Behavioral task
behavioral1
Sample
a3a09e2b3b136572413f742662cd523b0d03e0a2771dbaf640a60553a1a871b1.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a3a09e2b3b136572413f742662cd523b0d03e0a2771dbaf640a60553a1a871b1.exe
Resource
win10v2004-20230220-en
General
-
Target
a3a09e2b3b136572413f742662cd523b0d03e0a2771dbaf640a60553a1a871b1
-
Size
140KB
-
MD5
ced6af73ce9def1d57222394e1164012
-
SHA1
1c99c6892c5a4abd16f8767dd2ee602d5a8ba3a6
-
SHA256
a3a09e2b3b136572413f742662cd523b0d03e0a2771dbaf640a60553a1a871b1
-
SHA512
dfcb47e6f215506ae6db8a45fc9e315fe9297d7f77a91b08404b68a77c10c8a1bb1c47dfd7bad8f7b4f0946c1a9421dc652502e293ffbcc8899bb301bc82d3d3
-
SSDEEP
3072:OjYPQRQmr8YLNL6dzjPAvZjyigSYzw2K:OKWtLN+z0jpz0w2K
Malware Config
Extracted
raccoon
031c610c987a706664d107b09fed9937
http://185.181.10.208/
Signatures
-
Raccoon family
Files
-
a3a09e2b3b136572413f742662cd523b0d03e0a2771dbaf640a60553a1a871b1.exe windows x86
97d41417e1c898a9dc85fb4d98655fda
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalSize
lstrlenA
LocalAlloc
IsBadCodePtr
GetProcAddress
LoadLibraryA
gdi32
GetDeviceCaps
ole32
CoInitialize
Sections
.text Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ