General

  • Target

    mme (1).exe

  • Size

    7.8MB

  • MD5

    b0dd89746b775203c265f3a64eec06cd

  • SHA1

    0765da0d59009d968945851fa3cfd83d0a7aa80b

  • SHA256

    ee1d863a7b6ebde4b49cef59c759b250633522838a218e954a32689c1ca0d6d5

  • SHA512

    eafeb3a33cf4d5549e75a99f8c2a5ebf31b3dd437a096b0f03a0f00462deec0e163da6dd946fdaf7cd93fb3cad081d7a37dcabbfd9138613afc3b7c3181640eb

  • SSDEEP

    196608:NmwTTMnxljQV14jKRAdQZMv4RT540N3PF1/M:MMTMnxljW4jeA+DT5403NNM

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • mme (1).exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    c480ee4d2a64d4a16edee43fdfe35079


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    afa8e526425f3585465337467d0b5909


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • mme_ie.ocx
    .dll regsvr32 windows:5 windows x86 arch:x86

    dd92b320b1b623045f6ff16a9434bd06


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • npmme.dll
    .dll windows:5 windows x86 arch:x86

    f3b62d8d80a1bf7864662f095cf25750


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninst.exe.nsis