1555426285_gameawards_ru_trainer%2B4[.]7z

Sharing

Copy URL Twitter E-mail

General

Target
1555426285_gameawards_ru_trainer%2B4.7z
Size 303KB
Sample260909-akbabsab73
SHA256 d0a48ff6315d9c10680503d06dc855caa3b752eeeb7b8d0a1efecfa71ea95940
MD5 f0e8cc41eb3ea12c6c358dc200d29839
SHA1 6ada34a1dbd93ab012a164c094d9eaef470559f7
SHA512 e250e41c8d324a1e33edb896a60aa5574d447388bafea6cace871621374c844f16ca17b091f99f7d9f8c7daa4e0c81d529b56d5144e5693dd82426f9ce598809
SSDEEP 6144:zFn7Ff6tNws1wO4WCgY860gYdwoLQ6u8z/DOQ+phmFlj0x:zZa7wUYhcLk8z/DZa8lj0x
TLSH
T1346423F7103DE1B0DE2A70758EF108F59B26AE4290D84572A7783B12CE43ED0D586AE7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/TRAINER+4.EXE

File Explorer

1555426285_gameawards_ru_trainer%2B4.7z

.7z 303KB
TRAINER+4.EXE

.exe 1000KB

1555426285_gameawards_ru_trainer%2B4.7z

SHA256 d0a48ff6315d9c10680503d06dc855caa3b752eeeb7b8d0a1efecfa71ea95940
MD5 f0e8cc41eb3ea12c6c358dc200d29839
SHA1 6ada34a1dbd93ab012a164c094d9eaef470559f7
SHA512 e250e41c8d324a1e33edb896a60aa5574d447388bafea6cace871621374c844f16ca17b091f99f7d9f8c7daa4e0c81d529b56d5144e5693dd82426f9ce598809
SSDEEP 6144:zFn7Ff6tNws1wO4WCgY860gYdwoLQ6u8z/DOQ+phmFlj0x:zZa7wUYhcLk8z/DZa8lj0x
TLSH
T1346423F7103DE1B0DE2A70758EF108F59B26AE4290D84572A7783B12CE43ED0D586AE7
MD5 SHA1 SHA512 SSDEEP TLSH

TRAINER+4.EXE

SHA256 6b52da57df7be3829ab45ddb23f7efb99ca2ad6a95f2fe6c268b9c9f3bfe0ead
MD5 a13cb20e7b91be6f9589bb307021a3ed
SHA1 d19dcb2ce5c1d1471e88c209c30c3de07d7a6f64
SHA512 f69ac80e19e6d3823177d017b3d7db28b6d51e4e0cac16b6938c048dbba881c6769f66c622b77925979784c6676dc5d62c7667723a9c7c13af44af744680b1fa
SSDEEP 12288:SEDCJJDXb8qWvvMyesvleMkWzChpBTfgYvVtcgwSuLnKt7stf0na:SmQGbvNvjkJPKuMlXuGL
TLSH
T13A258C65B5B1C833F192467ABC0BD6EDB93DABF02D0471A37AE44E0C9A29B24700D5D7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

605116

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

587KB

Virtual Size

587KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

37KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

1555426285_gameawards_ru_trainer%2B4.7z

TRAINER+4.EXE

generic