mm[.]zip | Triage

Sharing

General

Target

mm.zip
Size

415KB
MD5

33bff70706b785bf8bcbec68c6d49c01
SHA1

51d2c471ff81503f2e785901d3c2c521b16de104
SHA256

edf6d3b74791880acb7e2df1871578c6d897958e13b14d1a562e76b36ed4fff6
SHA512

396a7d12c8b7794abeba1d4dde01d65540b9aa997d17d8d810a2c861b8b4846ee5532347a14a76be5dc7a0312f0d9ca9296b216925a9c22c92f69da98a5aeb4e
SSDEEP

6144:fAshWVSJJF84Tb9kKZFxw+DSoXVHxF3NwPBVPEyguUA8X5YzWkg2nVZg+5dCklm1:R4WF88vnv3NUPEymAq5Y5nV6+5dHoL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/mmpack.exe

Files

mm.zip
.zip
mmpack.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.bsS
Size: 328KB - Virtual size: 328KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE