raccoon | JaffaCakes118_f100098bd7abd537829e368b7670491f056939bdbbd04b470ee2098577f02c72 | Triage

Sharing

General

Target

JaffaCakes118_f100098bd7abd537829e368b7670491f056939bdbbd04b470ee2098577f02c72
Size

80KB
MD5

cf0fddeb9617f000921188486c97a1f7
SHA1

1dec3da2478ded1d5804cb4bc39321c45a839307
SHA256

f100098bd7abd537829e368b7670491f056939bdbbd04b470ee2098577f02c72
SHA512

7f1b9f15f81a6d2799d9fbf5633046266df440cffb2f92368eab8b5d30b4e4f16ac284d201af7dc926d4904af9b21ac6cbecac2ee25f0f3cebdf1b4dc936bfb3
SSDEEP

768:R4VYL65IcTlqH3GfSybRKPodIZ5tCY9Bt6ExI/Z1R9ZeS6RPUhS:22LuJAZybI3Z5lBtBujQR8

Score

10^/10

raccoon

Malware Config

Signatures

Raccoon family
raccoon

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_f100098bd7abd537829e368b7670491f056939bdbbd04b470ee2098577f02c72

Files

JaffaCakes118_f100098bd7abd537829e368b7670491f056939bdbbd04b470ee2098577f02c72
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 45KB - Virtual size: 32.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 32.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 32.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 32.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 32.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ