C:\Users\Danny\source\repos\L4D2 Toolbox\L4D2 Toolbox\obj\x86\Release\L4D2 Toolbox.pdb
Static task
static1
Behavioral task
behavioral1
Sample
L4D2 Toolbox 1.2/L4D2 Toolbox.exe
Resource
win10-20240214-en
General
-
Target
L4D2 Toolbox 1.2_[unknowncheats.me]_.rar
-
Size
92KB
-
MD5
d1d80e2b7d455b82838ab1d94d455bd7
-
SHA1
7f4ec4f6a2e95b657d91e2c5ef3cdd72ab967ef0
-
SHA256
563e5c95a82cf25ed361d4aeef91c98719086191bd41a8f90e45a07f85ac6d71
-
SHA512
f67ebb3096b8616e628a6c884c958b4c07e215e1c8867abc55767f3f019d8a3af531bde86403e22e95935fdb8d8907aa8b80baabe5ec0788018c1817d9afff61
-
SSDEEP
1536:uBpLvQZFURjZ1djkYxa/St2jq87YiUAfyrXTiGdUz7VDctS9jvFVr78cGG6eO3Ev:aJQZFUL1doY9twqIYirETiGUtOS9BlLL
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/L4D2 Toolbox 1.2/L4D2 Toolbox.exe unpack001/L4D2 Toolbox 1.2/Memory.dll
Files
-
L4D2 Toolbox 1.2_[unknowncheats.me]_.rar.rar
-
L4D2 Toolbox 1.2/L4D2 Toolbox.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 159KB - Virtual size: 159KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
L4D2 Toolbox 1.2/Memory.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
C:\Users\newgm\Documents\git\memory.dll\Memory\obj\Debug\Memory.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
L4D2 Toolbox 1.2/README!.txt