Free Skinchanger by [.]exe | Triage

Sharing

General

Target

Free Skinchanger by .exe
Size

10.8MB
MD5

89d924c09797e784a4c4b9258f63d30d
SHA1

e2a3482a93f3b1c5ffcb434fc83569a8ed5e0135
SHA256

5d958407dbf9792b8637e82e3ca41554aa1dbda9a9bbd775a109a0d155c8e841
SHA512

a7ad67e9545f2e2fb95eb96cb47006ff90980d183aa888991c66717d0dbd5cd83b096866490154a47436c0671c46f04400a41e02446586e3003d21ad94a8b031
SSDEEP

196608:LNDOsefRpRLkgkmmTDN4QHfviMI4Qq+gCxipkdjjBHYMw:LNDb6PpKi6Iq+MqdXB7w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

Free Skinchanger by .exe

Files

Free Skinchanger by .exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Proect Cheats\Free Skinchanger by Neles\Free Skinchanger by Neles\obj\Debug\Free Skinchanger by Neles.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10.6MB - Virtual size: 10.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ