C:\Users\Alexh\OneDrive\Desktop\code\C#\forvlone\forvlone\obj\Debug\forvlone.pdb
Static task
static1
Behavioral task
behavioral1
Sample
SapphireCheat.exe
Resource
win10-20240404-en
General
-
Target
SapphireCheat.exe
-
Size
5KB
-
MD5
331aa819babbf8fc382d20de83a58bd0
-
SHA1
c2ad8938797d8de90ace07c3c40d369210e788f8
-
SHA256
5cdf5eba807579ba5d22aea46bfbcbcbbeabfe1e7a348cb808dd2e572ec19cde
-
SHA512
8568660de1a19bf3fd3409751d1333855821bf5d1f23c94cdf0ab29485859cc796002f8d233f7e8b3be50968c825cfa4a1254247910e29d6114304237d6220c9
-
SSDEEP
48:6uOYmUBgZdsw++50pzHhN8xEEwNMhJ0b9DHH5ErVT+VB1K7qqGGECta1lWIBFovY:4YKjGNhN8HE5ErVyVB1Qjy4pzNt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SapphireCheat.exe
Files
-
SapphireCheat.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ