MainMP[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MainMP.exe
Size

4.5MB
MD5

bc20a80b5d9b3fe6afd5127fe011b55c
SHA1

d8ec4585c4d10ec5c9d60f6dd048651a1d09d538
SHA256

718cda8033d162aee2d71a9103ea1329176bd9f9c6ee2fa4e737dc1558f36454
SHA512

6507355d0ac3f49426d54def8536cfb974a9d31258e0c7a5997c1267a1e3664ce7815250f21216768a2788d85e719b77451a171855ab2064427267e5e3b548f1
SSDEEP

98304:trlxiqxkbEFJiAjh0h+lRQk3zuX90jU/UYnT/qcJ2adQFTUnX072L4d:tfF2SJiA2IQkjuX9Q3YnTdEad1S2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MainMP.exe

Files

MainMP.exe
.exe windows:4 windows x86 arch:x86

1b207c9515a354b081c50dd02154b0e2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

WidenPath

version

VerQueryValueA

ole32

CreateStreamOnHGlobal

comctl32

FlatSB_SetScrollPos

shell32

ShellExecuteA

winspool.drv

WritePrinter

comdlg32

PrintDlgA

wsock32

WSACleanup

winmm

sndPlaySoundA

oledlg

OleUIObjectPropertiesA

usp10

ScriptPlace

msvcrt

sprintf

Sections

.text
Size: 4.4MB - Virtual size: 19.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE