MESManager[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MESManager.exe
Size

1.6MB
MD5

d29a0ec31ad217da49066a86afb6696b
SHA1

d9549cee8fabf3e4dbcf2f887ba7719cf1445141
SHA256

0760aa185c3526a467bfa64af8480c47c5d09e51d5cf34eafa9330d6b4adc155
SHA512

4efb1434cfc697975ab50e5069fc427fa034b0055539799e162b04de938f59ec23761ae5552f6cb9bc372976fde3368ca1dcd3b9dc555dafb38c1b6f01c5cfc9
SSDEEP

12288:LXagz1cq1c+ndfZlvyVd7jMgS1CTmrPbqcDWTKtqE61JrKm/8vZk7fTSsovpu02:LDz1z1ddBY3E3ECxVqTkBkTo402

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MESManager.exe

Files

MESManager.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\source\Source\Custom_MES_Daega\FrontEnd\AKSManager\obj\Debug\MESManager.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ