MegaDownloader[.]exe | Triage

Sharing

General

Target

MegaDownloader.exe
Size

6.2MB
MD5

77bc9ed13fc8db7709b8d3341daa10b5
SHA1

bc90579782025614f4058166ecc16daab3558cf0
SHA256

3421172b38c3c2176426f03970daafccd1aa65ad97ecfe81bb28fd187c151802
SHA512

eef7f18309a7ae4b796835c98fb17ed962e4e3ee5740f0219661bdce1da958bd7d85f46de7a6995a47e90c448fffcc9bc9beb631c673b66eb03b5829d6b99dfb
SSDEEP

98304:Gv1/CQrd9ttwvJm+BaN6tC3Lo9anmOIKjFnNx/rKUjFNxvLWB:Gvgu9t+v0+Bqp3LO0IIpNNeUjFNxvLW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MegaDownloader.exe

Files

MegaDownloader.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6.1MB - Virtual size: 6.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ