Behavioral task
behavioral1
Sample
2008-54-0x0000000000400000-0x000000000091F000-memory.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2008-54-0x0000000000400000-0x000000000091F000-memory.exe
Resource
win10v2004-20230220-en
General
-
Target
2008-54-0x0000000000400000-0x000000000091F000-memory.dmp
-
Size
5.1MB
-
MD5
3b681ffe28200b9035a6444022538751
-
SHA1
88173edf10e5cbb5e0c0bee9e73e855a4b188f11
-
SHA256
39816f3011f853b3e9dffdeeeca56a905b7e421d7a73604fba5489bd9f914e30
-
SHA512
bc826af88e9671ab4a298879cced4f0b91629ed6298ea4fced045c0dc4b0e53d24eaaed48c3d9b9ecddfaf671fcf951984f9142fa24eaec3463d537dbde1aed6
-
SSDEEP
98304:Fi9lLmpFq1aQvVde8FivCeGDRsiScOXBgZrzyWGgRSL6O2jSk6adBNWuz+VRD0Mc:I2wUYZFwAurLXBazEgRSSjS5aT1z+/DS
Malware Config
Extracted
raccoon
540b1db0b12b23e63e6942952aa03e47
http://45.9.74.36/
http://45.9.74.34/
Signatures
Files
-
2008-54-0x0000000000400000-0x000000000091F000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 184KB - Virtual size: 339KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ