2024-08-14_24bc17d6afbca2c0e8d12c130e387363_mafia_ramnit | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-14_24bc17d6afbca2c0e8d12c130e387363_mafia_ramnit
Size

9.8MB
MD5

24bc17d6afbca2c0e8d12c130e387363
SHA1

068e6ec8016d56efbc554f77e81fb60537ec09fa
SHA256

0300e109f49391d9457da0c2125cda6541773bba485d27de15cffd2265799175
SHA512

15d878cba3a58cd3ae2abd3070f3c73f55a004f583eda48b6db282e2a1eb430ae0e9d0e693613a8a97886f905c510c204c2d78e79586f0c5290e1bda68f75548
SSDEEP

196608:ibxwyynA3WAp0Fh2igjUtuCyMPSm1Nv718NNGj7JfVf9p/pz8RHVaXulpOK1+Cbe:ibxwyynvX2+X1Nv718NNGj7JfVfT/pi+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-14_24bc17d6afbca2c0e8d12c130e387363_mafia_ramnit

Files

2024-08-14_24bc17d6afbca2c0e8d12c130e387363_mafia_ramnit
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Ngcuka\Documents\V\New Exe Spiker + Btc Clipboard Rig\WindowsFormsApplication1\obj\x86\Release\MainV.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ