MM2 DUPE[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MM2 DUPE.exe
Size

558KB
MD5

e51fa55e1ef98a91fe4658d967e83e70
SHA1

04a0a78276e6838ed4276da525daeab9d37479cf
SHA256

34ab90369f26912d0380b4a804d37bc904762be7492537fd864ff462c6ceeb0b
SHA512

555e8fee8bbb89cb6dba0aa760c8d415264835cf3fd4fa2cfabfb9fca1d916c5bd743d461031540e6136e62c6de9951041aba8f6e1ebbd6fb093c4365ee3126f
SSDEEP

12288:W8ZVeFbN3BHwcx/XwnWgxG28QxQAIgrXuwAQ7VoMMoB1YRrmGXB1SJAt46IkGd7E:WgIJBQcx/AnWAb8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MM2 DUPE.exe

Files

MM2 DUPE.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 555KB - Virtual size: 554KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ