MT Ramona Particulars[.]exe | Triage

Sharing

General

Target

MT Ramona Particulars.exe
Size

410KB
MD5

00ad0301b4173f6d289b072bdb0d261f
SHA1

4eda33721659de787974694cceba304e65b3ac78
SHA256

5bed20739f13f9e82e3ea63a13440fc71a94fbd38ec7c23c72839f16ef2a16c1
SHA512

cc3ddcbd654e6c68a09a4985cba121f223739d1d44169cc079befc77b7a199e43f26216296575e9c555229f2ee96a913a4cac8bb1f649ad345c5f375802be4d0
SSDEEP

12288:XiXG+aKCj7IFFfaUtUC7K2uz3UeXz6AmeMOPVk2:+GHVj7wfaUtpuzXzAaPVk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MT Ramona Particulars.exe

Files

MT Ramona Particulars.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 408KB - Virtual size: 407KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ