MT 1103254[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MT 1103254.exe
Size

740KB
MD5

2a81f829539107d0edd9413495d5d713
SHA1

7d7bf4aedab09b10dd788bf2b32279cd9a4ce861
SHA256

84ea5cb4911bd59e787b5368b001b10c9bd5c29b74a1c9cd602982a0b1375109
SHA512

df84b8a7e0943ac583829052f40a089ce613829f135eff5886dcc4ae50166c724c7765739885cbb7c1144e9cac9446f991f07ddc2fe1dcf78600d620fbd2e786
SSDEEP

12288:+MsJTENl3ly8M4tdCwXLwVW1GfbSCuiML2hvDiOk0/iOtGp2HNf72hrJyNeZc/bd:KxENl8YfCwUa4FuiUi3IOkp25XWcDnoG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MT 1103254.exe

Files

MT 1103254.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 724KB - Virtual size: 721KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ