PCVR-Rookie[.]exe | Triage

Sharing

General

Target

PCVR-Rookie.exe
Size

920KB
MD5

7e660168665d26cd71ed031bbe6d76b7
SHA1

ea90944f7f589f92d0322c4e3eb4943cf449fe5f
SHA256

9f71f0c21498c7e2957e8ba80bddee5ac53c33e45fa2fb6d93c661955c3a318c
SHA512

795a14806a57f82efdd6c6928fe54bacbad7d128b14aa931979f0bb1b3dddc95e15eb8dbf5fa05031431337bccfd4f70851703622c2f7aaddaab838afeecad78
SSDEEP

6144:n4lCyKgGScEOX+NuM3uBJgUpL8SNFDu/O63hGSb/DB5pr0+UTsWkef1XwxQ1GA/L:nrEJuHp5bu9TlLfUTdwq1hyiDyTO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PCVR-Rookie.exe

Files

PCVR-Rookie.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Sideloader\Rookie-PCVR.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 516KB - Virtual size: 516KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 403KB - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ