my fav[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

my fav.exe
Size

7KB
MD5

be73d5c70bc62690e12806bd6a7f21df
SHA1

8e697d49583ffa4d809aca7d05d7e9fa8486db30
SHA256

69d7f3ca822b3e90b3afccea1ccea054d25da5b02125e1aa80eaa8fdcc8b0ec9
SHA512

9cb665b86a7bda53a6a9fc4605c23632b87e97df816a4b530b6ac9546dd6b31fa2de2b8fd816e666913c4c5588034e338747b0e326d587217c8a34a2eaa3bbf2
SSDEEP

192:7gASu5FATK0OleP3eBHt5vhuZPo+hV4seiRUeO:77sTnOlW3QAZQ6V1V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
my fav.exe

Files

my fav.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\kylum\source\repos\Fortnite skin unlocker with aimbot\Fortnite skin unlocker with aimbot\obj\Debug\Fortnite skin unlocker with aimbot.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ