General

  • Target

    d3516b42cbf8ec0e32bb8eee99c8d4ff_JaffaCakes118

  • Size

    540KB

  • MD5

    d3516b42cbf8ec0e32bb8eee99c8d4ff

  • SHA1

    225fa78451c46db2fb6ccc4e0e24d68e2cc40222

  • SHA256

    466e30f40aaf378a0f65aeef035fdd10fd87f6fc432ddbeebef94913a0580a6c

  • SHA512

    d4af508e2be35cc7f6413d5ce88470f9744beda50befe48dbd686f94e5d4eab737fe89fb4c8510239d3f147768a76105b3fe5fb71aebd0875d88fa6d35e2218b

  • SSDEEP

    12288:gPviKuS4AZjzNGmydnkdXFxpgUpITyrUXKwWsKiSwDRq1g+:gPvWSXjzNNydnktppUazsKIRq13

Malware Config

Extracted

Family

raccoon

Botnet

af579f05f628552dbe148f730b58ef566293198c

Attributes
  • url4cnc

    https://drive.google.com/uc?export=download&id=1iNEp1vSw2ffa15BmPVxfNbK3IsHEHHis

rc4.plain
rc4.plain

Signatures

  • Raccoon Stealer V1 payload 1 IoCs
  • Raccoon family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d3516b42cbf8ec0e32bb8eee99c8d4ff_JaffaCakes118
    .exe windows:6 windows x86 arch:x86

    f00d3bb621b57bde0996d769e6548b43


    Headers

    Imports

    Sections