Static task
static1
General
-
Target
ChampSelectSpy_[unknowncheats.me]_.exe
-
Size
324KB
-
MD5
55551c4720ac114205289cfa5b4d9352
-
SHA1
45c470f6eabf8d4b569c268a916a78d7ac88accc
-
SHA256
56cca00932007410fb2416d681ed4d882023aa71df88e1661f101c15166fc5f2
-
SHA512
59cb88a195548d001fb456a0c810bad550bfc383b4a5c48e4f02da0406bcba8fce19df1a3ef98fa78834401e013254c2d71e3a24ad7296cd5becaf47a63d6105
-
SSDEEP
6144:VxQvXoRXlGMzG8DIhl12P2EQhq1bhw9UfTxHACa/5yPP8axHU0tn2v:cPoR1GytQQu0bnCPhgw3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ChampSelectSpy_[unknowncheats.me]_.exe
Files
-
ChampSelectSpy_[unknowncheats.me]_.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ