retards[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

retards.exe
Size

762KB
MD5

d8d199e6d34aed92de674c9b2d459091
SHA1

cd92848c1e052b681fccb67409281c6f794a02b2
SHA256

84d234506d25c60adb65389632cf0e3569c1c0e4ace51ebbdce3edd9a2a6de05
SHA512

459e9c960043f1f76740ed638a31fb72adac772540ad000e6fb2ca8ddd27de555a499888934d9c41b1bc73c7d6b5056b72e4f149d41f73c1a8fe298f927ad003
SSDEEP

1536:rsjXIuRmP76b2kgc3GydlYbGBis/EVlAg3Pj14UPW7LxK2kgc3GydlYbGBis/EV9:QYutPfRmWPAPfR8ug

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
retards.exe

Files

retards.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\howl\Desktop\Minecraft-Autoclicker-main\GithubClicker\GithubClicker\obj\Debug\retards.pdb

Sections

.text
Size: 399KB - Virtual size: 398KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ