raccoon | JaffaCakes118_6e224c537a6dd642caa3fa82e6c61925f38f423fd5c2744dafc91696340380d4 | Triage

Sharing

General

Target

JaffaCakes118_6e224c537a6dd642caa3fa82e6c61925f38f423fd5c2744dafc91696340380d4
Size

39.5MB
MD5

33d8d994f4a10e34b32b270fa7268e24
SHA1

4ded15a10e752aae0e7b175dc9cda463188f73bb
SHA256

6e224c537a6dd642caa3fa82e6c61925f38f423fd5c2744dafc91696340380d4
SHA512

eda5eabd85ea46ffb03d29651e6ed3d735637f971dc0a31e792ba1ac611310e119db7c04104d5a24221b795af8423470520c747770f37e7bdcf7354311b50262
SSDEEP

3072:v1EMGexnGZY18M5ciCO/nYfnRGIEBqD2Ms/84rzwAgdSU8H72Pj:v1nN1weURGX+2/r

Score

10^/10

raccoon

Malware Config

Signatures

Raccoon family
raccoon

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_6e224c537a6dd642caa3fa82e6c61925f38f423fd5c2744dafc91696340380d4

Files

JaffaCakes118_6e224c537a6dd642caa3fa82e6c61925f38f423fd5c2744dafc91696340380d4
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ