FallGuysStats[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FallGuysStats.zip
Size

25.2MB
MD5

b83a5ab43ee8dd6af42331c82f5453b1
SHA1

fa8c9edce093e31b9211e3617cc858ee908679a1
SHA256

88f85cd60beb7ad5e746c34e9d88de54d9f3025af7c85de9fc99668672fa88a6
SHA512

da221797a84c520456daab277e929658460d5476e65cea745d0c09df27f3b413c8d31419cc0bb8d739bb91f55cef59435bd396214fc9e406f3165da1c887dc45
SSDEEP

393216:Kq7TLRRAjm+v35KKLvDUEFmFEa+ao+XUNVck9k2RWCnOg6iXHVOGMHrNuddXnzX:Kq7TLRw5KKLb1koPbe2oilXksjXnD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/FallGuysStats.exe

Files

FallGuysStats.zip
.zip

Password: infected
FallGuysStats.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

FallGuysStats.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 35.9MB - Virtual size: 35.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ