raccoon | 219ff32aa0675259676565b72aade621ac160b09de41b0d2a1fb3dde1a0202e3 | Triage

Sharing

General

Target

219ff32aa0675259676565b72aade621ac160b09de41b0d2a1fb3dde1a0202e3
Size

80KB
MD5

e4195da9597ef0af531d9e9238e13ec6
SHA1

7416155a8026738c18d029b57c850f9415ccb489
SHA256

219ff32aa0675259676565b72aade621ac160b09de41b0d2a1fb3dde1a0202e3
SHA512

d92c882a2b6915d886e7a51ba05c6be86ad9ddb0f45d2916330306607aa3e9932e959afd1a8dec465819d35e80ae0d05aef9cfb215fbc5ba4e6ef5bc3df45f9e
SSDEEP

768:BQ2rEHk89GAHo6PfysNTMHux9kh1soMtCEtMZL1eZeS6RfUhS:GH39U6PfyEbx9kh1Et1CqQRM

Score

10^/10

raccoon

Malware Config

Signatures

Raccoon family
raccoon

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
219ff32aa0675259676565b72aade621ac160b09de41b0d2a1fb3dde1a0202e3

Files

219ff32aa0675259676565b72aade621ac160b09de41b0d2a1fb3dde1a0202e3
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ