EldenRingFPSUnlockAndMore_v1[.]1[.]0[.]0[.]exe | Triage

Sharing

General

Target

EldenRingFPSUnlockAndMore_v1.1.0.0.exe
Size

393KB
MD5

1fffda8835e3673aadb418b0fb2cf935
SHA1

de5726a86abd86e80b123f5425857d7ce9b242f0
SHA256

15ee24284cd11c49da02eb2ad1e55bba6c70d5d2ebe85859079872edaffd5a0c
SHA512

6bbd74eca660a80d3375b939cbbc9bcc0a287942e8594129fadf46c12aaa8a1798242966faaca57fc6d79ab1ea6565e23ca652967b24747e61cd942993fde105
SSDEEP

6144:qIw8okGbaLIT8yB2oFpgNTWOTsMFxIT8yB2QFpgvTWOTpMK:68UT8yBfLgNbFFiT8yBNLgvbuK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EldenRingFPSUnlockAndMore_v1.1.0.0.exe

Files

EldenRingFPSUnlockAndMore_v1.1.0.0.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\User\Programmieren\Repos\EldenRingFPSUnlockAndMore\EldenRingFPSUnlockAndMore\obj\x64\Release\EldenRingFPSUnlockAndMore.pdb

Sections

.text
Size: 221KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ