Tegga_aim[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Tegga_aim.exe
Size

64KB
MD5

18f841965a6adaee571b444d3855bd38
SHA1

a612041439eaf70d6eb5aeb51001d3c673043f1c
SHA256

dea3d0e72334272dd33d170bce364f36f970867631587445e7e2f025452bc740
SHA512

b4e8b33995ce032035e024db3638be949231ee6eb39acf319335a05992f221bc0e497a2c04979a88355501dd42c701532b653854d6d50dc187d9ffb9bbf9467c
SSDEEP

1536:PcouqJ/Nib8wK78N6aHctzq0Ja+jLWlSCTf2LqH:PJFsZIoPHcHYlvTfp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Tegga_aim.exe

Files

Tegga_aim.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

X:\VS\GUI2\GUI2\obj\Release\fortnitehack.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ