Overview

overview

9

Static

static

9

Mesen (Windows).zip

windows7-x64

4

Mesen (Windows).zip

windows10-2004-x64

1

Mesen.exe

windows7-x64

1

Mesen.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Mesen (Windows).zip

  • Size

    15.9MB

  • MD5

    a55d2d00fb3a43be31ce1732818c33e3

  • SHA1

    5dd0b1a246f22be1d0e1175fff9eb8c569068cad

  • SHA256

    5a9a8ff0dbe1a780581ab60e89e1196166f1a11da29b316bb331b072fc5c50ec

  • SHA512

    87ff731279f4cf5b06d4747c1adcc5e9abdffc079493d6410a79c252f37fb7cc5f637fd70bcace81b2fd20fa10ddd0f6b9b400955ebf5fe4661f298b57da3acd

  • SSDEEP

    393216:lawMv5zWQO6KdmVMnEXXf7acccvIVfO/EDZ6HfnL:lawvQhKdcMMXzOlO/ED8HfnL

Score
9/10
coreentity

Malware Config

Signatures

  • CoreEntity .NET Packer 1 IoCs

    A .NET packer called CoreEntity where it has embedded the payload as a BitMap object which is later decrypted.

    coreentity
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Mesen (Windows).zip
    .zip
  • Mesen.exe
    .exe windows x64

    6dbf27f4c70fe2c8ed3e0122ba75d641


    Headers

    Imports

    Sections