Cheats Tools By GotaZ[.]exe | Triage

Sharing

General

Target

Cheats Tools By GotaZ.exe
Size

197KB
MD5

b3616f6b72276fecd8f75f95ef60fd18
SHA1

50116dfad40fbdd732258d08c34f29169101999e
SHA256

dc5fc3b33df318b385628deff8f41922509a21d5e69d075c4a2311a8c2d82658
SHA512

ba83ab6148ac3a92b35ea83d3d3d2ee72d434e93c3654e89b1ae19bda5b7c45586b7041c76f5a08c82d5ab4529ede0c1be091ee6d839ec39a44696b9c49dd558
SSDEEP

3072:avSiI8XnEGarrpFtGarrps0XDFKgRvMe7Garrs:iI8XEFFfFFs0zVn7F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Cheats Tools By GotaZ.exe

Files

Cheats Tools By GotaZ.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Edern\Desktop\CodeTool\CheatsToolV2\Gateway To NTR Converter\obj\Release\Cheats Tools By GotaZ.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 178KB - Virtual size: 178KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ