MRP7[.]NET_GRP[.]exe | Triage

Sharing

General

Target

MRP7.NET_GRP.exe
Size

58KB
MD5

19379edc89d5ea40eccc68917329829e
SHA1

aecb407ab920734a2205ce3c6c4c64dedae6f49b
SHA256

46022e409c51a232e3c38c24aa6d18070a3e8922293eb45bfade87a6dd69e358
SHA512

21ab9b7c1b9c320e68a43802d73288e52adf0227258ac98735082cd5a56cd7d21635458d1f18f12ceeae600abd7ae20dc1812dc7784fc307b1815c2ddb3b65b2
SSDEEP

768:b/GtjApAiojlQBkiwggz+U4gLFxk9/y+HIlWXCLwvPYX3xioa3UXpU:byioCBX7q4gL3k5HtXCSPOXOip

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MRP7.NET_GRP.exe

Files

MRP7.NET_GRP.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ