Forza_Save_Editor_3200[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Forza_Save_Editor_3200.zip
Size

4.7MB
MD5

a82a534dc4547a0aab4bfdca74cb0801
SHA1

3237c7f141f7549a57d779b1070327f1246c82de
SHA256

a0b0c5803a011fbd8e02f6544ed5288f2c984f2ec1d53c38ce69709c8e562b4e
SHA512

1856ffa09d56f888b06fa93dfaec11fdfc0dcada0f5895358b39632960509722b563c554199dead81c12639ca36d8530d28a21c3c76ea77bfa84375852748dff
SSDEEP

98304:BsTHjR4wTmCXdKQDSxViuFMlLcSfkvu5S5XVSSLKch8YvgayfU8C:BeTmCXkQ+xViPJns4S5XVhZJvgaaU8C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Forza Save Editor.exe

Files

Forza_Save_Editor_3200.zip
.zip .ps1
Forza Save Editor.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ