b9969ccb852c44482a558a51dee8e974 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9969ccb852c44482a558a51dee8e974
Size

603KB
MD5

b9969ccb852c44482a558a51dee8e974
SHA1

3f47dae54f484935c61648a70edc6d6efa22297e
SHA256

9b127cfc32804a1ff60cd7295b700c5a9be62e5f45492348a77695a59ba28ace
SHA512

07ac51c54e2c599198e1cad49fb9de993b59337fcf4e7379f4501548f1956ae45dafe7e932a14f6631445b69dc4733023853ebea0c75bed05269ed5030d35f9e
SSDEEP

12288:rVpLoREaebRbLTEjUfTW4LJxnGWfUzAYog8NKqx5HygA9826i:rizuzbLznty+gapy27i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/MW3 Multihack 22+ by ViPeR.exe

Files

b9969ccb852c44482a558a51dee8e974
.rar
MW3 Multihack 22+ by ViPeR.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\TheTrust3343\documents\visual studio 2010\Projects\MyFirstMW3 Hack\MyFirstMW3 Hack\obj\x86\Release\MW3 Multihack 22+ by ViPeR.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 931KB - Virtual size: 930KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 191B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 423KB - Virtual size: 423KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ