General

  • Target

    Hollow Knight v1.5.68-v1.5.80 Plus 11 Trainer.exe

  • Size

    1.5MB

  • MD5

    599d4cfe479f5ef10d6bb3463e79f0bc

  • SHA1

    c213d798cc318059c23b51314b249453d6cd367e

  • SHA256

    ff0eca3104c9290247b79382327f28fc8261183341a696541123a0f698cdb451

  • SHA512

    a49fd61c5e0e927efdddd42b04d214933fab36878ab0ad0bde52c8a9f7419148306744ad36a71e05565a03953a276ace437a8cb7c067fefbc0db12dad9a40088

  • SSDEEP

    24576:sq43+QGag0nB/oZGF3quJPrvQ21DSVXT5X9U6oya3AWOE:Z+GalnOcBPzJKXT5Xu1w4

Score
10/10
r77

Malware Config

Signatures

  • R77 family
  • r77 rootkit payload 1 IoCs

    Detects the payload of the r77 rootkit.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Hollow Knight v1.5.68-v1.5.80 Plus 11 Trainer.exe
    .exe windows x64

    e6d198a4258b2a691de1d4940c883d31


    Headers

    Imports

    Sections