SunCheats[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SunCheats.exe
Size

1.6MB
MD5

477094488967e80d71568a0d76c221c6
SHA1

e1ed6993f0ef04daa4d3ae5cea922632fbda02f6
SHA256

215835e8acc958790d5c37ac624b8c6fb561e4f1ec633f42bba5ab42c0c62b6b
SHA512

2625cd7b67ec9d0814d7a2c8fb7e0d79dfb29603a13c4713c751526424317096ed3c6934bc21dd2f2bb2698da9c50d65f3f4f17a1aee51aa8db7000bcaea35d5
SSDEEP

24576:E6sshLltYF/68ehLTwy/szmCQyNTv76R7bmFcH2j4N6ssiLm:EFshhtcinLTf/sHTeFsiy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SunCheats.exe

Files

SunCheats.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\CASPER\Downloads\private\SunCheats_Proje\SunCheats Proje\SlaySystemsClient\obj\Release\SunCheats.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ