Cheat[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Cheat.exe
Size

569KB
MD5

53bd64bd7a589af1d6083e8aea963292
SHA1

7de3bd6fef4156ce4f84bea77266d1ed62860b95
SHA256

350069660218f96cab579286cd9c57e767d075254e69c267747a44452c03ef85
SHA512

3d5bea065837b567757901df2ac06bb0069b2e9fdeb2ecdfa587c2ccbe8a33e4037028027e255ae0bdc52accfb8b59c2130161c09ea5c64aa63838649a2361d1
SSDEEP

6144:HyQHU7ndSMox4HTi5p9we+zJVtVle6VlWT8b9WnTYBjvau28dmT18bixLi4tb98:HdHnlA2p9CTtVlPVle8TjvaZW4tbS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Cheat.exe

Files

Cheat.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 566KB - Virtual size: 565KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ