raccoon | JaffaCakes118_1970ec7d50d4777eb5f5d8b734a21a3706123946a77df6fb53bab2e93ef0a9e2

Sharing

Copy URL Twitter E-mail

General

Target
JaffaCakes118_1970ec7d50d4777eb5f5d8b734a21a3706123946a77df6fb53bab2e93ef0a9e2
Size 9.6MB
Sample241222-da9xpazra1
SHA256 1970ec7d50d4777eb5f5d8b734a21a3706123946a77df6fb53bab2e93ef0a9e2
MD5 313fafddbb27ea1bc7cbe6a485c26083
SHA1 0f0d186bfd3ee066e7bdc309b9b286b36b78159b
SHA512 a8ee8d6a183e1fc0e3aa3643a7fe3af3971a534c4b0b36479a2e9eb41b384531e128ad9f1ce55f162eff32cddd3fd71d5f4f912d7eaf61abfab27ae2b62bbee7
SSDEEP 196608:ZZNj0u32ZS+rw6h/OgNOqmGKo893P5W/4KCciK:DNKRrw6IgNvU/5W/JCciK
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

raccoon

Malware Config

Signatures

Raccoon family
raccoon

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_1970ec7d50d4777eb5f5d8b734a21a3706123946a77df6fb53bab2e93ef0a9e2

File Explorer

JaffaCakes118_1970ec7d50d4777eb5f5d8b734a21a3706123946a77df6fb53bab2e93ef0a9e2

.exe 9.6MB

JaffaCakes118_1970ec7d50d4777eb5f5d8b734a21a3706123946a77df6fb53bab2e93ef0a9e2

SHA256 1970ec7d50d4777eb5f5d8b734a21a3706123946a77df6fb53bab2e93ef0a9e2
MD5 313fafddbb27ea1bc7cbe6a485c26083
SHA1 0f0d186bfd3ee066e7bdc309b9b286b36b78159b
SHA512 a8ee8d6a183e1fc0e3aa3643a7fe3af3971a534c4b0b36479a2e9eb41b384531e128ad9f1ce55f162eff32cddd3fd71d5f4f912d7eaf61abfab27ae2b62bbee7
SSDEEP 196608:ZZNj0u32ZS+rw6h/OgNOqmGKo893P5W/4KCciK:DNKRrw6IgNvU/5W/JCciK
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4737617

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

./"9

Size

Virtual Size

3.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.4"z

Size

1024B

Virtual Size

852B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.0>(

Size

5.9MB

Virtual Size

5.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

365KB

Virtual Size

365KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_1970ec7d50d4777eb5f5d8b734a21a3706123946a77df6fb53bab2e93ef0a9e2

generic