General
-
Target
0c722728ca1a996bbb83455332fa27018158cef21ad35dc057191a0353960256
-
Size
55KB
-
MD5
d28ba705f24c9e51564c46aefab26754
-
SHA1
0c6bb0d8f2611775b495a019c63f95b1377f2054
-
SHA256
0c722728ca1a996bbb83455332fa27018158cef21ad35dc057191a0353960256
-
SHA512
441ea8ded89e2bc7630134e9da3a5cd25835133f2c869ff7f6540041225cf3486e380bc2e001a2359adcca0723fb8b80b349ff4b905dbb686c354783c4c68d4a
-
SSDEEP
1536:qzwshK8pUMGxo0xwwW9VemFMGfpbbVDiANyCa:wwshK8yMexbW9vJVDiANs
Malware Config
Extracted
raccoon
3ed895c4ff5dc5ec85caa2a9d1bed0f2
http://51.195.166.184/
Signatures
-
Raccoon family
Files
-
0c722728ca1a996bbb83455332fa27018158cef21ad35dc057191a0353960256.exe windows x86
4ec5227a81c3e90d891321c143c67557
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpynA
GetUserDefaultLCID
GetSystemInfo
LocalFree
FreeLibrary
GetProcAddress
LoadLibraryW
advapi32
GetUserNameW
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ