Cheat Loader[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Cheat Loader.exe
Size

403KB
MD5

47420326252622b597442a13efdeb957
SHA1

fb061eebf9a57b43213289e7c5ea9f8bd0058493
SHA256

8db0970f5058af2c1202831fc7fccad43ac5701b7bb849042659a63ffefbf232
SHA512

c9a161d2cf5c2a324f93261dcb6d6e67b035b30fd14d0bb2924e0274b515f7a5a8a0e2ae5d37ce701008a75d769f598f099a1297324df1210bca5a069416aaa3
SSDEEP

6144:HT8rRIyR9n3gRgNe6VlWT8b9hPgqbG8dg9z3vbBE:GBfPVle8ta9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Cheat Loader.exe

Files

Cheat Loader.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 400KB - Virtual size: 399KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ