DevilishCheatsInstaller[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DevilishCheatsInstaller.exe
Size

518KB
MD5

e37246e1cf9d3e7ac33c57f03d494670
SHA1

ed93e2151463687d9a3ecef7b635c51489e5a5ce
SHA256

54a413b5afa290e9cffd76d5f11cb456e408b7f9cad1ad0312664407c2686974
SHA512

fb1cfc534199c9d993229ee878e7fe68e3a19a899c07c8a9768d25257893a953f11eb4051062e8f6e4cc5e82c70f59d0ea14e6b57829b96a0bebba162f1ab31d
SSDEEP

12288:k7Qsa/0gcEi153JADLiRzp4/9CaN0gcEi152JADLiRzp:dsa/0gcrzmDLupICaN0gcrzvDLup

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DevilishCheatsInstaller.exe

Files

DevilishCheatsInstaller.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\chill\source\repos\DevilishCheatsInstaller\obj\Debug\DevilishCheatsInstaller.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 262KB - Virtual size: 261KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 255KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ