AVPGameProtect[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AVPGameProtect.exe
Size

2.0MB
MD5

4faa9fb644625d4a981046da6b1325c8
SHA1

5dc5bc7e94a1ae8439b18a1673c3a3e1fa322282
SHA256

069b6193b02fcd10aba3e04bda0bdcd1cc746c05324bf65ac3120770a3f56854
SHA512

71dee5e3124ded6d5f66c155141b05d92610320c14c8578023379b4daf308433e5fff29694954cd8093a895e5701d84ac48669820b6aadbd334c37da77a14a63
SSDEEP

24576:hFoaYX9Tm57QqtXKb4EOUTr7iSBvEv4qzkiQG3GI+IfeJzaLjl/91fdVXRK/2DZq:Dox28GSWkG3CIfjjp7E2ra7JPydO/f9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AVPGameProtect.exe

Files

AVPGameProtect.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ