xcheats[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

xcheats.exe
Size

664KB
MD5

71015062a99c2e8083cf2cf467407bf4
SHA1

eb62e10d3c23405f162edc4c42554e824742aa45
SHA256

8bbb330d841b9bef13e580e219dc4de318a37a7efbefd09e77f1ec0a5f196c25
SHA512

4c47240e8187d83b44e7992ee6f97ee4bd4e1f54f81a33b1016bae7ff4c0a25da6e86bf7862c79f258a16e72e91e9801c01919b1a5e390ab3d98ed13f1e3ca15
SSDEEP

12288:lxAZoYDdVFHr2smo5kw4I2ji85EUULwR0ybdUhpS/ekgaXBEQL0C44OYUVmjwebP:kWYDdVFMXI6wPE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
xcheats.exe

Files

xcheats.exe
.exe windows:4 windows x86 arch:x86

Password: xcheats

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 661KB - Virtual size: 660KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ