59a213ca148658dea3e2c32f77cc2e1e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59a213ca148658dea3e2c32f77cc2e1e
Size

19KB
MD5

59a213ca148658dea3e2c32f77cc2e1e
SHA1

25508777c1f3aec4ba617d2e2dd051f812aeb426
SHA256

56d61b759f4168e79d6ac0d84e851748e7033fc4342fea4c6561333d8d133b9d
SHA512

0eb913ad1a4754c96314437c715f5be9ad0661bc238ef1c2c2d278aab4c97804e62d4a496417adb7057b97dad771cfe8fb3da3b0b2a0beda922ac0c53472ae8d
SSDEEP

384:kui2UFdEuHXh8I2pzgGXe1+4UXFLxR5j5jeuMDWb6A69VLrnTS676uo:pP4R3hChgGOE4U1LxRCDWb6A69VCYw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/CrossfireHacksUndSo Injector V1.3.exe

Files

59a213ca148658dea3e2c32f77cc2e1e
.rar
CrossfireHacksUndSo Injector V1.3.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 165B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ