MW2_MP_FoV_Changer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MW2_MP_FoV_Changer.exe
Size

81KB
MD5

793c0edf78ad9a738f0384a19a612e5e
SHA1

c756ec4e293418e94ea8f037eb16ac412919ae65
SHA256

16ce0668d0b9b8f8a474467436e4d63b4d0d3d6a54e6f380d8e7646bbcceff30
SHA512

6d1f8696ec32e0ae05ae6bfd5b81df8c0884b6eb0dd945531d84922ddf828b9f6ec1c4177621dcff6097e7850a8d5418f9bd51c44ea1d8daa6b7d6369351377a
SSDEEP

1536:gg7SAbkt/THgYhbOSsZiNlEktXk18LFrJy8zR2ktpic:gg7U/THRpNlVXTLFrJyqn3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MW2_MP_FoV_Changer.exe

Files

MW2_MP_FoV_Changer.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ