mewing[.]exe | Triage

Sharing

General

Target

mewing.exe
Size

932KB
MD5

3bece9fcdf37acf217a5d5871ff456dc
SHA1

2404c3c738adb41209308547d50d48cf9aa4b05e
SHA256

29f52ac6f53f9ef5b1328b4f22c327f44cbf4f6428d8b4da5b2ab894bee39d2f
SHA512

f9ccfe95d2cb556ddd3de2ae165cf3724e1e51d00e03eb316afcb350141ea47765cf34ec90a0e4e9bd4ab62ca8a458eb075972a6ae6d58f655338696a13af7ac
SSDEEP

24576:jFtbUD7oO7Q41F5BoPad5q5g3FangLkbtgrsCXj3:jFmDNd1H6Pa2nqkersCXL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
mewing.exe

Files

mewing.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\KubakaOff\My Documents\Visual Studio 2005\Projects\mewing\mewing\obj\Release\mewing.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 916KB - Virtual size: 914KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ