a[.]rar | Triage

Sharing

General

Target

a.rar
Size

11KB
MD5

dacb33fe4b51f6ab0a1a45c54bcaf296
SHA1

97a2632cf08092e500904e8a932a20f2a4176216
SHA256

c05e7e522684cf7800fa9aaceca5316ad62f52da10c55507618f1690b32e416c
SHA512

3af8f6f802861ed115706f5a6918e256ec3114a29b26d3b84dcc01871f2da6998095090b2c94c14a8216ef97f35f52e4583022574320b47387c42e0fb22191df
SSDEEP

192:3HCk5bDxxztnX8500Ymcrz4GZFVO95fmVwUsotM5URoHEHrbILRmFbi54T:3Hz5JxNXK00Yr4MFhqUBCULqGiU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/CSGOInjector.exe

Files

a.rar
.rar
CSGOInjector.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\servet\Desktop\CSGOInjector-master\CSGOInjector\obj\Debug\CSGOInjector.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CSGOInjector.exe.config
CSGOInjector.pdb