SecuriteInfo[.]com[.]Trojan[.]MSIL[.]Gamehack[.]25135[.]27571[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.MSIL.Gamehack.25135.27571.exe
Size

9KB
MD5

22fe0407e602f61e91ec73132430adff
SHA1

13e36f419f15010ca665e7836eee63ae02465c94
SHA256

c47f09324102a16f35f4e96aa33e8948a04847141f18de456f379029908e528d
SHA512

6dc09bfbf0572930fe04c3296af9f14fe8c7f9113b3b0f368538c2c3c098fd984d449d64d40ee9f99aba4f503803f89c334f8826be53a5b1d1a80e32689866a5
SSDEEP

192:d6RCbQYjg5hFdjD4Yo1SuV5Ztps1HScIGrIftn:0RCbQYjg5hFhD4jDjps1Hhcft

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.MSIL.Gamehack.25135.27571.exe

Files

SecuriteInfo.com.Trojan.MSIL.Gamehack.25135.27571.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Chris\source\repos\Lua Executor\obj\Debug\Lua Executor.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ