Static task
static1
Behavioral task
behavioral1
Sample
GuardiansGame8exeexeexeex.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
GuardiansGame8exeexeexeex.exe
Resource
win10v2004-20230703-en
General
-
Target
GuardiansGame8exeexeexeex.exe
-
Size
2.0MB
-
MD5
9e997471f605939ae958c2f5ad2947ee
-
SHA1
4ae05648ad2aac2cb0f99dd2c33afd8504ee48b0
-
SHA256
012bfb490493cd15e6f1c1e1638929651a2f65886b60288ec937152b374710d8
-
SHA512
fbda17b1b0de702de2c75d805397a34904bc154e83cb2d19e0776f2bfce732ca779d5f917101c4cd7b02dee18c8959d2caf18dab5954ddb3e1ae388bfafb8d34
-
SSDEEP
12288:+fUI73IfyqaMRCjge1qYhzNbpoCmJZEpol/KCz:C3jIfPaMR2V1qubp8JZEpo1KCz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource GuardiansGame8exeexeexeex.exe
Files
-
GuardiansGame8exeexeexeex.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 270KB - Virtual size: 269KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 266KB - Virtual size: 266KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ