Static task
static1
Behavioral task
behavioral1
Sample
TheHunterCOTW+12Tr_LNG.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
TheHunterCOTW+12Tr_LNG.exe
Resource
win10v2004-20231215-en
General
-
Target
51642568fd92cfb981dc0aa877c608da
-
Size
1.9MB
-
MD5
51642568fd92cfb981dc0aa877c608da
-
SHA1
2645692e4fa0144a3bc9d740fefe225f7ab1b66e
-
SHA256
0ed746211e393b0866bad61ba28b9edd0343e23b68c18ec14de7402dc603a0e5
-
SHA512
3c2c4fb9aceaacf37eb1dd1a0473eda668cbcaf132557e760e2f626769810762d2cd28ca8527c8bae216ac454697f408eee05ff8666cff7fca24117f63f9814f
-
SSDEEP
49152:d4D0UktpyHhmMTQSKCY0kzaZtU1BueJYr4lfCMxehya0GQ:uyuhmMEFwtEgalTwH09
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/TheHunterCOTW+12Tr_LNG.exe
Files
-
51642568fd92cfb981dc0aa877c608da.rar
-
theHunter Call of the Wild Trainer +12 v1.32 Update 26.03.2019 {LinGon}/theHunter Call of the Wild Trainer +12 v1.32 Update 26.03.2019 {LinGon}.rar.rar
-
TheHunterCOTW+12Tr_LNG - INFO.txt
-
TheHunterCOTW+12Tr_LNG.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
VERY IMPORTANT!.txt