Behavioral task
behavioral1
Sample
JaffaCakes118_0a73673c89738a2f044a7bdb38af7d46b0e8e0762228788859c81e420547954e.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_0a73673c89738a2f044a7bdb38af7d46b0e8e0762228788859c81e420547954e.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_0a73673c89738a2f044a7bdb38af7d46b0e8e0762228788859c81e420547954e
-
Size
288KB
-
MD5
9b9eb93862db60c3c186f99b50b9433c
-
SHA1
1f5f3fce2e4671ef9448acdb7d9fece565c296a5
-
SHA256
0a73673c89738a2f044a7bdb38af7d46b0e8e0762228788859c81e420547954e
-
SHA512
3893e10acf13963422eca658daed735acd9556f67c9385c624dbf7d97758c3d40a4cfa6e9a28dd90c50b94c55b0295f43f940bb42a202dbdeab4d70b0fb3dec0
-
SSDEEP
3072:AazAzjaFG+NNyh07Fa54p6kFkd9Sui4GtywgZQuGM/h3qpZa9uD6VdyhkekwO:AazwV09p6kkiFSGrwVfeXO
Malware Config
Signatures
-
Raccoon family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_0a73673c89738a2f044a7bdb38af7d46b0e8e0762228788859c81e420547954e
Files
-
JaffaCakes118_0a73673c89738a2f044a7bdb38af7d46b0e8e0762228788859c81e420547954e.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ