PokeGen[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PokeGen.exe
Size

399KB
MD5

c80c9a0444c41a9fc870b550fbe09b07
SHA1

9e8c982eee34de56a14d9c9d0c4f8f2c9e9a65f9
SHA256

6d32f8fb47931dfcc4fb6534524ca741a0375b2c65bff57db4cb2f493c5a2540
SHA512

8e74c7066ddaf1876eb05ee4112e0a9ed12ff53b6296762ba8a4ac7fb46acc4bff78af28a85773876ba63534c6028ab3cf6db6c54537a8ba11617e9559e4d262
SSDEEP

6144:gT5R1bHKUMZxPpdO/KJwzQsY509ge1+4ge:cVTnMxzNyzQsYgge5ge

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PokeGen.exe

Files

PokeGen.exe
.exe windows x86

Password: Soy gil

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 299KB - Virtual size: 298KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ