GarticCheat[.]zip | Triage™

General

Target
GarticCheat.zip
Size 17KB
Sample260804-bmbvbaaf25
SHA256 846a094a2cf59f25398aa27c8fca2d6bab0f9be90de1200199358928f792f9cd
MD5 0bfc2e551e0e6017c3b4d2495080808d
SHA1 d03dab4ad42eb94a4f5c672696931cd50ac9e9d6
SHA512 fe750760a27bf8e05e08bed01846984c09e0f23287bc1e9891bc08dc693fd0d0bf108415cbddd64de7853dd4c19d357e11d13a33f024d854a7c53c67379b50a6
SSDEEP 384:/GBX7P+sTnp+s07Pj9Xjx5cXJX17jAaKGpvK8B4LMnfSbPErLs7JsWP3o0YlAahG:IrWsks0Dj9XjMZXNjUGhKi4Af4PEr4J3
TLSH
T1FD82C05CC0EE5B22DF4B6D71BDADDB106A0E48962DB52CC1E92D888DBC85450B7E3C4C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/GarticCheat.exe

File Explorer

GarticCheat.zip

.zip 17KB
GarticCheat.exe

.exe 84KB
GarticCheat.exe.config

189B
GarticCheat.pdb

39KB

GarticCheat.zip

SHA256 846a094a2cf59f25398aa27c8fca2d6bab0f9be90de1200199358928f792f9cd
MD5 0bfc2e551e0e6017c3b4d2495080808d
SHA1 d03dab4ad42eb94a4f5c672696931cd50ac9e9d6
SHA512 fe750760a27bf8e05e08bed01846984c09e0f23287bc1e9891bc08dc693fd0d0bf108415cbddd64de7853dd4c19d357e11d13a33f024d854a7c53c67379b50a6
SSDEEP 384:/GBX7P+sTnp+s07Pj9Xjx5cXJX17jAaKGpvK8B4LMnfSbPErLs7JsWP3o0YlAahG:IrWsks0Dj9XjMZXNjUGhKi4Af4PEr4J3
TLSH
T1FD82C05CC0EE5B22DF4B6D71BDADDB106A0E48962DB52CC1E92D888DBC85450B7E3C4C
MD5 SHA1 SHA512 SSDEEP TLSH

GarticCheat.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 83c8755614ed63eb2665a559e8e439c3215a740498381629e2cb5a02ab31d925
MD5 bd45d2bf00ac392eb7f7127d9f42e279
SHA1 1daecef31833901bb0729e3d2ea79a4cd7eedfef
SHA512 a77d6929c7d128cf1650a9aefbd5b9cca579fa31b01b2be75e2f86409652e1d003d7f05a03e0bd10224d27f387ab4c4b8d2928e0ef5f7d990a1754c2ff745e6c
SSDEEP 384:7o7X4tFs2VRw25wYaSWz0X22QoNBx8zpwZ4CN1ev+MvgRkvwKwq6ubFpsG9OR:FhWJvOBq01ev+MoTR
TLSH
T12A83CA51FB9562E7CC358BFC9440420E6B746F272CD1DB8B1A8839AD08B2F41173E676
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

91430

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Alexis\Desktop\Programmes\C#\GarticCheat\obj\Release\GarticCheat.pdb

GarticCheat.zip

GarticCheat.exe

mscoree

dotnet

GarticCheat.exe.config

GarticCheat.pdb

Sharing

General

Malware Config

Signatures

File Explorer

GarticCheat.zip

GarticCheat.exe

mscoree

dotnet

GarticCheat.exe.config

GarticCheat.pdb