XBLAH's Modding Tool[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

XBLAH's Modding Tool.exe
Size

2.5MB
MD5

ea54b1b243993102da1914b86d223653
SHA1

be009d4b72b04e778f698a31dad9c38509a7e96c
SHA256

9e384314f2fc75dfbe1d015d5af741e28754b20562bd669bd3f21ba1ab1339a2
SHA512

a44f13d5c7318cc68aff5bbec030d871a1852e24a282a47183153dc3d54065af5509d207b054a4f1aa17b327aaacdc1dc4de89c40a025d214c86002270369177
SSDEEP

24576:EuLIz54jEPB9oigd9oggUTis/9rhHlKLT:2V4j8Zg7xgGj9VHlK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
XBLAH's Modding Tool.exe

Files

XBLAH's Modding Tool.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Admin\Development\CS\xblah-modding-tool\xblah-modding-tool\obj\Release\XBLAH's Modding Tool.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ