Cs2SharpV1[.]2_[unknowncheats[.]me]_[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Cs2SharpV1.2_[unknowncheats.me]_.exe
Size

1.1MB
MD5

f5e65c8d3478730e6ca401c5842dfdb3
SHA1

b73735a879906fe4ba0ea0c2ba9589a15daae525
SHA256

f1fdf65bf9d65d1c091d486a0d3090568865a9716d02902a34df36cdbbf59a16
SHA512

bc7a67ed62e7e0f50851c7d3f99cba21a9613fe4fbf6f2b148f655f814278cf133b406a0b9942b1fe6162d846869c9d4524815cebddfb6d968b2cb90af5a92b9
SSDEEP

12288:sjiGXbRF9pt7f8weyVMRGe/Mg6sXdCC8tXZBpUD2FgviBM7O9FhUzgRnx:ib9wB9Rx/Mg6sArRpUD2FgviBM7O9vx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Cs2SharpV1.2_[unknowncheats.me]_.exe

Files

Cs2SharpV1.2_[unknowncheats.me]_.exe
.exe windows:4 windows x64

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ