BetterMonkeModManager[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BetterMonkeModManager.exe
Size

218KB
MD5

c154cdea8ca2ff72ba8beab0f9ff2ec8
SHA1

1c6e546a851a062cc37f89201889f85dd029a141
SHA256

1bc79c02bae34960d009fd4756d9e4f68e9605a7ac74e27a445d80155ebe0c6e
SHA512

cf7909a7e03e98226c5ebf3cb6230c7a07d519c95f0ea16e38ac2874e9e258925b845f6b09c4aae13b98f8de8b10284083ad98ae994b0967bb05425b4b7df312
SSDEEP

3072:Jlyu9JO63pcE090AF23P88RipY1wmsBbHJmJP+IE090YvD:BO63+E09hWPH1wmsBbNIE09xD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BetterMonkeModManager.exe

Files

BetterMonkeModManager.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 147KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ