minecraft[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

minecraft.exe
Size

976KB
MD5

0e70f894ba8d3a395aafcd62cd6dcfa4
SHA1

fb432438efc8e4c36495286848aa2f291de820f5
SHA256

6bddb86f3713239afb7dd05cda1d176d10708e0de352875dfd67827483175b57
SHA512

261cd876a245c896a4570aeed88036a2e02aabbca3883e90227c6dfb88bdb76d023b00550a46fcab7de707ef7f02dcf6007c16b8cb064437f2b480383277e25d
SSDEEP

12288:wX4Pn4HHOqpc/XYfJoBmJxRHHE6mRsc9gC8NLhPtDND79:1Pn6pc/ofJ4OX

Score

4^/10

pdf link

Malware Config

Signatures

HTTP links in PDF interactive object 1 IoCs

Detects HTTP links in interactive objects within PDF files.

resource	yara_rule
sample	pdf_with_link_action

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
minecraft.exe

Files

minecraft.exe
.exe .pdf windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Lenovo\Downloads\SKLogger-master\emojify-0.5\BSOD-Windows-10-Proof-of-Concept--main\BSOD-Windows-10-Proof-of-Concept--main\Exe File Source Code\obj\Debug\MergePDF2EXE.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 151KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ