Static task
static1
Behavioral task
behavioral1
Sample
EasyCheating.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
EasyCheating.exe
Resource
win10v2004-20240802-en
General
-
Target
EasyCheating.exe
-
Size
50KB
-
MD5
a262aecc8e8dc29650ff5e11d7b3c276
-
SHA1
c6dc0c79fc0616fc7ba0d58e005bb2c62c9f8012
-
SHA256
5807ce4e87716a5bc909df73c563dd643da24a01704e15db6b6d638850c585ea
-
SHA512
993f6cb26939417567be9c739cba44553cd4b2e9d27d158031aafe6c7baa46b9b35e285b0a9294788d8d055b121be19d6f09f8f693f9eccaa06ad18804726b07
-
SSDEEP
768:Tmr2rBQ1wWOQgdSR8qKugZa3lbaxgGjX0/o9Bv60mifhhIZtWLqiO:qAwwFQgEBC03haxfk/G160XInWLY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource EasyCheating.exe
Files
-
EasyCheating.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ