FKP_Cheat_Mta[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FKP_Cheat_Mta.exe
Size

2.8MB
MD5

35275fc39341c3c758011d52f82efd8f
SHA1

bf6162419ec46ff2a03ceeb95d04f03f13f8a581
SHA256

b711ec1cf4415fd5701d6ebd293b0c527501fd51e6e4e111121f33362540c07c
SHA512

7d0fc15361f01b134f7efa998d9eb7d882dd413da093033dd5ec90379872a3b0adff35c27e5cf61fe98944e6395e28e2641b0ef1945d253d7dcc3ee265dd90a1
SSDEEP

49152:pMcCFfmm3OqRQdR++54zcI0ehcziSDgUIA4aqxD59BXzScrU3LEEP8QF:p9C0meL++54wI5+jNVyVrXOcY3QYN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FKP_Cheat_Mta.exe

Files

FKP_Cheat_Mta.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

\<ll];
Size: 366KB - Virtual size: 366KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.TLmc
Size: 512B - Virtual size: 134B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

غطؾؾ
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.null
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ