mori2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

mori2.exe
Size

4KB
MD5

346b922726cce81de92a7899daf0f8d8
SHA1

cac84ee18fc1d9f8ff22cad56ccb4a41cd5957cb
SHA256

c6dd614d54a89227787b024090389c4d36de742e240cd588c38bd666d2c4dc20
SHA512

1ca311321ab410b3695d04a90be53fba223c405b5b23df0c0b66c59490de1ba104211455158e5b5bd92f690f23e1485c6705bfc7d9f56ba26c2e26c8fadac4b6
SSDEEP

48:6YTWZil8zHr6pwNdJQ+dbCUSSiKwS3BazyOfKOul+tTMuqXSfbNtm:RmK8TW2xoUSSiGBa+OfUgtTMOzNt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
mori2.exe

Files

mori2.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ