Behavioral task
behavioral1
Sample
JaffaCakes118_b706f07f1f0cf28a9d580293d81d4ab1470fac61374d5f9713c9f635fd3c6f4f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_b706f07f1f0cf28a9d580293d81d4ab1470fac61374d5f9713c9f635fd3c6f4f.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_b706f07f1f0cf28a9d580293d81d4ab1470fac61374d5f9713c9f635fd3c6f4f
-
Size
8.2MB
-
MD5
f8bce773cb47b50b4aa725d82152f36e
-
SHA1
ea27271c8869829bdf9c320d6f53df6f2e9a4d8a
-
SHA256
b706f07f1f0cf28a9d580293d81d4ab1470fac61374d5f9713c9f635fd3c6f4f
-
SHA512
a49a8f2d90121229cce008aac8cc331e809d6b4264f1064e795790ef3746b6fb2ba36e7f3feb6a0f2c59897f1614786a733e00546f81d74fdb6165d1fb19aec6
-
SSDEEP
98304:2PaNeE7861S85ZJB7kTVfRDis54oqvOxfgT4XtYjJaLFvzbP+0ko5:TcEF1bkD9qigT4Xtt5A
Malware Config
Signatures
-
Raccoon family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_b706f07f1f0cf28a9d580293d81d4ab1470fac61374d5f9713c9f635fd3c6f4f
Files
-
JaffaCakes118_b706f07f1f0cf28a9d580293d81d4ab1470fac61374d5f9713c9f635fd3c6f4f.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 2.7MB - Virtual size: 8.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE