CoD[.]SCZ[.]FoV[.]Changer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CoD.SCZ.FoV.Changer.exe
Size

941KB
MD5

0c90511d96bcf294f3f5d7bc1864b2aa
SHA1

9ea052eed6dbb2d219ab5b8dfb750b7277b7568c
SHA256

78452250a6977722bc7440c7900052c1294da9712efcc7e239e62ae58a860f74
SHA512

bc7bcd6c9447dd06d1fabd5f49f2dac383145b53619bc43694749d835f1f3c42f91ce5e064512ae7cfb7ac0a72a8c60977a59c1b85b799ed9ba0ae1fb94ef801
SSDEEP

6144:NQLrlGJ00eKYXfE5rlGJ00eKYXfE4rlGJ00yKadkEKU:NlkJQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CoD.SCZ.FoV.Changer.exe

Files

CoD.SCZ.FoV.Changer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\Development\Repositories\CoD-SCZ-FoV-Changer\CoD SCZ FoV Changer\obj\Release\CoD SCZ FoV Changer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 636KB - Virtual size: 636KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 303KB - Virtual size: 303KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ