ETOxCheat-TestVersion[.]exe | Triage

Sharing

General

Target

ETOxCheat-TestVersion.exe
Size

870KB
MD5

bea28a1e680f8b8053e64c8810dad71e
SHA1

8464a9aeaa3a290c9a027484a5b6e1759e9eb0e8
SHA256

df8227c17eee7cc65a3ff5244c073d4e072ee864100b2a293c0ef54e9b5b3ee0
SHA512

b22641529e6e642f852bc43534d49c7bc47668a432edcd3f67f4a879c77aa0e92e1ce259fb41773ba15f0a70396fe031b1073320bc95812fd3fdd2a231caa669
SSDEEP

12288:47wITbhKx7WQeu3D9FPJXOmQ+qO39WoCuwTvk83uRCS26qH3OqtwIulkyF3SkH:4EITMvRFhRRbNWoCfkYSEH3OqtwIuX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ETOxCheat-TestVersion.exe

Files

ETOxCheat-TestVersion.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 855KB - Virtual size: 854KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BmiiFLUN
Size: 512B - Virtual size: 22B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.????
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ