MCChecker[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
MCChecker.exe
Size 9.9MB
Sample260705-xwkdpsfs4w
SHA256 7d80ed99e3c0081a41dd35344d4002c105fdcb4ad746bbbc58e504b7eb9713f3
MD5 bec1b63a112303492b862a76a5472505
SHA1 3508a18bd7c1a55a5d3683fab413787705e29a2b
SHA512 ec5a7342b56f15f35c893e40562fe98d895c4887f38843968d27926b5b5eb176fa898c010ff31d9897286dd1192f57dcbb953c449563fe198c140deff6ffcfd6
SSDEEP 196608:wUQbXJ9wCo0odzc/Nl4m0PU4RjGPMBSd:ewdIImZ4RaWS
TLSH
T1EBA68C02FE8B99F6E643153044A7A27FA7345C014B36CBD7EB54BA6AFCB72910936305
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MCChecker.exe

File Explorer

MCChecker.exe

.exe 9.9MB

MCChecker.exe

IMPHASH c6fb30ad4dce883317a7260ffcbc1a17
SHA256 7d80ed99e3c0081a41dd35344d4002c105fdcb4ad746bbbc58e504b7eb9713f3
MD5 bec1b63a112303492b862a76a5472505
SHA1 3508a18bd7c1a55a5d3683fab413787705e29a2b
SHA512 ec5a7342b56f15f35c893e40562fe98d895c4887f38843968d27926b5b5eb176fa898c010ff31d9897286dd1192f57dcbb953c449563fe198c140deff6ffcfd6
SSDEEP 196608:wUQbXJ9wCo0odzc/Nl4m0PU4RjGPMBSd:ewdIImZ4RaWS
TLSH
T1EBA68C02FE8B99F6E643153044A7A27FA7345C014B36CBD7EB54BA6AFCB72910936305
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

573728

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

3.2MB

Virtual Size

3.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.3MB

Virtual Size

3.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

349KB

Virtual Size

32.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

340B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

552KB

Virtual Size

551KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/32

Size

99KB

Virtual Size

98KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/46

Size

512B

Virtual Size

54B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/65

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/78

Size

541KB

Virtual Size

541KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/95

Size

235KB

Virtual Size

234KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/112

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

178KB

Virtual Size

178KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

497KB

Virtual Size

497KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

MCChecker.exe

kernel32

generic