raccoon | JaffaCakes118_42cb1385d8b0dcd20324fb7bff1591c6dfc38ef4c197b1e00a145de0cdf49541 | Triage

Sharing

General

Target

JaffaCakes118_42cb1385d8b0dcd20324fb7bff1591c6dfc38ef4c197b1e00a145de0cdf49541
Size

12.0MB
MD5

08084407ae0d54a4a5300709eb1be28d
SHA1

63f2992c93b37ec24c0095b7a8570ce4e2cb45a4
SHA256

42cb1385d8b0dcd20324fb7bff1591c6dfc38ef4c197b1e00a145de0cdf49541
SHA512

0726a7309c70890f87d5a644075c1eb0ad2f502fb26e7dc922d5c94dec63bcfc640accf71b8ccac0a992cb8ca8f99e76761d2c2353d6254d338e645d0f61195f
SSDEEP

196608:iWQHoXZ/dl+Eidfjh3cZAIQKLUHQJ/yrfHjlFzBpO5hq16oyRqt0:inGl+ldfjh3cOS/yrfHjvBpnU

Score

10^/10

raccoon

Malware Config

Signatures

Raccoon family
raccoon

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_42cb1385d8b0dcd20324fb7bff1591c6dfc38ef4c197b1e00a145de0cdf49541

Files

JaffaCakes118_42cb1385d8b0dcd20324fb7bff1591c6dfc38ef4c197b1e00a145de0cdf49541
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Nkn
Size: - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.[4Z
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.3IK
Size: 6.9MB - Virtual size: 6.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 467KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ