Behavioral task
behavioral1
Sample
JaffaCakes118_1960225fb8df654716609d3f7f6737984a81706a41ec4de2105ed3d43255013b.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_1960225fb8df654716609d3f7f6737984a81706a41ec4de2105ed3d43255013b.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_1960225fb8df654716609d3f7f6737984a81706a41ec4de2105ed3d43255013b
-
Size
5.5MB
-
MD5
b4b10d82436b6c62ddcd53cab998115e
-
SHA1
3879f940b4256fbd66b71b6a2aff866ad26183ef
-
SHA256
1960225fb8df654716609d3f7f6737984a81706a41ec4de2105ed3d43255013b
-
SHA512
35b5314b89166e03c64b5fd173fbbed38715fca8aaa2b736394f0a3d589d7da6320e48f5ae4300afbaeab936606b610c630094a2945e910247a5b97adc669d47
-
SSDEEP
49152:h2zmk4wnuzl5ph7B0iwmMsLFTFUR7UK+sJo5BHB2u07DukzLHkJky7ke0mrFnFI3:h2zTDJRQnq
Malware Config
Extracted
raccoon
8348
Signatures
-
Raccoon family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_1960225fb8df654716609d3f7f6737984a81706a41ec4de2105ed3d43255013b
Files
-
JaffaCakes118_1960225fb8df654716609d3f7f6737984a81706a41ec4de2105ed3d43255013b.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 1.4MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.MPRESS2 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE