m[.]ex | Triage

Sharing

General

Target

m.ex
Size

1.3MB
MD5

7dbda3ba2fce80a3b07a0ec32cb67878
SHA1

f2d5bd8fce381ac709bb4da5b6b20def5b03fec3
SHA256

9e695798a19e1cab50c63d570e7abb19e0cd61bc0b2d77049066e849052a82a3
SHA512

7b8fa6ffe24732b3e3adfe5ce0bd62336c11b417b193b91080c49ad4d0d09bf52a1e3a1bdbeb5951a43d515f0aef01478eb306f5572d3a2c7e86285f44b7964f
SSDEEP

24576:r7KIcRMeJ25VmcnoVUBHe1MENRlY/aUBoFbiu65cba:r7CMHeUBHe0/aGoF7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
m.ex

Files

m.ex
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 820B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ