raccoon | JaffaCakes118_3b80944dc7005d9c55fba7e72fd5407e30800551a504c05e9e8cef1e6928837d | Triage

Sharing

General

Target

JaffaCakes118_3b80944dc7005d9c55fba7e72fd5407e30800551a504c05e9e8cef1e6928837d
Size

39.5MB
MD5

09abe557891e77a49724f055102bef9e
SHA1

3cc17edaeb218557ca8a18b9d1e28339b4495129
SHA256

3b80944dc7005d9c55fba7e72fd5407e30800551a504c05e9e8cef1e6928837d
SHA512

63198551583e39cc252d077afc544651f950e7b1859dca787e6cf06d23e4f58575c87edbd5781337810bb856a77e02be4f12e612be0f91644b17c9339ef65466
SSDEEP

3072:v1EMGexnGxY18A55lLUX+JDyKo2u/Rpeo24z7h4GEH3h5iMUi2:v1nV1rLUOJDyb5Z3h0h0R

Score

10^/10

raccoon

Malware Config

Signatures

Raccoon family
raccoon

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_3b80944dc7005d9c55fba7e72fd5407e30800551a504c05e9e8cef1e6928837d

Files

JaffaCakes118_3b80944dc7005d9c55fba7e72fd5407e30800551a504c05e9e8cef1e6928837d
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ