Candystand Miniature Golf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Candystand Miniature Golf.exe
Size

13.2MB
MD5

3e53f6c089b4f9755afc2dcb09036c08
SHA1

0c9aec3a939069dd25f5fca136131d1eccb1dbd0
SHA256

1f8d49833c64495195ff060dafd7a41673a94ca936172b8e0cc60dd9f13d2fc0
SHA512

041124ebdac33c9540ca8f32cd574d985a5d584d1e254054986b5433a73785a71f9f657252df31529bc54eabd0d4cb9fb033041106a7cc4239d2eaaf862d7c63
SSDEEP

196608:ECztZgv4mvQslvRioFEdxq0WssJcbrqNQ3DmXqXID:ECncjofHdc0nsKHDmXqY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Candystand Miniature Golf.exe

Files

Candystand Miniature Golf.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.enigma1
Size: 12.9MB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE