MoonMan Cheat[.]exe | Triage

Sharing

General

Target

MoonMan Cheat.exe
Size

581KB
MD5

9e229bde34d83bcedf774a5f46c11a47
SHA1

8f1ec4e49231e1f427bcaa294225561507f4e8d7
SHA256

8745a36c4b9642b8388e7fad1e7e16c0999fe0faa274034472ae28f7e9d194de
SHA512

b9cda90cbd01ea77b31e6a7db8316e255e869adfcd17e6a50a9ac00ad214b40d4f9f0b5143600da75e9a2e4ec7b4b4eb46a5a4a2e8fbfde9d4029e7d4bbba4db
SSDEEP

12288:txrXVWxLz92tuDmJNsHJntVvKB2JMYSwN+mpQqW3UQAL8nLEMDNP2AzCfXJQ:PBaH92t5spnvCUJM60ZJn7Dp2AzmX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MoonMan Cheat.exe

Files

MoonMan Cheat.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Visual Studio Proyectos\Visual\repos\TheMoonManCheat\TheMoonManCheat\obj\Release\MoonMan Cheat.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 574KB - Virtual size: 573KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ