Mcp[.]exe | Triage™

General

Target
Mcp.exe
Size 10.3MB
Sample261110-plc8msax3v
SHA256 3bd3628e40a53414c945fdba55bd8e661f53bc111c35711c7d6bf96151e6c5f8
MD5 881ba01fbeecf0a5233008ab150155d9
SHA1 e99edb61541ac669a421e83a6e179c469eb90c51
SHA512 6a268704715c3af11ef6dfc67dbf6cb173c23bc4a523c20ece905e1cf4518fea589266e8a21b9d94f504aafe8672e3a182b29a3fa139a6adcf0581e0e9ad3166
SSDEEP 98304:SLxOahdReReZqkTeheUtFYgrTTTTio+4+nMed6paTLyKjQbz5i+QVFZ3qr0JDTDW:SVO+HOPkTAXtf+4+bd6paP5jQUfqkfv
TLSH
T16FB67C01A7A4D8D7E06A0B75D7F141A253F8AC019736C28BBB583F5BBB7270099D139B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Mcp.exe

File Explorer

Mcp.exe

.exe 10.3MB

Mcp.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 3bd3628e40a53414c945fdba55bd8e661f53bc111c35711c7d6bf96151e6c5f8
MD5 881ba01fbeecf0a5233008ab150155d9
SHA1 e99edb61541ac669a421e83a6e179c469eb90c51
SHA512 6a268704715c3af11ef6dfc67dbf6cb173c23bc4a523c20ece905e1cf4518fea589266e8a21b9d94f504aafe8672e3a182b29a3fa139a6adcf0581e0e9ad3166
SSDEEP 98304:SLxOahdReReZqkTeheUtFYgrTTTTio+4+nMed6paTLyKjQbz5i+QVFZ3qr0JDTDW:SVO+HOPkTAXtf+4+bd6paP5jQUfqkfv
TLSH
T16FB67C01A7A4D8D7E06A0B75D7F141A253F8AC019736C28BBB583F5BBB7270099D139B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10712710

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

PDB paths

Mcp.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Mcp.exe

mscoree

dotnet