Static task
static1
Behavioral task
behavioral1
Sample
Gang X Cheat V4 Free.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
Gang X Cheat V4 Free.exe
Resource
win10v2004-20240419-en
General
-
Target
Gang X Cheat V4 Free.exe
-
Size
65KB
-
MD5
edd63fa620e7b753ebb5c6e2f1fc87f5
-
SHA1
1bfbbbdedae92a6fa0e9427dc1cb37ff13e533ec
-
SHA256
b9710a11ae5f5c8096332a55ccedc0e99d9de92e5019a3ed47bfac2845e86a2d
-
SHA512
c1647cf0b7b6ae95c1d0604fc5fa0cfef6bdc2c46da09f3887e20376a85257785834879740a0887ead7f9a0cea31d3b0e8002316436efd3162a1c0cfa6ab0956
-
SSDEEP
1536:B9TpGsaM99yOvooQS1BQYP4+38sViCyTO6KICTpqKm1:To2eoQOa2NssVi3KICQz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource Gang X Cheat V4 Free.exe
Files
-
Gang X Cheat V4 Free.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
3L$pv7> Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3L$pv7> Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
S5E8F07F Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ