MESManager[.]exe | Triage

Sharing

General

Target

MESManager.exe
Size

1.6MB
MD5

b057b70e1e81b35020e79c5ed0980d08
SHA1

3d44d7164a3812b858ed258ceb5c58e7d73557ad
SHA256

019a224436518fb47fb0ff8f79fb4ee2dc51358b6106063b359d5d7f88f3475c
SHA512

adace185ac56f6243dc90db5e54b1bf6faeecf5369b8b9a89e97e49cc58fbd86b91ce938814101c0b68eefc6c019fa0fce5f7ff58248f223ad5e45859741dbc7
SSDEEP

12288:RXagz1cq1c+ndfZlvyVd7jMgS1CTmrPbqcDWTKtqE61JrKm/8vZk7fTSsovpu0+:RDz1z1ddBY3E3ECxVqTkBkTo40+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MESManager.exe

Files

MESManager.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ