Flyff_Eu_DE_Setup_v16_Full[.]exe | Triage

Resubmissions

23/08/2023, 22:20

230823-19a9qsga36 7

23/08/2023, 21:30

230823-1cg11sff56 7

Sharing

Copy URL Twitter E-mail

General

Target

Flyff_Eu_DE_Setup_v16_Full.exe
Size

868.1MB
MD5

567e15effba79c645454958735ffb11b
SHA1

81878ebd469fa80d91e688eba279199d47222ad6
SHA256

989c5654cd7beaf1c97b6fcc2fed5ac8deb8a7fd7d0452737b1ff446b0b91846
SHA512

4c1346ee0f3073982763b0e771c8f984b12a01f91251df3ab27728e218930206aecf24e1752647824b18bb38e0fddff3dc61cf02ae1d8785915ba819b2d717d0
SSDEEP

12582912:cXbqQw25Ja9V2Vye70qSrBtJ6ZNcQAXs2Muj7ymi7r+8AW5wiVBgKUvkksMP:cmQjyyVye1S1WTVah7Ep7pCkMP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Flyff_Eu_DE_Setup_v16_Full.exe

Files

Flyff_Eu_DE_Setup_v16_Full.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ