Behavioral task
behavioral1
Sample
JaffaCakes118_eccd3d1b886a218bdb6096529d4072ffd9fa08dd0a01032569acb8c0f5f7b600.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_eccd3d1b886a218bdb6096529d4072ffd9fa08dd0a01032569acb8c0f5f7b600.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_eccd3d1b886a218bdb6096529d4072ffd9fa08dd0a01032569acb8c0f5f7b600
-
Size
7.6MB
-
MD5
b0d5ea3b72aa5cbbb229925d14d494d1
-
SHA1
41cc1733bc57ee9305d62b2776287d6eca1cfba2
-
SHA256
eccd3d1b886a218bdb6096529d4072ffd9fa08dd0a01032569acb8c0f5f7b600
-
SHA512
272bc55d9511e4a6fbb1233779a3d8a14eba2d740a089a8b5e640359f1ef1687f8709de1c1710adeed5cf28558a4e0cd9bbda9de106eeb85180dc45b89be7f94
-
SSDEEP
98304:ZHkQx/gSCKXbv5JKQgzN/ES0Np6ADE8z9XU64frvRVZsSICcw:+QWTubLKQgh8Sa6kXxIpTI8
Malware Config
Signatures
-
Raccoon family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_eccd3d1b886a218bdb6096529d4072ffd9fa08dd0a01032569acb8c0f5f7b600
Files
-
JaffaCakes118_eccd3d1b886a218bdb6096529d4072ffd9fa08dd0a01032569acb8c0f5f7b600.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 2.7MB - Virtual size: 7.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE