The Notorious Cheat[.]exe | Triage

Resubmissions

24/02/2024, 16:45

240224-t9fqwshe5t 3

24/02/2024, 16:40

240224-t6z1csgf63 3

Sharing

Copy URL Twitter E-mail

General

Target

The Notorious Cheat.exe
Size

5.7MB
MD5

48e583ce4e748d071aa1af5ad6ebf7e7
SHA1

48f7d4f8f970c6f8834a4dbf015bbd451af3af72
SHA256

d0991325ba0da2b82cff78703f42bff2d3071f9fe305835d6cd113327c3d0a54
SHA512

eec5686f66e3155ffcbd75599221eb13b2b3120fcceb34e2a40c8085a97f1bcaa1bd206d1890968f9652251a8419f5221b69ce9ac951e92c35c52848f9795618
SSDEEP

98304:k0QxQs9MDxqo1zT73uAX/CfxlezcrBaOcxWaOcxVSWanri5hNPE1U/YLCDWY:JQxQmxUvj9/CJldtaOTaOWthN8f2DT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
The Notorious Cheat.exe

Files

The Notorious Cheat.exe
.exe windows:4 windows x86 arch:x86

Password: 123

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Visual Studio Proyectos\Visual\Notorious\Notorious\obj\Release\The Notorious Cheat.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ