MW3PROS5[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MW3PROS5.exe
Size

10.4MB
MD5

6f0178656662908cc75aeb79d46e22d5
SHA1

c5e474cdd382ccf33dfa4af940dc85286f4a5664
SHA256

3b9d69a33fd368f6aa141d114d2279181dd0fa7991dd83b3fb6da6fda8a257ff
SHA512

425b54e30f6f43c6de56bb5752c76d64bf72eda3b2b6a6e4c60d5737270d17cf499f1b29859e4bb5b8985b0b7ce55e35fe267fdb48987449e38701693ab8bb31
SSDEEP

196608:+38H1FyJiOyjcAkcfsUnd7trEt51m+dvmS39C0rE3InNldMRRC/gcBQH389xzznx:+2X6irjcVUd72hm+5V9C0OG3M0c8zzn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MW3PROS5.exe

Files

MW3PROS5.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10.4MB - Virtual size: 10.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ