86e0874f7cf742d751710c70fb2309ff | Triage

Sharing

General

Target

86e0874f7cf742d751710c70fb2309ff
Size

11.0MB
MD5

86e0874f7cf742d751710c70fb2309ff
SHA1

8f931e7ce2591babd8beb5e23e11fa1c77429056
SHA256

ca927ebb74bc530d46d1a01aab425d0bc06f69501850f507b5285602a73e1eb5
SHA512

eea522792dbd289ce46b773b58bf41b670181ff39fabefb1d0d37a1f26680bd2676f4dafae21d51f11ac77cfd441277df700bfaab898aa4ef0b87ebd79f652e6
SSDEEP

98304:ixV7TxV77wxV79KI/uqxV7YuxV7Ojjjj6hxV7XTxV7:i/wJKcsu5zT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86e0874f7cf742d751710c70fb2309ff

Files

86e0874f7cf742d751710c70fb2309ff
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Przemek K\Documents\Visual Studio 2010\Projects\WindowsApplication8\WindowsApplication8\obj\x86\Debug\Cyberpunk 2077.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9.9MB - Virtual size: 9.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ