powercheat (1)[.]exe | Triage

Sharing

General

Target

powercheat (1).exe
Size

29.4MB
MD5

1812c9c8e1275450891c680c8cbb8dc9
SHA1

be5d134a0931fa4e72b65c107b044c95b6deb52e
SHA256

0cfc1a3806f651fb1f17ad1acd0cc406c3ffc7f0c12e698bb8c98878158d7dfb
SHA512

19e5caca9bde72e0e2fb97968052cdbe7d0849d0fae11c2dc849c8da690b2442735edd8627c64da0b68f10db934b03ca8e4055f5e373d6fc07b0d0adb5d2c4ef
SSDEEP

786432:h1/hzuWNxn5ZXCRcNFzCspP3CiOlg6w2br4Ao9lXTjEl1o0rOU:NuWNx5ZSR+R53CiOlg6Zbr4vzjRI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
powercheat (1).exe

Files

powercheat (1).exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 29.4MB - Virtual size: 29.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ