Static task
static1
Behavioral task
behavioral1
Sample
Terraria.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Terraria.exe
Resource
win10v2004-20230220-en
General
-
Target
Terraria.exe
-
Size
19.5MB
-
MD5
8ad451f8ff1d95de4cdb36302094af90
-
SHA1
4d473e1a4d70009ca856dd0a797b70c36f7424e1
-
SHA256
011c9ce83f0880e107c63bd280aa636bb84dc2e61b57269599609728e845a8c1
-
SHA512
1e12d11752862ce6370dc3f9ca9aa6ca16aab1b9e512cbf9a7227f6fde3118134d81b39b7ba4c109d98f414ec17c46863b44439253e923cadf3ec3640a1890ee
-
SSDEEP
98304:9EjCQCovssQsmEEbVxh3OmOP3+ODZt55udu:yjCQRssQsmXxYP3+ODZtSdu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Terraria.exe
Files
-
Terraria.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 19.3MB - Virtual size: 19.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 133KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ