mw3-chair-v3[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

mw3-chair-v3.exe
Size

6.8MB
MD5

cf04024a7e55cd7003066ce84dc536ba
SHA1

1854dece01f18914caf793bc88ea2c3d1be6ef6d
SHA256

56b9ef4901788b86844b4a603ebd10bd6496e2c836296e5fa5635b2489a1eaca
SHA512

67d8bfb722686b90dd42a47fa83e0763aec939739ba92fb589b6299a13cefdddc86bea9986b928c75afc77ea6ca3a8a1f3c8878f3b43e8903bf23a010690839d
SSDEEP

98304:JSvUTgF0GVA9jw1ktuvS5GD30langYNoK9mIr8r0LiKBiu5Xm187l0ILzk9YemdN:0K9E1+58gMoKxrQQBiAXYTEkhmdi2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
mw3-chair-v3.exe

Files

mw3-chair-v3.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6.8MB - Virtual size: 6.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ