gameboosthd-1[.]42[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

gameboosthd-1.42.exe
Size

7KB
MD5

1ff33715ebfd6f2124aa63d32ced9c92
SHA1

c63d8316e14d85a5b6f6f2a594dae279e09daac6
SHA256

606245fff00f35fb516409cbae80ebd15567913272d15a9b56ec260759f7a139
SHA512

57075b55160d9553930b6df6fa42cda5ad5161f2a76d6b8682205ab8b4bdb1efd01d9bc6bf05c11558485fa2e2d8a1815adf7d661aeab2b25abd908adc40255c
SSDEEP

96:gvWvHB2VpHJH0oSzl3Q6/XQPckXAQGgvqd2R:5voPJ0ZQ9QQzqK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
gameboosthd-1.42.exe

Files

gameboosthd-1.42.exe
.exe windows:6 windows x86 arch:x86

bc58d4445ed36d093df0b2a8da97a7c0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

powrprof

PowerGetActiveScheme
PowerSetActiveScheme

kernel32

HeapSetInformation
ExitProcess
SetPriorityClass
GetCommandLineW
GetCurrentProcess
lstrlenW
CreateMutexW
K32EmptyWorkingSet
K32GetProcessImageFileNameW
OpenProcess
Sleep
GetLastError
CloseHandle
LocalFree
K32EnumProcesses
SetProcessDEPPolicy

user32

GetMessageW
PostMessageW
CharLowerBuffW

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ