mnew[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

mnew.exe
Size

47KB
MD5

29367546d620f979b808a5ba99d197ec
SHA1

767e89f70811a71c48440a31cdf1d4cf7fc34077
SHA256

c814bbc63336ad629b046f80e3b2a1f8b764a95d648ca8efbd65634e9532b52a
SHA512

5723e95713eb9c5cd8c216afaf9c7c324349f8b8ab99c6d50bf69f9a25df99bf58c04d4d5d381f58519dc1752773bf4c3abd325ea236187930a1eabdcbb908ac
SSDEEP

384:T4XTTeYkseGf9T44dAkMQfQHbrgG/cQ6i+B867rFgy4kjMRQbBxVwHqyaZrF8EQk:kX9kz2t7kf/fIrFgZkgoyKDHPz+Z2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
mnew.exe

Files

mnew.exe
.exe windows:4 windows x86 arch:x86

bbe06459abbb1d845c350bfe00379c91

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

pbvm90

ord137

kernel32

FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetCommandLineA
GetCPInfo
IsDBCSLeadByte
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
GetACP
GetOEMCP
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
RtlUnwind
VirtualFree
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
LoadLibraryA
WriteFile
GetStringTypeA
GetStringTypeW
HeapFree
HeapAlloc
VirtualAlloc
GetProcAddress

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ