raccoon | 3777da79128d1ca7987b7d3bca5f20c7[.]bin | Triage

Sharing

General

Target

3777da79128d1ca7987b7d3bca5f20c7.bin
Size

31.2MB
MD5

3777da79128d1ca7987b7d3bca5f20c7
SHA1

4048f8557d2b1103ed13bf879a723b90046950e7
SHA256

7befef2a1ac671a324c8abf56b484d2967227b538cacb7035e8449e2ed508a58
SHA512

09471b00316b1432742ddd1fbda8fb6a0f9fceddf8f2f2497bf4ca2411eb79ebf8a08a166e5536bb352ff49e83c1edc6f22b06091eea4fa233fc768f457584e6
SSDEEP

786432:166IWrAAEJxK9AyjJjG7zOPuCaTuUQOw+3vW:166IWA36JG7zO2CWpz

Score

10^/10

raccoon

Malware Config

Signatures

Raccoon Stealer V2 payload 1 IoCs

resource	yara_rule
sample	family_raccoon_v2

Raccoon family
raccoon

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3777da79128d1ca7987b7d3bca5f20c7.bin

Files

3777da79128d1ca7987b7d3bca5f20c7.bin
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data0
Size: - Virtual size: 11.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data1
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 19.8MB - Virtual size: 19.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ