Phasmophobia Trainer Setup[.]exe | Triage

Sharing

General

Target

Phasmophobia Trainer Setup.exe
Size

141KB
MD5

99c266ba4a0d7ba401a35f5400a39c70
SHA1

f4d944cf1a22505731cb0c908a8027f16cabeb0d
SHA256

dcd3241d6730d3380680fb83a8a2358b717cc99f2ba0866d2277fcc6f14d173e
SHA512

071e0144989e3791901a1e3a7942150486b30f895382fb91feb1da013bb6a6dabf8f345d8ef0e20093eef05c1c4f44a330868d83d8fe15ea67f5897d0cf9a72f
SSDEEP

3072:Bojm4ILlCI+4COHCyhaEtHZkOpk97oc4ILlCI+4TOHHSafx:Bd+bwaEtHLhiHt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Phasmophobia Trainer Setup.exe

Files

Phasmophobia Trainer Setup.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ