Gamebattles_Credit_Adder[.]exe | Triage

Sharing

General

Target

Gamebattles_Credit_Adder.exe
Size

519KB
MD5

f5b1ed390659aa3f894a576ba49cc232
SHA1

fc26ae14db4fda8e4cba79315d2c3a296cbcc35a
SHA256

914b857e803c19670ce854ab164d5047ede50fca5c3dd66f50afafbfedb6c625
SHA512

6a5d054633baa4b088cd3d3d3c6b94ca1a1bc3494e970caba05b9bb2f783f1ba68372612b7c22a639d8e284f52578a078f0cc07a3abc00d2034a156e163e46e0
SSDEEP

6144:3DvO5hBFSeDMhto8S+L6SESUNLWBq9NWm9NXeAPs2tZE1OvZiqd3nxPnH0U+HM2f:TvOO5m4ISUAqLWsHpZuOvg23Z2HG/H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Gamebattles_Credit_Adder.exe

Files

Gamebattles_Credit_Adder.exe
.exe windows:4 windows x86 arch:x86

Password: infect

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Mr.Levi\Documents\Visual Studio 2008\Projects\Gamebattles phisher\Gamebattles phisher\obj\Debug\Gamebattles phisher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 405KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 181B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ