botw_editor[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

botw_editor.exe
Size

281KB
MD5

19f4b6d3353c6cfa420d26630f36e556
SHA1

43fd7ede412fa09e2c187fa0102e3c5fc196f37b
SHA256

a2955a8572f939079e7f15c019814852a616fde23100a599eef81eaf367d5f61
SHA512

69b44efaa59208208ff07c49f50eb748e8dab515914e0f8e80f86c7d2f5cb98f31fcd1f15997d1719eca4f80e60a6d8b068adb0e85e495e8b29bfb33beb4e906
SSDEEP

6144:U/7tuEmXDOEvuSVnuWbmIj79z/94fn2oDzA8Qa7rdsdCI6irpljUJHCy8ak2t96b:U/7gEmXDOBcTC0gPAWfOxVrpljUJiykF

Score

N/A

Malware Config

Signatures

Files

botw_editor.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ