Novelcraft_-_A_Minecraft_Visual_Novel[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Novelcraft_-_A_Minecraft_Visual_Novel.exe
Size

707KB
MD5

90021df24addd8d1db5e517143ea0487
SHA1

20e2a4b10ff8bc0bfb82c570af3eb1e3cd861e5f
SHA256

5742a51d02849b29289c4e454c7c3560a4acfaf916f0916457f87683011dc2fc
SHA512

8404aa8b2e861d8f35b28a6f649e6f2c17561e09b5fa59eb3a22ad49a891abe911518d6d058318dc1b3b41810cdbee3b59a00362ff045c7c741dd8ad871d2c55
SSDEEP

12288:yjF7wYdYiG7y2d+ztXzZpjMEUPedcSDaDcVD6ZMcmtGF+xFnOVy:xAt1fsEwc5KvKP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Novelcraft_-_A_Minecraft_Visual_Novel.exe

Files

Novelcraft_-_A_Minecraft_Visual_Novel.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 696KB - Virtual size: 696KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ