MRPII[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MRPII.exe
Size

28.6MB
MD5

b814abc5724680ffffb37bdf22fb1372
SHA1

b989810d3e4bef0f21075cb07c9b4d2a7983bda4
SHA256

f4be36ceab2fdd1fc3be164052460c1d03193c006563fd96b2231dc57fdee9df
SHA512

c0c5019d1bd7700ca8109a5146a8db3728b9d2a732373dac78a52275b3caf4eeec201c3a6742c4686ca1ccf41f0b10de6ed3ae8ff5b0bd2e4f3b2daa4cd2cfdb
SSDEEP

196608:fzJ1N6ToTwhWLPevPdiEAMDR/0B+/cWZkIMTz2wamsdLYyo/MWylWy:fzP4ToTAtPcdMDYWZMCTDo/Mr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MRPII.exe

Files

MRPII.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 11.2MB - Virtual size: 11.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 26KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 64B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 661KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16.7MB - Virtual size: 16.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ