c4e040943c49c74ddfe195c28f39a4c4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4e040943c49c74ddfe195c28f39a4c4
Size

954KB
MD5

c4e040943c49c74ddfe195c28f39a4c4
SHA1

e9ffcf5aec4b90e1e24948965dfcac1ce3edffea
SHA256

c8354269f4110ace41882a90b1f5a67d926be52686143f2710a8f4e098083095
SHA512

60704536834f58ae91ef2ed09116921343b1a19a5fcb93ebf2f5ed94079884d660a8cc7f39d1375ac23e51a319440304489ae41d7185bd0a2863020b12e0ad8d
SSDEEP

12288:iJOzX3/QuK9ogDsnoK8KTxvJGrTTxNzTEzj:iJOz/OJ7Fj/EH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4e040943c49c74ddfe195c28f39a4c4

Files

c4e040943c49c74ddfe195c28f39a4c4
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Cyb3r SteamCMD GUI.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 790KB - Virtual size: 790KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ