Mwm7[.]NET_GRP[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Mwm7.NET_GRP.exe
Size

210KB
MD5

e2285c369a897488006a26ba50b04cc1
SHA1

9d56f2adf25f0ecd6707d12fadb4df61a5aa76f8
SHA256

a16f3bbcb2e0c4336af9490caa8aab96c559485d5cae534a74c937a67b3ea4fa
SHA512

991142ec549ff58d1f545ceb3a26a37a271a055179901baf20019ab8c7f79cd7c081f64b4335e3557307461eec682af60d2f8e71cc2b5007cc0564c5928923a9
SSDEEP

6144:yY0EZ1rN1n8B01enKsjARgMPxRVVnPBVYnnEg/N:c01Z+BFnKswiE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Mwm7.NET_GRP.exe

Files

Mwm7.NET_GRP.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 157KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ