Mwm71[.]SystemSet[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Mwm71.SystemSet.exe
Size

26KB
MD5

51be525c47be0f1492ab962be9ad08d6
SHA1

e908a3e14d6a75063408bc89b195e8c663a003e1
SHA256

0f98d0c3f76c7de1cb97bafb23beec06acb999ca374aaec991765c0ebdae6b16
SHA512

e21ed449029cddb9bb1af7a79184f9415922dd8a16b88e60c15fba9ef39fcb10bd468521501a4e526483e3fe5c8feada12e28204da0f2226c739eb761175497c
SSDEEP

384:ToMSFlEo6JGNw9fRoXrH5GySfuUkQ8ZKn4OwDNgC2Esi3K05WRf:VElYYsoXrZ+/x4/u0k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Mwm71.SystemSet.exe

Files

Mwm71.SystemSet.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ