e164029a5b6b053dce5c7306ca7702d040874af5f4eebaeec0f41c7a227c00d7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e164029a5b6b053dce5c7306ca7702d040874af5f4eebaeec0f41c7a227c00d7
Size

437KB
MD5

81b2fad3504c29a3166929641c492957
SHA1

dfad23c50be35f016bd0fff146e7ab9c4fe249a0
SHA256

e164029a5b6b053dce5c7306ca7702d040874af5f4eebaeec0f41c7a227c00d7
SHA512

741752741a11709f19d196df36aea48d06608577aedab8e7c24e2890a435b84a5d9dfdecab98da109b9cc73f0e76fb3aa2519240fc5bd258e706c4311e8b06d9
SSDEEP

6144:EpO45w7+pi/ipFO42WHNtgRYMrGgNUFZsTKqpFO4v/UcN4pFO4:t45w7+pcipVPHNOr6KSJqpVv/upV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e164029a5b6b053dce5c7306ca7702d040874af5f4eebaeec0f41c7a227c00d7

Files

e164029a5b6b053dce5c7306ca7702d040874af5f4eebaeec0f41c7a227c00d7
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Black-XP\My Documents\Visual Studio 2008\Projects\Zynga VIP Club Free\Zynga VIP Club Free\obj\Debug\Zynga Hack 2012.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 349KB - Virtual size: 348KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ