SecuriteInfo[.]com[.]TrojanSpy_Raccoon_July_28[.]27902[.]14750

General

Target
SecuriteInfo.com.TrojanSpy_Raccoon_July_28.27902.14750
Size 309KB
Sample220528-w92pgahbcj
SHA256 9c4ee62193ea9de95f79d441bb533280104d3beb73b5e2109dafab2ee667f735
MD5 49115e540a2e35344de380deb058ce31
SHA1 24bf3a67a8ba3e4a836f1cfcf3c27eaefe41ba09
SHA512 5a88d28ea71ad8d2a0f9545ab452577b0cda53abd96314384d997ae3edd3768a40549fd2b87a72f237fc44704e32b12afac08a28b6f61cd78e40f41a23b332ed
SSDEEP 6144:+KMgAlQAnNQdd0xrLKRxucNpYaKqYodHYFkVPuQC0ivl1fW2:zMg0NMd0xvKR3YUTmGVPuQpj2
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

SecuriteInfo.com.TrojanSpy_Raccoon_July_28.27902.14750

.exe 309KB

SecuriteInfo.com.TrojanSpy_Raccoon_July_28.27902.14750

IMPHASH 084c80339173d4d04ca1ca68fda1b9ec
SHA256 9c4ee62193ea9de95f79d441bb533280104d3beb73b5e2109dafab2ee667f735
MD5 49115e540a2e35344de380deb058ce31
SHA1 24bf3a67a8ba3e4a836f1cfcf3c27eaefe41ba09
SHA512 5a88d28ea71ad8d2a0f9545ab452577b0cda53abd96314384d997ae3edd3768a40549fd2b87a72f237fc44704e32b12afac08a28b6f61cd78e40f41a23b332ed
SSDEEP 6144:+KMgAlQAnNQdd0xrLKRxucNpYaKqYodHYFkVPuQC0ivl1fW2:zMg0NMd0xvKR3YUTmGVPuQpj2
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

54288

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA FindResourceA lstrcmpA WriteConsoleInputW TryEnterCriticalSection WriteConsoleOutputCharacterW WritePrivateProfileStructA GetConsoleAliasesLengthW GetModuleHandleExA SetComputerNameExA MoveFileExA lstrcpynA GetConsoleAliasExesLengthA BuildCommDCBAndTimeoutsA LoadResource UpdateResourceA _lwrite GetQueuedCompletionStatus VerSetConditionMask ReadConsoleA InterlockedDecrement ZombifyActCtx WritePrivateProfileSectionA GetNamedPipeHandleStateA GetProfileSectionA InterlockedCompareExchange WriteConsoleInputA GetComputerNameW FlushConsoleInputBuffer ConnectNamedPipe GetModuleHandleW GetTickCount VirtualFree GetConsoleAliasesLengthA GetDllDirectoryW GetPrivateProfileStringW GetConsoleTitleA GetConsoleAliasExesW GetDateFormatA FindActCtxSectionStringA GetCommandLineA CreateActCtxW EnumResourceTypesA SetProcessPriorityBoost GetDriveTypeA GetPriorityClass GetVolumePathNameW GlobalAlloc GetPrivateProfileIntA GetSystemDirectoryW SetFileShortNameW LoadLibraryW IsProcessInJob CopyFileW AssignProcessToJobObject GetCalendarInfoW ReadProcessMemory GetSystemWow64DirectoryW GetSystemWindowsDirectoryA ReadConsoleOutputW FormatMessageW GetSystemTimeAdjustment GetVersionExW GetFileAttributesA SetConsoleMode GetConsoleAliasW GetWriteWatch SetConsoleCursorPosition VerifyVersionInfoA WriteConsoleW GetBinaryTypeA TerminateProcess GetAtomNameW GetMailslotInfo GetCompressedFileSizeA GetTimeZoneInformation CreateFileW lstrcatA GetOverlappedResult GetACP lstrlenW FindNextVolumeMountPointW RaiseException GetStringTypeExA DeactivateActCtx GetNamedPipeHandleStateW GetConsoleAliasesW ReleaseActCtx GetStartupInfoA FillConsoleOutputCharacterW GetHandleInformation GetLastError ChangeTimerQueueTimer GetLongPathNameW ReadConsoleOutputCharacterA VerLanguageNameA DefineDosDeviceW CreateNamedPipeA EnumDateFormatsExA SetComputerNameA GlobalGetAtomNameA BuildCommDCBW ResetEvent OpenWaitableTimerA GetLocalTime LoadLibraryA InterlockedExchangeAdd SetCalendarInfoW GetFileType WritePrivateProfileStringA MoveFileA SetConsoleOutputCP GetExitCodeThread AddAtomW SetCurrentDirectoryW GetProfileStringA WriteProfileSectionW VirtualLock HeapLock GetCommMask HeapWalk GetTapeParameters FoldStringW SetSystemTime GlobalWire GetModuleFileNameA GetPrivateProfileSectionNamesA FindNextFileA EnumDateFormatsA FindFirstChangeNotificationA lstrcatW FreeEnvironmentStringsW EnumResourceNamesA FindNextFileW CreateMailslotA GetStringTypeW WriteProfileStringW VirtualProtect OutputDebugStringA GetCPInfoExA SetThreadAffinityMask OpenSemaphoreW EndUpdateResourceA GetVersionExA GetVersion DeleteFileW GetCurrentProcessId MoveFileWithProgressW GetFileInformationByHandle DebugBreak FindActCtxSectionStringW OpenFileMappingA SuspendThread CopyFileExA lstrcpyA InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection WideCharToMultiByte GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteFileA GetModuleFileNameW HeapValidate IsBadReadPtr RtlUnwind GetOEMCP GetCPInfo IsValidCodePage GetProcAddress TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError SetHandleCount GetStdHandle WriteFile OutputDebugStringW ExitProcess QueryPerformanceCounter GetSystemTimeAsFileTime FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree FlushFileBuffers GetConsoleCP GetConsoleMode HeapAlloc HeapSize HeapReAlloc VirtualAlloc MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetLocaleInfoA SetFilePointer InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP ReadFile CloseHandle CreateFileA

Name

.text

Size

190KB

Virtual Size

190KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

67KB

Virtual Size

322KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fiz

Size

512B

Virtual Size

5B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.mivemam

Size

512B

Virtual Size

75B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.wiji

Size

512B

Virtual Size

34B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

48KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

SecuriteInfo.com.TrojanSpy_Raccoon_July_28.27902.14750

kernel32