Behavioral task
behavioral1
Sample
JaffaCakes118_c0a7f081466cd289106c3cd359140236786c42ad3ea16fbbdb13eb4c096dbf9b.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
JaffaCakes118_c0a7f081466cd289106c3cd359140236786c42ad3ea16fbbdb13eb4c096dbf9b.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_c0a7f081466cd289106c3cd359140236786c42ad3ea16fbbdb13eb4c096dbf9b
-
Size
7.6MB
-
MD5
52ca42db9a07a1fbe3309c027c6da611
-
SHA1
6b880ce76f6087a2ebd29f3e528e86b5d1eb861b
-
SHA256
c0a7f081466cd289106c3cd359140236786c42ad3ea16fbbdb13eb4c096dbf9b
-
SHA512
ebf60774f96aee3706f554f61b872ebc8ef38a5d2c86e3b7b7984edcc4035979f816baf4f8135feeee2e56a5957c624c5a3545bd5a1a7eaeea5f158de374468e
-
SSDEEP
98304:AHk0x/uSCKXiv1JKTgzN/ESwNp6ADE8z9XU64frvRVZsSIC7w:F0ITui3KTgh8SW6kXxIpTIz
Malware Config
Extracted
raccoon
b66a2753e1b1
Signatures
-
Raccoon family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_c0a7f081466cd289106c3cd359140236786c42ad3ea16fbbdb13eb4c096dbf9b
Files
-
JaffaCakes118_c0a7f081466cd289106c3cd359140236786c42ad3ea16fbbdb13eb4c096dbf9b.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 2.7MB - Virtual size: 7.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE