Meatspin-Boost[.]exe | Triage

Sharing

General

Target

Meatspin-Boost.exe
Size

2.5MB
MD5

5a9d19e4d434d2dbf8a87f2edcdef5f8
SHA1

df61cc0e7ec9afa82ea7de4b790336a623c555fa
SHA256

129ae20f2268060bde769a5c9d5530767b071402e153dff5268dd1ad349a310c
SHA512

cb377dc737e12b5655bfc47bacf75c2b406d28ec6e976f9857fa3cf2bf4c49ff7d96e8bc3b41b1e1d4b0d06891bd608bf4b2f6669c4e2c4a2bc4a8f2ea56c6ad
SSDEEP

49152:9/XeGHi4uZqANETwhD30QmJ8d+3tlilsfLZqFnIAphRK/Q:BeGLANOwhD5bdwSsf5AphyQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Meatspin-Boost.exe

Files

Meatspin-Boost.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\111\Desktop\Meatspin\Meatspin\obj\Debug\Meatspin.pdb

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ