r6ragecheat[.]exe | Triage™

General

Target
r6ragecheat.exe
Size 3.4MB
Sample260815-2yjmeahn21
SHA256 7af3f156c31ecb9d64e3b44bfa616bfa13ded4c65f04a525821e24aa186ed468
MD5 4d29bb0dc4c112a6bb7a15b2ccbe8393
SHA1 be9ab0bbfd29376be34c452849aeb9c4e96fd047
SHA512 a5743ceb00925397b4ba5dcd19ce93ccc385096ff609c4c086bbb1465e13ccca7c7d4947aae849b9a4f2344e3c6346072b980c72e61a3182158c0668aa242e79
SSDEEP 98304:0a4EtW5xu7hxzmn6gc64WCIYn5+DlJIZ:jXg5x4hNc14YQWlJ
TLSH
T1C1F5334FE5A7A0889DC012F47AB4D42876FAF2C60953BD3576103712A131DF397AD879
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
r6ragecheat.exe

SHA256 7af3f156c31ecb9d64e3b44bfa616bfa13ded4c65f04a525821e24aa186ed468
MD5 4d29bb0dc4c112a6bb7a15b2ccbe8393
SHA1 be9ab0bbfd29376be34c452849aeb9c4e96fd047
SHA512 a5743ceb00925397b4ba5dcd19ce93ccc385096ff609c4c086bbb1465e13ccca7c7d4947aae849b9a4f2344e3c6346072b980c72e61a3182158c0668aa242e79
SSDEEP 98304:0a4EtW5xu7hxzmn6gc64WCIYn5+DlJIZ:jXg5x4hNc14YQWlJ
TLSH
T1C1F5334FE5A7A0889DC012F47AB4D42876FAF2C60953BD3576103712A131DF397AD879
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

12919632

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths