mtn[.]exe | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

mtn.exe
Size

208KB
MD5

d5977fec5a6a9e1d2fbe4f1afd831898
SHA1

9497ceac73d8da4293b67a26498a363245df35cf
SHA256

9967be0c01141bde63edc73840f3512a0b935fc2d9a9d6f0c1e8d32ce0fa866c
SHA512

5766ac45ba57e4317b39e7ceab0d69669045cf43be917c605b87101ff0baccafba9a654726d506b849cf7f4bc4171c581cf234f43c07dc40bb89e75a8311dd7c
SSDEEP

3072:DkUSzCyK9qF5MHzo0ZScJszVdk6GS/t4T4oLOezR7tPpK2K:DkayKUdtcOzDk6GS/t4T4oLOeJK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
mtn.exe

Files

mtn.exe
.exe windows x86

d92b2416380159ea6f8424dbf275900b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

avcodec-57

av_packet_alloc
av_packet_free
av_packet_unref
avcodec_alloc_context3
avcodec_close
avcodec_find_decoder
avcodec_flush_buffers
avcodec_free_context
avcodec_open2
avcodec_parameters_to_context
avcodec_receive_frame
avcodec_send_packet
avcodec_string

avformat-57

av_read_frame
av_register_all
av_seek_frame
avformat_close_input
avformat_find_stream_info
avformat_open_input
avio_size

avutil-55

av_dict_get
av_frame_alloc
av_free
av_image_fill_arrays
av_image_get_buffer_size
av_log
av_log_set_level
av_malloc
av_rescale
av_strerror

liblibgd

gdImageColorResolve@16
gdImageColorTransparent@8
gdImageCopy@32
gdImageCopyGaussianBlurred@16
gdImageCreateTrueColor@8
gdImageDestroy@4
gdImageFilledRectangle@24
gdImageGetPixel@12
gdImageJpeg@12
gdImagePngEx@12
gdImageSetPixel@16
gdImageStringFT@44

swscale-4

sws_freeContext
sws_getContext
sws_scale

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileAttributesW
GetLastError
GetModuleFileNameW
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GetTimeZoneInformation
InitializeCriticalSection
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
SetPriorityClass
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__argv
__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
__wgetmainargs
_acmdln
_amsg_exit
_cexit
_errno
_exit
_findclose
_fmode
_initterm
_iob
_lock
_onexit
_snwprintf
_stricmp
time
exit
fclose
fflush
fprintf
fputc
free
fwprintf
fwrite
getchar
getenv
localeconv
malloc
memcpy
qsort
raise
rand
realloc
setlocale
setvbuf
signal
sprintf
srand
strcat
strchr
strcmp
strcoll
strcpy
strerror
strlen
strncmp
strrchr
strstr
strtok
strtol
_unlock
_wfindfirst
_wfopen
_wfullpath
_wstat
_wunlink
abort
toupper
vfprintf
wcscat
wcscmp
wcscpy
wcslen
bsearch
calloc
_wfindnext
_vsnprintf
_strdup
_mkdir

user32

MessageBoxW

Sections

.text
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d92b2416380159ea6f8424dbf275900b

Headers

File Characteristics

Imports

avcodec-57

avformat-57

avutil-55

liblibgd

swscale-4

kernel32

msvcrt

user32

Sections

.text Size: 70KB - Virtual size: 69KB

.data Size: 512B - Virtual size: 512B

.rdata Size: 16KB - Virtual size: 15KB

.bss Size: - Virtual size: 48KB

.idata Size: 4KB - Virtual size: 4KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 32B

/4 Size: 512B - Virtual size: 184B

/19 Size: 51KB - Virtual size: 51KB

/31 Size: 3KB - Virtual size: 2KB

/45 Size: 3KB - Virtual size: 2KB

/57 Size: 1024B - Virtual size: 584B

/70 Size: 1024B - Virtual size: 928B

/81 Size: 4KB - Virtual size: 3KB

/92 Size: 512B - Virtual size: 336B

.text
Size: 70KB - Virtual size: 69KB

.data
Size: 512B - Virtual size: 512B

.rdata
Size: 16KB - Virtual size: 15KB

.bss
Size: - Virtual size: 48KB

.idata
Size: 4KB - Virtual size: 4KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 32B

/4
Size: 512B - Virtual size: 184B

/19
Size: 51KB - Virtual size: 51KB

/31
Size: 3KB - Virtual size: 2KB

/45
Size: 3KB - Virtual size: 2KB

/57
Size: 1024B - Virtual size: 584B

/70
Size: 1024B - Virtual size: 928B

/81
Size: 4KB - Virtual size: 3KB

/92
Size: 512B - Virtual size: 336B