ChallengesAreEvil[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ChallengesAreEvil.exe
Size

318KB
MD5

cbfe389992ee326ab233c9f676869bbb
SHA1

fe9bf219995b057e3e95a536222649dfb395c89e
SHA256

3f6be6db2b161fbd67d65fba3ed3f801fd1afe9b269f255dfdca82a774a39393
SHA512

eb6d6a8c0366c431760657f8291fd2805d5f1dc7dc8f604b0b9eda1601fe5aad50798a6b889f17cdcd76bb2bc8d0b4e5dd16a6543226b6bb011a92d7959545f6
SSDEEP

6144:gYnnNED4IdwMaipdcmJOkuDisYW0pHx7axHUfVfhZR3MM+SYRQlsQc0EJrBKI/O5:dnnNED4IdwMaipdcmJOkuOsYWaH9fR3G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ChallengesAreEvil.exe

Files

ChallengesAreEvil.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Admin1\RiderProjects\ChallengesAreEvil\ChallengesAreEvil\obj\Release\ChallengesAreEvil.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 298KB - Virtual size: 297KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ