musu_mama4[.]exe | Triage™

General

Target
musu_mama4.exe
Size 1.3MB
Sample260930-kfxb4ssfmb
SHA256 6cf70aba3aeee7679c4ed16561e8f27929f9e496cd602ee5b0385abf2c78bd8e
MD5 66346be29e426de1857bda6529abdb74
SHA1 72da20fcf1eb3f711483fb11456e25d094a4b9db
SHA512 887c65c81fa066ee749215b855f3bdfbee9760f56cb2036b5cffab5534ae788e8cfb2304e570d5f4a902533b648848af5313ffa6824abb9c72ad30c461b7753e
SSDEEP 24576:3kjMsASWHg+us/Llw/V56xMZN81+nF6i:3kjMsAS//AOhZN81+6i
TLSH
T15E556C42F2058567F5B704B1A6A9B76942387E341318A0D3B7C43AAA87F75F1BF31A07
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
musu_mama4.exe

File Explorer

musu_mama4.exe

.exe 1.3MB

musu_mama4.exe

SHA256 6cf70aba3aeee7679c4ed16561e8f27929f9e496cd602ee5b0385abf2c78bd8e
MD5 66346be29e426de1857bda6529abdb74
SHA1 72da20fcf1eb3f711483fb11456e25d094a4b9db
SHA512 887c65c81fa066ee749215b855f3bdfbee9760f56cb2036b5cffab5534ae788e8cfb2304e570d5f4a902533b648848af5313ffa6824abb9c72ad30c461b7753e
SSDEEP 24576:3kjMsASWHg+us/Llw/V56xMZN81+nF6i:3kjMsAS//AOhZN81+6i
TLSH
T15E556C42F2058567F5B704B1A6A9B76942387E341318A0D3B7C43AAA87F75F1BF31A07
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

528143

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.always

Size

651KB

Virtual Size

652KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.smile

Size

72KB

Virtual Size

80KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.2019

Size

19KB

Virtual Size

102.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

291KB

Virtual Size

292KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

31KB

Virtual Size

220KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

279KB

Virtual Size

9.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

musu_mama4.exe

generic