PGE[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PGE.zip
Size

1017KB
MD5

9339d6cbefa37c16d2585ae2ca04fa03
SHA1

a127586de36000e4ce8175ca26d8d381a8ae8d0d
SHA256

1cc66d72531d94a9c918ca4543f95e48840ff66ac0690d719b1d13153e99b0e1
SHA512

9c4e63914ccb01adb1b3758ced0e8b2a7f755efc933b1d1c07bbe2278b3802e30a8f9a3260581f308acf45ef6069557f9e8626b44226ae3192aa3e5f8f8739e7
SSDEEP

12288:tyDQ4eAQX5301G1Z/ZivvZZzWtUX6ZsDL+PawCBX5qt5xYoqkVldfB6d89iX7VSd:L4xQD1Z/ZiZZzAUKCDYckxp+lVSDmVev

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PGE/PokemonGameEditor.exe

Files

PGE.zip
.zip
PGE/GBAPGESettings.ini
PGE/LICENSE
PGE/PokemonGameEditor.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Github\PokemonGameEditor\GBAPokemonGameEditor\obj\x86\Debug\PokemonGameEditor.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PGE/README.md
PGE/img/BattlePreviewBackground.png
.png
PGE/img/BattlePreviewShadow.png
.png
PGE/img/EMPokedexSize.png
.png
PGE/img/FRPokedexSize.png
.png
PGE/ini/roms.ini
PGE/txt/PGEAttackEffects.txt
PGE/txt/PGEHabitats.txt
PGE/txt/PGENatures.txt
PGE/txt/PGETypeList.txt