MonkeAdmin[.]scr | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MonkeAdmin.scr
Size

2.7MB
MD5

aad3c67e5ddfbe96de4b0b871645dee6
SHA1

3e0fa97662f4d2f4c3efd088787e01c665687add
SHA256

13f3ab50712b340348096d6f32ac385b72b89e7bd0fd45b15d1408a9c6a95b31
SHA512

0c0333b04ef93f24289a66232af1fd1530bf618e1b2f938654841422485d4192302fa92f46036a0a866aa586bdc236c6a5685dada9d84e187f4a4cf271c93119
SSDEEP

49152:ngli2WfVPmmYfx3eoykTsTIvw6ljcwtzLin4Ay4RsPtEGTdY:nm0VPOJOHkTs6wocwJjAy3Ek

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MonkeAdmin.scr

Files

MonkeAdmin.scr
.exe windows:4 windows x86 arch:x86

a9c887a4f18a3fede2cc29ceea138ed3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

malloc
memset
strcmp
strcpy
getenv
sprintf
fopen
fwrite
fclose
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit

shell32

ShellExecuteA

kernel32

SetUnhandledExceptionFilter

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ