mergevehiclesfivem[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

mergevehiclesfivem.exe
Size

13KB
MD5

9aaf76d018547b7b33bae3371a0f66d1
SHA1

14674d9962c8c02a7180024fdfc3789c11efd904
SHA256

8a62a4419f10746e9371ca9e50b5fc35874cec68ee3e394451ceaeca0e5aa001
SHA512

f6f4434e33713377819cc9f346faa1bd2cb6a8ecb82f1dc1b589af3a120d8822da498f86875c75c59d66680dab1ec80506daf45412b801b8d15f281461e1609a
SSDEEP

192:RGerJnwMJhe9NTw41YC32Dr9bCo/J4ArHaV2sfvNjQ:oerJwM2NTw41YC3kNLeVNf1j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
mergevehiclesfivem.exe

Files

mergevehiclesfivem.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Angelo\source\repos\mergevehiclesfivem\mergevehiclesfivem\obj\Debug\mergevehiclesfivem.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ