MassEffectAndromedaTrial[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

MassEffectAndromedaTrial.exe
Size

72.1MB
MD5

1abe73678642e467c4b9e7a3a0a616ac
SHA1

0e50fed7293e370a76bec9be84943d9b51afdd35
SHA256

8dec284cdcab6defe0cb51c6b3d6ee01f0e964d15d3284ff36de05c6cc1cff40
SHA512

ca03f6cd47b49eb6290635701f984b1eea740160be61e3635c99936ffcd5e111cb2a56ed6dda6d8ecf1c324be079cca6c540c512fa713793728c344020050ac2
SSDEEP

1572864:GWlO+U0ydBY9PRtG/jtcl1Ra2tlOckp/enwk:GL0y89PRtG/6l1wQlOAnw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MassEffectAndromedaTrial.exe

Files

MassEffectAndromedaTrial.exe
.exe windows:6 windows x64 arch:x64

Password: 123

33870eed5082282b46a3558cb89670a1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\MEA\rc\TnT\Local\Bin\Contact\Win64-Trial\retail\Contact.Main_Win64_retail_Trial.pdb

Imports

core/activation64

ord100

Exports

Exports

ANTITAMPER_SPOTCHECK_CODEMARKER
ANTITAMPER_TESTVALUE_CODEMARKER
ANTITAMPER_TRIGGER_CODEMARKER
AmdPowerXpressRequestHighPerformance
BiLinearInterpolate
ComputeUtility
FutureTrajMotionDataDistance
IsGameRuntime
JointAnglesMotionStateDistance
JointPosMotionDataDistance
MultiLinearInterpolate
NvOptimusEnablement

Sections

.text
Size: 40.4MB - Virtual size: 40.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ctr
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10.2MB - Virtual size: 10.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10.8MB - Virtual size: 14.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

typeinfo
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fieldinf
Size: 804KB - Virtual size: 804KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 737B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 402KB - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ooadk
Size: 574KB - Virtual size: 574KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ooa
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: 123

33870eed5082282b46a3558cb89670a1

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

core/activation64

Exports

Exports

Sections

.text Size: 40.4MB - Virtual size: 40.4MB

ctr Size: 3.1MB - Virtual size: 3.1MB

.rdata Size: 10.2MB - Virtual size: 10.2MB

.data Size: 10.8MB - Virtual size: 14.9MB

.pdata Size: 1.9MB - Virtual size: 1.9MB

.rodata Size: 3KB - Virtual size: 3KB

_RDATA Size: 53KB - Virtual size: 53KB

typeinfo Size: 2.9MB - Virtual size: 2.9MB

fieldinf Size: 804KB - Virtual size: 804KB

.tls Size: 1024B - Virtual size: 737B

.rsrc Size: 402KB - Virtual size: 402KB

.reloc Size: 1.0MB - Virtual size: 1.0MB

.ooadk Size: 574KB - Virtual size: 574KB

.ooa Size: 2KB - Virtual size: 1KB

.text
Size: 40.4MB - Virtual size: 40.4MB

ctr
Size: 3.1MB - Virtual size: 3.1MB

.rdata
Size: 10.2MB - Virtual size: 10.2MB

.data
Size: 10.8MB - Virtual size: 14.9MB

.pdata
Size: 1.9MB - Virtual size: 1.9MB

.rodata
Size: 3KB - Virtual size: 3KB

_RDATA
Size: 53KB - Virtual size: 53KB

typeinfo
Size: 2.9MB - Virtual size: 2.9MB

fieldinf
Size: 804KB - Virtual size: 804KB

.tls
Size: 1024B - Virtual size: 737B

.rsrc
Size: 402KB - Virtual size: 402KB

.reloc
Size: 1.0MB - Virtual size: 1.0MB

.ooadk
Size: 574KB - Virtual size: 574KB

.ooa
Size: 2KB - Virtual size: 1KB