A[.]Dance[.]Of[.]Fire[.]And[.]Ice(GamingBeasts[.]com)[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

A.Dance.Of.Fire.And.Ice(GamingBeasts.com).exe
Size

4.0MB
MD5

2b27f5312090e0793963077aa6130cd5
SHA1

0983721c8cd0c2fa1c5872f224c16d6a933b88cc
SHA256

71708acb07cf89945fe58853052cb6fc3160e251eba12fbcaebcf5e1b5005e51
SHA512

eb28b0e4925b3add4c2d99f32cee4afd9413fda6f04f068171af763a677fa3f27e005aa3241759271e1faeb993a2a0175ef1f2f6217131acb8bc81ad489c7220
SSDEEP

98304:EHhCYZT8iGX7vp4THYPihcnBm5Sj4bHgkbA33vc+x:EBCYZT8PXLMHY6IHjGgkU330+x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
A.Dance.Of.Fire.And.Ice(GamingBeasts.com).exe

Files

A.Dance.Of.Fire.And.Ice(GamingBeasts.com).exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ