General
-
Target
gamesense.pub.exe
-
Size
42KB
-
MD5
63ebbaeec8841811bd9fac6921e329f9
-
SHA1
35120cd7f882f6598c9d575d3784322ad89b0f11
-
SHA256
9144209e3c8d2c05172343853f4f8a5ab8898bae08e1bc21b79bbacb4f7eefa5
-
SHA512
b6b34380d8f7506e6401662c1333e00b29fcc792f6f752faad0c343b15757087d3e4c40a8dce6d26d363fdec1e14c97e4d31c95045acd9e1b7d0cbc4b18f3f22
-
SSDEEP
768:i/VfW+WRXfzuZoLoFTjXbKZKfgm3Ehl+:iVx4fFLoFTrbF7EH+
Malware Config
Extracted
mercurialgrabber
https://discord.com/api/webhooks/988860387116056626/qGMU_xCcvq7I337gTLsPXC3czlwl9dSVfB2QUWYPAbg5aeuREHjAQCmrMIBwrQMrVWt4
Signatures
-
Mercurialgrabber family
Files
-
gamesense.pub.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ