Behavioral task
behavioral1
Sample
JaffaCakes118_b44b4cfa95914c09dda663aa1fd3c0d956f96609fef9f4d9d7bfdc881954b550.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_b44b4cfa95914c09dda663aa1fd3c0d956f96609fef9f4d9d7bfdc881954b550.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_b44b4cfa95914c09dda663aa1fd3c0d956f96609fef9f4d9d7bfdc881954b550
-
Size
11.9MB
-
MD5
71ad72b6a7a540382602822b66f71fb0
-
SHA1
f80b58ee3c2977c6c20891723f1a88cb4469416e
-
SHA256
b44b4cfa95914c09dda663aa1fd3c0d956f96609fef9f4d9d7bfdc881954b550
-
SHA512
db16f456fd4af446f2bf62ae6d0870650ec9399a765e1c8101124d7cd0bde78f17a3188db2ab15023fa040560beba698cd9995c9f75ec15cd6a0afed1c4775f7
-
SSDEEP
196608:TSDLADmh22zxR7GgAOpfobMOCNiCoaWPcAhkCNW9D7B+pkh6ik/TyD8q7Xz:T+UmE2zxJF+hZmCkJ1p6/TW8sz
Malware Config
Signatures
-
Raccoon family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_b44b4cfa95914c09dda663aa1fd3c0d956f96609fef9f4d9d7bfdc881954b550
Files
-
JaffaCakes118_b44b4cfa95914c09dda663aa1fd3c0d956f96609fef9f4d9d7bfdc881954b550.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
%),.:;?] Size: - Virtual size: 580KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
%),.:;?] Size: - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.EXE Size: - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.EXE Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.EXE Size: 7.0MB - Virtual size: 7.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 399KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ