activate cheats[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

activate cheats.exe
Size

6KB
MD5

5fa7c8b896ffc988023dcc5178880898
SHA1

53f8cd8db3d211940e5de792e4e41fcaba9859e5
SHA256

4e53352ac10fbc813cbc847fbeb80efccf797775de1f0f9af28ab8aedab99274
SHA512

ef450ec8c9e45f1f9d9a8c137a4010aea23e68d1060d51fe42a19d9a0e574730a3469272db45bd578732e2b74ae0efea3122af8d83eda3ae64c1eac79d88eab4
SSDEEP

96:E49XepwlBaoCRGBVLR7XEErNbN1/NzNt:EqgsOEUErNb3/n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
activate cheats.exe

Files

activate cheats.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\apsiapina\Desktop\test pw\ST\obj\Debug\ST.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ