MrHackerGroup[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MrHackerGroup.exe
Size

7.7MB
MD5

7ad3f9484a574758826128e43a40e032
SHA1

4f837013a8029be8c35926ded725d77368c270bc
SHA256

d096cf803c00a16248cf94ac3e58fe9cbe06d24442f3ccf888a932b9b11459ed
SHA512

cd0a470e0130fd86fcac7086adfe5dc0e6a12e6cf4ec4fec3ea79be05b236773f1c4152a915a51372486a3f1c5cc2c1c6873b1b7f8c14ff4a365afd4d8f7259a
SSDEEP

196608:x+dFm7jI5Jq1W4c1MmeB0wfCu7UX/+nX/lP9Y5SLLqs8:kOjtvcneB0wd70+nPE5S/qs8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Setup.exe

Files

MrHackerGroup.exe
.rar
Setup.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ