yfga_game[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

yfga_game.exe
Size

822KB
MD5

42ea91a1521e1efc33c242cfc39b399d
SHA1

5c1234a21ec05762ca380cbd529410090567b0a4
SHA256

f1a91dadb121a6fbaef72fb57ce31796f248939659ea6f18255d89937c8dc08a
SHA512

251a41302a47db17d4d5dff1737ac6e5e454e227d94f7843d784a7dfc1a3ccc060e5aa51189077aca4b589b44d2b7adca5fc9adb0efb71da38bb07e1ae57002a
SSDEEP

6144:n/cEoPEMzHkY2QbqbHV7bJ/S6qbrOSMPEM6qCGdCPEMCGdGQT168cJt1678L:xoPp56zZN3PVCGsP4GdTovJtoQL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
yfga_game.exe

Files

yfga_game.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\SerGreen\Source\Repos\Appacker\UnpackerWindowless\obj\Release\UnpackerWindowless.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ