RonaWind[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

RonaWind.exe
Size

141.0MB
MD5

be3f0704961b94d518e072b30c24057c
SHA1

4f1f3f6a0487619e853561633d8231b04eb1698e
SHA256

7f7d64db9e7526f8db3933151d90b98d2c0f4e41855ec4fa8b6fb8853a42e73c
SHA512

954879e6a5421ac32954bd5862a2f03421779440c4e03a7b6ad58c11499dfc36eb9286153f41b58a9c09d935d8d8947fd1bcb9439d2d18c1d4cfca21445027d0
SSDEEP

1572864:QaXCekn26B3DKCmN4Z10BtU3vJ6h5g8zbFKNKEt4h3gIwI7OfeeKA5jI0ax2x3hL:rnQR6D4QNGVP

Score

1^/10

Malware Config

Signatures

Files

RonaWind.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 126.0MB - Virtual size: 126.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22.7MB - Virtual size: 22.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 697KB - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gxfg
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 196B

.rodata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 713B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.voltbl
Size: 512B - Virtual size: 82B

CPADinfo
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

LZMADEC
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

malloc_h
Size: 512B - Virtual size: 234B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 96KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 965KB - Virtual size: 965KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 126.0MB - Virtual size: 126.0MB

.rdata Size: 22.7MB - Virtual size: 22.7MB

.data Size: 697KB - Virtual size: 4.3MB

.pdata Size: 4.0MB - Virtual size: 4.0MB

.00cfg Size: 512B - Virtual size: 40B

.gxfg Size: 16KB - Virtual size: 16KB

.retplne Size: 512B - Virtual size: 196B

.rodata Size: 4KB - Virtual size: 4KB

.tls Size: 1024B - Virtual size: 713B

.voltbl Size: 512B - Virtual size: 82B

CPADinfo Size: 512B - Virtual size: 56B

LZMADEC Size: 4KB - Virtual size: 4KB

_RDATA Size: 512B - Virtual size: 244B

malloc_h Size: 512B - Virtual size: 234B

.rsrc Size: 96KB - Virtual size: 100KB

.reloc Size: 965KB - Virtual size: 965KB

.text
Size: 126.0MB - Virtual size: 126.0MB

.rdata
Size: 22.7MB - Virtual size: 22.7MB

.data
Size: 697KB - Virtual size: 4.3MB

.pdata
Size: 4.0MB - Virtual size: 4.0MB

.00cfg
Size: 512B - Virtual size: 40B

.gxfg
Size: 16KB - Virtual size: 16KB

.retplne
Size: 512B - Virtual size: 196B

.rodata
Size: 4KB - Virtual size: 4KB

.tls
Size: 1024B - Virtual size: 713B

.voltbl
Size: 512B - Virtual size: 82B

CPADinfo
Size: 512B - Virtual size: 56B

LZMADEC
Size: 4KB - Virtual size: 4KB

_RDATA
Size: 512B - Virtual size: 244B

malloc_h
Size: 512B - Virtual size: 234B

.rsrc
Size: 96KB - Virtual size: 100KB

.reloc
Size: 965KB - Virtual size: 965KB