raneeenesg[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

raneeenesg.exe
Size

12KB
MD5

29ff8ea38583310a9a180d87778d495a
SHA1

9fa201b338a68b7a564a0b38ce16b801fff3d6b6
SHA256

d5b36c761dcf80febb78fcd8d108c3486f8ece7a0c144eb093fdd70d613406b6
SHA512

e8b1e4b0b3a1ccf527749c81ff926226f078e80617cb06272a0a6b56197e6651a247aa5421e5f901c81fd8ccf253978b09de098bbc96f621c8d5d4ff6ae0df8f
SSDEEP

192:9FzB/lZBBL9u3KMHaYLT5wJliiD80mx8LfbBX3KWwfRrVKVfMRonAv+Q:fplZBBL9u3+YLlw/3JmxefbBXaWwlVWN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
raneeenesg.exe

Files

raneeenesg.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Straqbery\source\repos\raneeenesg\raneeenesg\obj\Debug\raneeenesg.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ