Static task
static1
Behavioral task
behavioral1
Sample
Sniper Ghost Warrior 3 v1.0-v1.8 Plus +19 Trainer.exe
Resource
win11-20240221-en
General
-
Target
Sniper Ghost Warrior 3 v1.0-v1.8 Plus +19 Trainer.exe
-
Size
4.6MB
-
MD5
c33137645e9c07d8c1cd784a2a43fd60
-
SHA1
11207031903a0029f12c4c29a67edfd56e36808b
-
SHA256
19e1475c82887998b755ebf47d270706ce4d14125a03f39ad7b52dd70c1d8100
-
SHA512
e5468b5002866c6a3d5c92f83d1ab8f7e6a980c9c100fe3b1833ee26613d9853c8f0bd91d148c19736c674ba5c2fd9dcc784ae9c1b553de1639698dc26d8ab8f
-
SSDEEP
98304:cQXoMxctm24cUG2yW07wO+QnQuE3Xa3Ol5wCP7SkThlgW/K:aiem212vOQja3O/wCIW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Sniper Ghost Warrior 3 v1.0-v1.8 Plus +19 Trainer.exe
Files
-
Sniper Ghost Warrior 3 v1.0-v1.8 Plus +19 Trainer.exe.exe windows:4 windows x64 arch:x64
dc12932426806b6b47a373d7ae42c21d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
lstrcpy
mscoree
_CorExeMain
Sections
Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cuncmehb Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
txmxhbjn Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE