mbr[.]exe | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

mbr.exe
Size

128KB
MD5

601cee96a26e1e2d8027e92c408a8dd6
SHA1

c6e54065c90112c6779b17757b13fef0a87aca12
SHA256

405840d4e2478aa3268fb29450194f964cc3164772c710cf801a1acb7b1acd91
SHA512

b573d6c2057c6a47f0285582eb8efae1e87a4fbbf0274e5e1db38ee8c9e4fd44c85b3c4979bab9c45b6f0ace78cf56e7326db4cd4a50f815019d1945d7fe0b87
SSDEEP

3072:udzYfe+PWJV0KXqHasaeCnhnByx2TV2KJtZ5GY/nRvUZxmLA:udzYfNPeLXIaemnBq2AKHZ5pJUGA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
mbr.exe

Files

mbr.exe
.exe windows:6 windows x86 arch:x86

2deb8379604198feb26459bd223be8a5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoCreateInstance
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
CoUninitialize

oleaut32

SysAllocString
VariantClear
SysFreeString

kernel32

TlsSetValue
WriteConsoleW
CreateFileW
HeapReAlloc
HeapSize
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetProcessHeap
GetStringTypeW
SetStdHandle
CreateFileA
ReadFile
CloseHandle
GetLastError
GetSystemInfo
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
LocalFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
SetEnvironmentVariableW
RtlUnwind
RaiseException
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
DecodePointer
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
CompareStringW
LCMapStringW
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW

Sections

.text
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2deb8379604198feb26459bd223be8a5

Headers

DLL Characteristics

File Characteristics

Imports

ole32

oleaut32

kernel32

Sections

.text Size: 91KB - Virtual size: 91KB

.rdata Size: 29KB - Virtual size: 28KB

.data Size: 2KB - Virtual size: 5KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 91KB - Virtual size: 91KB

.rdata
Size: 29KB - Virtual size: 28KB

.data
Size: 2KB - Virtual size: 5KB

.reloc
Size: 4KB - Virtual size: 4KB