RamiForFree2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RamiForFree2.exe
Size

2.2MB
MD5

5c5a23b8a235e821034a0eac30c7946e
SHA1

7e9d4bcc082b7bceb14f01044426f9be20c98af1
SHA256

40f21a70337673d9ee99ad3251acd4a39ccfb430658db2953cf63fbb5ea86222
SHA512

1d3c6e3c6ac9e1ddb565ee994813807d682179dc0e6c8d9d01a3fd8b80ef370ccbc2aa85ce7435d7e574379ca9c78567726011f823fbd71a6c3357d9ae3d786e
SSDEEP

49152:x+tLFGAVNnus9kEexXqBEexXqBEexXqq+:AtLXPus9k5XqB5XqB5Xq7

Score

1^/10

Malware Config

Signatures

Files

RamiForFree2.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ