[FreeTP[.]Org]Lethal-Company-Multiplayer-Fix-Online[.]exe | Triage

Resubmissions

09/01/2024, 14:55

240109-salx7aeah7 8

09/01/2024, 14:51

240109-r8lveacfbr 8

Sharing

Copy URL Twitter E-mail

General

Target

[FreeTP.Org]Lethal-Company-Multiplayer-Fix-Online.exe
Size

30.8MB
MD5

d628780b04355640f4c542e3fe78b627
SHA1

5e10474c7d3f16cd4a81486ff57f5d38e3a8fe24
SHA256

c230ad790ecb6a89d5ace729ca8f1ff7c73479c5e9b5244385bb74f1618b9c3d
SHA512

2774c882b4e258c24db61de062ad976dd9094d7bb91b81ca95d10f8d97ce97dc0dbe7eec248c3993d3ecc81c8ecdf1936556a17ac157680a4179eba995f2fc4e
SSDEEP

49152:Z6M5/2ctOTysyfahlEFA4izgyFf4QW8Ho/h3IzLCM/d/:Z6UnsAA4i1QeOqzLC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
[FreeTP.Org]Lethal-Company-Multiplayer-Fix-Online.exe

Files

[FreeTP.Org]Lethal-Company-Multiplayer-Fix-Online.exe
.exe windows:1 windows x86 arch:x86

140094f13383e9ae168c4b35b6af3356

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
ExitProcess
GetComputerNameA
GetModuleFileNameA
GetModuleHandleW
GetProcAddress
SetErrorMode
Sleep
VirtualAllocExNuma

shlwapi

PathFindFileNameA

msvcrt

malloc
free
memset
strcmp
_strcmpi
strcpy

Sections

.text
Size: 30.8MB - Virtual size: 30.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ