yfga_game[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

yfga_game.exe
Size

688KB
MD5

fa3b66e24162a4a71e5e2d0ff9433989
SHA1

2f1b6e0e3007c1e69469621d7d0a0a90b6a04ab9
SHA256

7b1526adec001713656dbc8129183e81686ce49e3a9b6332a8477572488ad0bb
SHA512

4aeb411676e7a55aea30cdd431995ac557b27ab1aa606f4e58dd9595701dd094caef0ff21e67538f206e5a19dcec08fb978f6d27f092d4a6815699f2fb23e83b
SSDEEP

6144:T/cEoPEMzHkY2QbqbHV7bJ/S6qbrO1MPEM6qCGdCPEMCGdt:9oPp56zZNyPVCGsP4Gv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
yfga_game.exe

Files

yfga_game.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\SerGreen\Source\Repos\Appacker\UnpackerWindowless\obj\Release\UnpackerWindowless.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ