Mipony[.]Pro[.]3[.]3[.]0[.]Portable[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Mipony.Pro.3.3.0.Portable.rar
Size

26.6MB
MD5

d7cdc534d2504e255154cc4811dcd0b6
SHA1

277f3acfc0de6dcf4dd900f1a830d177ef5311fc
SHA256

a01559bd3e3c251a5362f01d7b9672f0507c81d3dac43a95cdb9c1d3c9b88353
SHA512

0b027939657696bed584a2796c21325f66f01c4e1131e40150610ac831ad4bc21b805b546c07452df8151dd895c3fce3754544fc14f07b374c87cc79bdfe2b49
SSDEEP

786432:tJrmA7D7kgP0D5HH3wCtMcpKYtqcub0cegzF8:tJrmAv7kgsZ3wCucpVALW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Mipony.Pro.3.3.0.Portable/Mipony.exe

Files

Mipony.Pro.3.3.0.Portable.rar
.rar
Mipony.Pro.3.3.0.Portable/Mipony.exe
.exe windows:6 windows x86

ff66a4acdd0e04094ba9813691b7a441

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
GetModuleHandleW
GetTickCount
GetModuleFileNameW
IsWow64Process
OpenProcess
GetLastError
DuplicateHandle
GetCommandLineW
OpenFileMappingW
MapViewOfFile
SetEvent
UnmapViewOfFile
CloseHandle
GetCommandLineA
CreateFileW
CreateFileMappingW
GetFileSizeEx
VirtualAlloc
VirtualFree
LoadLibraryW
SetEnvironmentVariableW
ExitProcess
GetModuleHandleA

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xcpad
Size: - Virtual size: 5.2MB

.reloc
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Mipony.Pro.3.3.0.Portable/Muchos Portables!!!! -.url
.url