start_protected_game.pdb
Static task
static1
1 signatures
General
-
Target
start_protected_game.exe
-
Size
400KB
-
MD5
7e7f44ed91937c31caaa29fbb973d47b
-
SHA1
110f6bd20702b2031f7670f218cb646ce2a5819e
-
SHA256
8e6ebd8c3e64ffa3398d086f201ef6ae3ffc1f115fb41a345f2cf6670a265f57
-
SHA512
87d78c80f20ad229fb22c53fada99a9c0ae4239fde1c83d0ee0ff3fb8e7944231d955cbb62233ede89ef80b33e16f45a7272f397fbc47482785dee53b39bfbe9
-
SSDEEP
12288:4fDtjM3gjqih+q+5eWXDTI7LlbvHITTddz+:wtg3gjqiwq+55Cl7Gj6
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource start_protected_game.exe
Files
-
start_protected_game.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 395KB - Virtual size: 395KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE