ramint71c[.]sample | Triage

Resubmissions

10/04/2024, 08:59

240410-kxrg7ada9w 10

10/04/2024, 08:38

240410-kjprfahf55 10

Sharing

Copy URL Twitter E-mail

General

Target

ramint71c.sample
Size

111KB
MD5

8722f98d84d0bf1fa22fa0f1c02b0639
SHA1

c3a12b76a1ac051a0d045b2aa740da81d7de9f6c
SHA256

11d17646ae3339aa5658cdf8b78112bdbbaf1e57fe8e3206c4654331d7e5071c
SHA512

38e15962e5251a002a7d0efbc4dc588839e295c289c25645315857b6df0b623e2c9eb9fa7cbddc2c46c14b9a55374afd924b6042c2fa623deb7130e75465a00e
SSDEEP

3072:sxtrWSjNDZx2v6bENHl/S7s4C8rOLSnU9foEh9fsqtI:sxtrWqxMyo6sxSnwfo693t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ramint71c.sample

Files

ramint71c.sample
.exe windows:5 windows x86 arch:x86

c639db676695662810655280cf9ba1aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ctl3d32

Ctl3dEnabled
Ctl3dGetVer
Ctl3dRegister

kernel32

SleepEx
CreateJobObjectW
GetCurrentDirectoryA
RemoveDirectoryW
GetLastError
AddAtomA
CreateMutexW
ExitThread
LoadLibraryExA
FindFirstFileW
GetCurrentProcess
FindResourceA
GetSystemDirectoryW
InterlockedDecrement
CreateFileW
GetLongPathNameA
CreateEventA
ReadConsoleA
GetModuleHandleA
GetTickCount
VirtualAllocEx

certcli

CACloseCertType
CAEnumFirstCA
CAEnumNextCA

rsaenh

CPGenKey
CPEncrypt
CPDeriveKey
CPCreateHash

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 950B

IMAGE_SCN_MEM_WRITE

.wdata
Size: 2KB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ

.relo
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ