d429d48c692f3a08bfff73e2c39e137e | Triage

Sharing

General

Target

d429d48c692f3a08bfff73e2c39e137e
Size

953KB
MD5

d429d48c692f3a08bfff73e2c39e137e
SHA1

a483d5d4529f97b877a567fa65422b2fd7cd1d8a
SHA256

478816e807280fc0e9638a80732be67fac5b506f3eec02fc20e3b4e3ade855e7
SHA512

dad2fdb85f3a9f29989ae699697b971661bbbdd5459aff0a797cbc058540a0811998b7a6c601863de8b4951df7307892dbd46ae62031882e35824c42ddddde9d
SSDEEP

12288:k6rvXwiJ68FogDsnoK8KTxvBTxNzTCzj:kw/R68R7G/CH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d429d48c692f3a08bfff73e2c39e137e

Files

d429d48c692f3a08bfff73e2c39e137e
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Cyb3r SteamCMD GUI.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 790KB - Virtual size: 789KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ