MegaDownloader[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MegaDownloader.exe
Size

6.2MB
MD5

5cab3334743577d0f528889fd4c12704
SHA1

ce9437dcc5cb4591d579406a2f98ff0745f1504e
SHA256

7dd0d8311b3c026070dd67a8972b04b3fff1a80d3257d60f067876df78b61de4
SHA512

2af71daf366ad81d73956ba4fd29832e144c9ba54df7e3e6f3d3169d3e9054f3dbd035f570fc78029c330c36277941b845ea1f6b21635f43c8180b50320ba898
SSDEEP

98304:XTn/CQrd9ttwvJm+BaN6tC3Lo9HnmOIKjFANx/rKUjFNxvLWB:XT6u9t+v0+Bqp3LOHIIGNNeUjFNxvLW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MegaDownloader.exe

Files

MegaDownloader.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6.1MB - Virtual size: 6.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ