SecuriteInfo[.]com[.]PUA[.]GameHack[.]31930[.]11450 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.PUA.GameHack.31930.11450
Size

82KB
MD5

b8b10fd23dc4ac3adbc03927bb8fcb92
SHA1

a945abad06d46e21b9747305be1f4ba2975ce5e8
SHA256

dfb23c65930ed14a74658117a1fe7da5dc1e405b8c18fdcea08cd76a35277f1a
SHA512

75344d898e66f8287d55fb4ac395323af4cb49bc49b5e33c63c06297af742f0d1075a181f07640cc30741cfac7823b75844276b8e9b3f649e562bf277b76fed7
SSDEEP

1536:WvPhBV1Ls2mfabERhZ+o1dGWKGzi6/lC+06iUUbsvuDCBVUH5ur:WvJBV1Ls2mfamv+o1dGWKGZt8dbsCCrv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.PUA.GameHack.31930.11450

Files

SecuriteInfo.com.PUA.GameHack.31930.11450
.dll windows:4 windows x86 arch:x86

24a9d698157614300b4f12a31e0a92f1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

crtdll

memset

kernel32

HeapCreate
HeapDestroy
ExitProcess
GetModuleHandleA

Sections

.code
Size: 512B - Virtual size: 143B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 30B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ