Mega[.]MEMZ[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Mega.MEMZ.exe
Size

39.6MB
MD5

325947d6f691c333e6b4e670f94682d9
SHA1

f398a57259138f6c7a3fff33085fe760ea19a31d
SHA256

9586f7fd31692ddf83cfc98e72cc92d999a813f711326bb701723a1bb86d5b30
SHA512

5c69ca33ba9e7a9ebfedde573cbe71242961c349e9976517b2b341c152a4f5cf4748ecedd3d27d9d33956528ce5c2a516ef0f2b5d72f479d0f03ee6ece2067d5
SSDEEP

786432:wej1RgLlDJ2kGE6D/05IQ7YsLE2bRzAze0qH9G8lhsGNQy10fnBXM8fvz7Ts0b:vgLlDBR6DehMcbRzAa0E9HtNQySZrbb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Mega.MEMZ.exe

Files

Mega.MEMZ.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\catteralldm\source\repos\Mega MEMZ\Mega MEMZ\obj\Debug\Mega MEMZ.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 39.6MB - Virtual size: 39.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ