sonic-and-knuckles-3-en-win[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

sonic-and-knuckles-3-en-win.exe
Size

2.9MB
MD5

666ba5c409c9011102876bb3ccbcb309
SHA1

f95cc804edb0e14e46f5eb834f84763db2003065
SHA256

d31721138302cb0ffad0aced03a835e20ce21077a2150c9b7332c7ae889f05f7
SHA512

6ce6c9be43aeab643e841ac7465ff18a0c04e1d1a48d04599c3e4488d01cee3fc0593f1520abd5356253f55ec8ae6f20ac40581af6175055b921a3839d3464fd
SSDEEP

49152:76dHkyn7hqYgxrn2mqxsvvE60DTS7BLlrK2twmZQb8GD335ua6ukazyayafFCmDN:edHkTYsrFssvvD03o8SQDpXk9kfFCbMD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sonic-and-knuckles-3-en-win.exe

Files

sonic-and-knuckles-3-en-win.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ