b-mes5[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b-mes5.exe
Size

60KB
MD5

ab656dbbf3f75a920cce50d4c2e8f0b8
SHA1

ab1fe2ebeb43af534f6d48130629e55dd2465b15
SHA256

422f94141e60a2a97cfd032010c185aa4737c8158ec19202ace4ef2f1da59be0
SHA512

01521f98e9265288003e80dcf09b05867ece57a593763909e89f55907e06df4d173e5de2dc7d2df0b669c1835e20509d342f74285ba6604322b062fb85f30555
SSDEEP

1536:5t3hbQmvKqALDLEoMJPQc8Cz379okPO3AZajGzdQYgx:5t3hbFvVAvIWCn9o+aSzd3gx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b-mes5.exe

Files

b-mes5.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ