mpress[.]exe | Triage™

General

Target
mpress.exe
Size 1.3MB
Sample260924-qpsceaee26
SHA256 7c3ce89c9b9c5da44f3b205ebabba957b1189fc5373616cb6a979be6746245a4
MD5 a380c000cb6f3865b8d0f542104c8f82
SHA1 34bc30127856829d60695a83c0bf4c9e9b224e60
SHA512 1cd6a3e6faa7f6f7dda6c9a8947b222e565def334b2474610e40117de8c04b4a95baeb694f48b020bdb06d80d6a2cb0d45bdf77c03079c5f5b1f611ee818263c
SSDEEP 12288:RvsNn4kkeQ1rUGuTd34XiPvrLr0Ci41UO5wHPdjIpTEx/Mz0gLeAfsVyqBn9r2i4:d4nh8AaSnnrFb4PM4MYgLxEVyGL4
TLSH
T1735523A235D861DECE9E0E70CDD676C8E105AC22F932B20B7662F84B357B78C6D51712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
mpress.exe

IMPHASH 51e7ef6b1d43d0d05d7109dee9789560
SHA256 7c3ce89c9b9c5da44f3b205ebabba957b1189fc5373616cb6a979be6746245a4
MD5 a380c000cb6f3865b8d0f542104c8f82
SHA1 34bc30127856829d60695a83c0bf4c9e9b224e60
SHA512 1cd6a3e6faa7f6f7dda6c9a8947b222e565def334b2474610e40117de8c04b4a95baeb694f48b020bdb06d80d6a2cb0d45bdf77c03079c5f5b1f611ee818263c
SSDEEP 12288:RvsNn4kkeQ1rUGuTd34XiPvrLr0Ci41UO5wHPdjIpTEx/Mz0gLeAfsVyqBn9r2i4:d4nh8AaSnnrFb4PM4MYgLxEVyGL4
TLSH
T1735523A235D861DECE9E0E70CDD676C8E105AC22F932B20B7662F84B357B78C6D51712
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

225455

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths