Static task
static1
Behavioral task
behavioral1
Sample
HWID_Changer_unknowncheats.me_.exe
Resource
win10v2004-20231020-en
General
-
Target
HWID_Changer_unknowncheats.me_.exe
-
Size
506KB
-
MD5
74f6f7f56fab64ae4a77ed8501823345
-
SHA1
c4effe79dfcd98d23a80129ff90e4dbb4f435e86
-
SHA256
a4264eb860523beb9f1d7424b4974c03f95407482f719833fc92e18e540522ad
-
SHA512
fee6b1605e790cf21e3acff1005192333f615fa9868e347273d1e1f08afa6ecda175fd5cba51d9466bab3bc763262f841335837eecc3950ca14dd64af1ebf79a
-
SSDEEP
3072:8kqU4HmNgztxfJsgSPJHh+JCnYjZK696HI2k8FgBeIVYZXKk4vlI8jdyj9Y:8kqU4G+NsgSBB+8WZF2re0bXklm9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HWID_Changer_unknowncheats.me_.exe
Files
-
HWID_Changer_unknowncheats.me_.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 349KB - Virtual size: 349KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ