Overview

overview

10

Static

static

10

JaffaCakes...02.exe

windows7-x64

3

JaffaCakes...02.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_e9b403eb952af5fac5daaa17eed88305e92e6533f8ae84c98844939947672502

  • Size

    61KB

  • MD5

    3cfd05053a371357bccd0ce42f2350fd

  • SHA1

    513b8b8b015265d6a4522a6e62914d0998fbf532

  • SHA256

    e9b403eb952af5fac5daaa17eed88305e92e6533f8ae84c98844939947672502

  • SHA512

    e15af35b08f7260da3d0de3ff330aa3cb91a6dc33bd6a00fa54ef7a40685e557ae6f966929812d69d4815eaea71d24a446ae7b7438344c75fc64230e26f31222

  • SSDEEP

    768:G3hBdh98zo8hUzAMgRt5O9hDtqCD+4yNdQiEw6ZjqZeS6R6UhSC:AdMzAzjavO9uG+NNdQ4MGQRtv

Score
10/10
9b19cf60d9bdf65b8a2495aa965456c3raccoon

Malware Config

Extracted

Family

raccoon

Botnet

9b19cf60d9bdf65b8a2495aa965456c3

C2

http://5.2.70.65/

Attributes
  • user_agent

    TakeMyPainBack

xor.plain

Signatures

  • Raccoon family
    raccoon
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_e9b403eb952af5fac5daaa17eed88305e92e6533f8ae84c98844939947672502
    .exe windows:6 windows x86 arch:x86

    c5c36a515b13d54501168b24d2b48063


    Headers

    Imports

    Sections