0e8bf880d6d43613471cd86ad647c00d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e8bf880d6d43613471cd86ad647c00d
Size

817KB
MD5

0e8bf880d6d43613471cd86ad647c00d
SHA1

5fa7118d052a90ef289ee3d9c6640fd1d2f5519a
SHA256

eaefab359c7729b9b00120a0dc78ed09aac976cc53d65abcb9d583fefb3ab4d4
SHA512

532cac451c78752c976a0f3c883651e653596c18dd05cb3e57a075d3f420be17b4594398133e50d907b0eca41a63d0a6339c5a4a4cc93cdf1d8bdc0359088456
SSDEEP

24576:lEIsjBjCseC+38NaCrvdB6l06iLE8W8bS+:eVH7+38sOtR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Prince of Persia The Forgotten Sands v1.0 + 6 Trainer.exe

Files

0e8bf880d6d43613471cd86ad647c00d
.rar
Prince of Persia The Forgotten Sands v1.0 + 6 Trainer.exe
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

CODE
Size: 793KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
file verification.txt
h4x0r.nfo