RatioMaster[.]NET[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RatioMaster.NET.exe
Size

216KB
MD5

2c84a5cb5302a1a3825d0d59bb270eea
SHA1

c3ecd08c9db87838e4c36c8a423f62b7209e52bc
SHA256

d499ed6fccbeb9abf86abd3f20c80219e53ddbb50255bd3a6225fe3253218860
SHA512

a66a6b9494c5ad234a9d8e13956896ba26425b418a71438632f88202f9ca71da303d5d8df1f24be4670ea0c60c94a362bf1d26d2a3f57440d98c561db783022f
SSDEEP

6144:Z61J1Js/mPLbzYRr48fmv9v6MMcxESEG07:2z8rI9vu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RatioMaster.NET.exe

Files

RatioMaster.NET.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 213KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ