Static task
static1
Behavioral task
behavioral1
Sample
RozeCheats.exe
Resource
win7-20230220-es
Behavioral task
behavioral2
Sample
RozeCheats.exe
Resource
win10v2004-20230220-es
General
-
Target
RozeCheats.exe
-
Size
578KB
-
MD5
33d1ff026839a65ab4454dd6214a4151
-
SHA1
af2d9e64bce1f79e6c3bb1909051916cf47f88a6
-
SHA256
337eefce3ea861ae43e9d3cce0e7e7afb121346cc32cccc219a84cf1fd68cfb4
-
SHA512
b26ed4006dfe72ca7ee424a19e4e1ec6a5ebb3735ea75a8ea138b4501e23c778195b3f920e3fe5d20f3c3ef7ba6b17abf2092e82dc5f038bfbb82a2eb6782d65
-
SSDEEP
12288:ZRhAITk6dIPnUcXGIcK38gRAITk6dIPnUcXGIcK38g+:VAINIPUraRAINIPUra+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RozeCheats.exe
Files
-
RozeCheats.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 310KB - Virtual size: 309KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 267KB - Virtual size: 267KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ