Behavioral task
behavioral1
Sample
185cc1ef0775c8cd0f921baba32c700d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
185cc1ef0775c8cd0f921baba32c700d.exe
Resource
win10v2004-20220812-en
General
-
Target
185cc1ef0775c8cd0f921baba32c700d.bin
-
Size
12.8MB
-
MD5
185cc1ef0775c8cd0f921baba32c700d
-
SHA1
b4f78c54b11e84692a45b018d4a5c9363e4273e4
-
SHA256
fe1959cd68b9edf51c8b3dedae77ac1feef856a63d0cd85f3c53ea288bca21d3
-
SHA512
9a538a9b15be584bc4d3bdccb6057ba3fd0259d42e3d52d88fc35a437ea06032ef64fc431fd95aac98970ef2ab563d417398990af0dbd25431fce0707c7f0e18
-
SSDEEP
196608:53ZtzRFKOfZzzHNxYmz200p/oC1/fBX/NmU6rCHFQvirA6g8nS:53ZjZDY2200Zo6fF/R6cjrA6g
Malware Config
Extracted
raccoon
b66a2753e1b1
Signatures
-
Raccoon family
Files
-
185cc1ef0775c8cd0f921baba32c700d.bin.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 6.0MB - Virtual size: 12.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE