-
SSDEEP
98304:8Hk0x/uSCKXIv1JKIgzN/ES8Np6ADE8z9XU64frvRVZsSIC7w:R0ITuI3KIgh8SS6kXxIpTIz
Malware Config
Signatures
-
Raccoon family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_d5574375eed106974425eaa24884b582bc2c7f20611fe344e493786d0c066eb2
Files
-
JaffaCakes118_d5574375eed106974425eaa24884b582bc2c7f20611fe344e493786d0c066eb2.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 2.7MB - Virtual size: 7.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE