raccoon | JaffaCakes118_b8d14f495f880bc49d76bfadffb76179410a35379411d4434fb9099cf5d1d94e | Triage

Sharing

General

Target

JaffaCakes118_b8d14f495f880bc49d76bfadffb76179410a35379411d4434fb9099cf5d1d94e
Size

80KB
MD5

28956d6527aaa2f98016719151b757ad
SHA1

5177df4b18c8c0bff29ebea79a7d03cb2a475ee1
SHA256

b8d14f495f880bc49d76bfadffb76179410a35379411d4434fb9099cf5d1d94e
SHA512

65d893eb2d050bf7c951b847bda872a9d59c06e7d34a45fe23d4abb5f380126afb4003bd2791421a9b06e0b1917a3b63bc99152b6f48d6e1960eab2218fda4e6
SSDEEP

1536:AKndtQGV27VKDGFy6Gu22wHYUdl3q2QR3:ACDQjYu2B4U

Score

10^/10

raccoon

Malware Config

Signatures

Raccoon family
raccoon

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_b8d14f495f880bc49d76bfadffb76179410a35379411d4434fb9099cf5d1d94e

Files

JaffaCakes118_b8d14f495f880bc49d76bfadffb76179410a35379411d4434fb9099cf5d1d94e
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ