#007-RAMDISK[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

#007-RAMDISK.exe
Size

13.5MB
MD5

9f1882148b72ab05d0bfbb3680ac53d8
SHA1

7f8fd3041824c13a52b34e2706eb634e840e737e
SHA256

055c3d9f1ecf0b6a39a207983af02a1637292672d7630a6c97ab8d0134fb9c44
SHA512

76d5a711c9cf36e5a912e1469bbed6aa1bf8c7465554d490e0d4c6fcfb142302e2beb0e66f463a8131446161b0748a610c94f3ff7dc9acea6dc4a51cce23a726
SSDEEP

393216:SjwcPimYUh7iqjiEGP6z6NgZcuwdngHl1:In2ZEGP4Zmn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
#007-RAMDISK.exe

Files

#007-RAMDISK.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13.4MB - Virtual size: 13.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ