Unlock_All_2020[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Unlock_All_2020.exe
Size

497KB
MD5

01c086456304993d5d979bb697355ed2
SHA1

1b52fa695d87d09e003b1321313778a51e4bee45
SHA256

4775ca942e1d95be12992a527abc7d87aab1666e92fc82c7847f39a675548bb4
SHA512

5b5ead657973d9e593e4cd8863d228d52d01f439b8bcf8890d56940fad7a7aa122fa4da8878a82014317c082d7fb68763d06c5ca9b3259857ba1dba6fb930520
SSDEEP

6144:pz1adANAHafDsGzKz4toG6K+8Kxz1adANAHafbsGzKz4toG6K:nNAHa6gl6dfNAHaigl6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Unlock_All_2020.exe

Files

Unlock_All_2020.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\daema\Documents\Visual Studio 2013\Projects\Mw3_Steam\Mw3_Steam\obj\Debug\Mw3 Stats.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 269KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 227KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ