6d6e88f00680a8c01d1bf4ab04cd62670739dffa20ccf78c47ad71736b325a69 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d6e88f00680a8c01d1bf4ab04cd62670739dffa20ccf78c47ad71736b325a69
Size

580KB
MD5

d8c09f4528dd20d8cffd2bc1fbe58adf
SHA1

6dbaccb94a2388f83da1326259010646b8a17cdb
SHA256

6d6e88f00680a8c01d1bf4ab04cd62670739dffa20ccf78c47ad71736b325a69
SHA512

fc0083605b188d29d972221a95d437bcff314fbee9e47865780fd7ea519cb27fc54ef8a524329528b763142154a6e78e910edc6b3babc5cae3438a2d405b7b9c
SSDEEP

12288:6wZIzR2+hfeIq/M+1uxwhCnigAowrZJCUy1:zOIIQM+sxeCnFAowrc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d6e88f00680a8c01d1bf4ab04cd62670739dffa20ccf78c47ad71736b325a69

Files

6d6e88f00680a8c01d1bf4ab04cd62670739dffa20ccf78c47ad71736b325a69
.exe windows:5 windows x86 arch:x86

2d2e5ebdd53ac08c62bce32a8c115cec

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\x51\workspace\code\6.9.8\exe\bin\qqx51_game.pdb

Imports

qqx51_gamebase

ord1

Sections

.text
Size: 167KB - Virtual size: 524KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

X5Instan
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tvm0
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ace
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE