Cheat[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Cheat.exe
Size

558KB
MD5

a2d3efbbf1a8a92eee0f6c9bb8d303ef
SHA1

8595a70d015750a027b038add02b8b1231925946
SHA256

d0775454210e7441c7b9f30e35a3439a07e2a86ebeb87863e552261cf61bc068
SHA512

30ce6d0f9972a78f510cb990299f7ef5839c4a1fba76b96b3598261d7e8183dfb4b4b64cc3b611986a79862cb30235b3d400eb1841eb833bbac767ce3bf8260c
SSDEEP

12288:aw5Jdd1uJ8THf4wz15mIme21HvXFpL7TCBVFV5HDVgW/XHky4u:xf1uO75hydpLP0VFXxb/XHkyz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Cheat.exe

Files

Cheat.exe
.exe windows:4 windows x86 arch:x86

Password: pakistanos123

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 555KB - Virtual size: 555KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ