Mesen[.]0[.]9[.]9[.]zip | Triage

Sharing

General

Target

Mesen.0.9.9.zip
Size

9.7MB
MD5

67099aee737e3791de72532969467c14
SHA1

4a12f25740856d89f55bcdcf324e1ece179d9d8f
SHA256

91bd2b1ba007c9349864a96e490dbdaada78033d51e0be1aabbf442a4b9a7cda
SHA512

d511f6b1e602c40ea8f59f46857270cf3993db1da60608aae980f7596ff768d2d0f2dec94e1c16fa9587285a5662c1aa726076469df2cd65267bd553ab749e4e
SSDEEP

196608:adGXs8eOgvIjE7L5uzg8X3sxOl3blbUpK3VFYCD5FDGBsI7EzEOFeKvhfXYz6:ad8AbvRP5Mg8XNl3blciVF/lGBsS9kpR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Mesen.exe

Files

Mesen.0.9.9.zip
.zip
Mesen.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11.1MB - Virtual size: 11.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ