4ff0e5ae6c8f8edf533c7e07719ef64cb8c239143691915a1f1fb601a6c4cff3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ff0e5ae6c8f8edf533c7e07719ef64cb8c239143691915a1f1fb601a6c4cff3
Size

253KB
MD5

31c2ecacf3428cd48c193adf88ff4309
SHA1

e615bd84289d9574819feb6ee78346c15383eb5f
SHA256

4ff0e5ae6c8f8edf533c7e07719ef64cb8c239143691915a1f1fb601a6c4cff3
SHA512

3eb9167bb41049d581b5aec6b2339c69c70aab1cc7ca6fd256a76a50e0bbbb3bcdbd40396cd1f85368e9bdbce429c664598d3f172dd00e652126db9d85d20bf1
SSDEEP

6144:T3nzPi8QazbLnTBL5koygxKtgxK6gxKxKb5r7aRkFBPuxIx:DnzPxzbDTN6BaWaJaDboRkFvx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ff0e5ae6c8f8edf533c7e07719ef64cb8c239143691915a1f1fb601a6c4cff3

Files

4ff0e5ae6c8f8edf533c7e07719ef64cb8c239143691915a1f1fb601a6c4cff3
.exe windows:5 windows x86 arch:x86

2c97a753b7a8a2cdcf24d21aae6b1f91

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

qqx52_gamebase

ord1

Exports

Exports

NvOptimusEnablement
destroyEngine
endApplication
initEngine
injectMessage
startApplication
update

Sections

.text
Size: 49KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tvm0
Size: 27KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ace
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE