MeatSpin[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MeatSpin.exe
Size

19.6MB
MD5

434634cf9dcadfce2d0a8c2bc9c69ba8
SHA1

6c0ab5ea590ec0521b9d2b5f0ab98c38c015f7f2
SHA256

8e15ee871839f69ead59a5e71241e7f56c101cb329e65f30a2e1930dd9d16211
SHA512

0e940d013cdb673b6f01dc441e04865931ea0f24ecaa53fa4ef66e8561ac34de2321826bbd383946aba0a0cef7efbea1c7db89fe079dc9a2a9ac267fdcd55ed3
SSDEEP

393216:uSrmqaFQSNyjxITgw1Abtu5tXjHc9G3Gbsc7SjKXlkQ4oyPGIDvjK4Flvi6E:u9JFQSNCxIXg6z89GcDovRiUlvFE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MeatSpin.exe

Files

MeatSpin.exe
.exe windows:4 windows x86 arch:x86

94400fe3e62cd2376124312fe435b8e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UpdateWindow
TranslateMessage
ShowWindow
SendMessageA
RegisterClassExA
PostQuitMessage
MessageBoxA
LoadIconA
LoadCursorA
GetMessageA
DispatchMessageA
DefWindowProcA
CreateWindowExA

kernel32

GetModuleHandleA
HeapAlloc
lstrlenA
lstrcpynA
lstrcpyA
lstrcatA
WriteFile
SizeofResource
SetFileAttributesA
RtlMoveMemory
LockResource
LoadResource
LoadLibraryA
CloseHandle
CreateFileA
ExitProcess
FindResourceA
FreeResource
GetCommandLineA
GetEnvironmentVariableA
GetFileSize
GetModuleFileNameA
GlobalFree
GetProcAddress
GetProcessHeap
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
GlobalAlloc
HeapFree

shlwapi

PathFindFileNameA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.6MB - Virtual size: 19.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE