Seductive Cheats[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Seductive Cheats.exe
Size 321KB
Sample260731-yf8a9sff87
SHA256 99790319dfa4468b965c696e7b63973a5bd3d7a3b066c0f8f1996f85b1049464
MD5 4e53cbb4761c4ae55ed8dd295690b7b2
SHA1 cb60e102c0ad8ceb35224a7f38fcc3bc479b2bb9
SHA512 bbca0f3047e0256d26f063cc2f43eaee5f5fbd21d7e644a38efe7598a96658e8f2ea544aab3083f867675c1f6e80921ce0788016c93da0454c10bb0078316d7a
SSDEEP 6144:O2E3C+ByhOI5BkKx7S/gSIMmH0uxwN8CSMLkp1R2:O/jMhOOkKxSIMLG1
TLSH
T150641246EA16C7E2D01AD530177F1756E921749C8BB121E32FA53D1A292FEC8FB74E01
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Seductive Cheats.exe

File Explorer

Seductive Cheats.exe

.exe 321KB

Seductive Cheats.exe

IMPHASH e81d90b230abc81b286482b9dba12e35
SHA256 99790319dfa4468b965c696e7b63973a5bd3d7a3b066c0f8f1996f85b1049464
MD5 4e53cbb4761c4ae55ed8dd295690b7b2
SHA1 cb60e102c0ad8ceb35224a7f38fcc3bc479b2bb9
SHA512 bbca0f3047e0256d26f063cc2f43eaee5f5fbd21d7e644a38efe7598a96658e8f2ea544aab3083f867675c1f6e80921ce0788016c93da0454c10bb0078316d7a
SSDEEP 6144:O2E3C+ByhOI5BkKx7S/gSIMmH0uxwN8CSMLkp1R2:O/jMhOOkKxSIMLG1
TLSH
T150641246EA16C7E2D01AD530177F1756E921749C8BB121E32FA53D1A292FEC8FB74E01
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

255KB

Virtual Size

255KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

512B

Virtual Size

240B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.CRT

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

49KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Seductive Cheats.exe

ntdll

kernel32

generic