RainFN[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RainFN.exe
Size

5.7MB
MD5

0e24157b13ebd2ffbe18a7228c18d0f6
SHA1

636b91135c026c86297c88809c4e9446140f87bc
SHA256

a8f1cefead8b3d593f357072339c1166b3c617ffe0add6c43eaf4a91640aeb84
SHA512

ff3900929297bc1d13ea65f29940d2a5664bb3b56a19d0ad693b74211e42008c4ceda48c0773bc0bdf01e445df94e61ac2dc1eebb2deae60c52399d70baa6f7e
SSDEEP

98304:hJF2oCHpa97o0r4L6yVzzxTAXKzFpYU+8gPVSHItx3k7i9iXXoYYZpypxdblY1G9:jCHpWohLtRzyOFmUmSUxGi9iXXHDblY1

Score

1^/10

Malware Config

Signatures

Files

RainFN.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ