Call of Duty Black Ops 3 V1[.]00 Trainer +3 MrAntiFun[.]EXE

General

Target
Call of Duty Black Ops 3 V1.00 Trainer +3 MrAntiFun.EXE
Size 4.2MB
Sample260721-shpdaaydrd
SHA256 6554960b5f5295deb917cae80835becbff29df6468574f9d898ed35c1fa9065a
MD5 a91512da09e0b62f9a3765a17636def6
SHA1 2cbf7ecf447c8da93acefa788265f7bcfe9a3775
SHA512 baf0d489088ef631d9182f3bd7aace25bc50e05c2eae3d345b8853b7ee4e7cc8db3330c31280242d0a4727c8ae3b875ebd5803c50064d1fce1638648424dbbe8
SSDEEP 98304:BxBWRsTTGC6aiOFCzfLs/y4gJUDpzJByw4TeIAScE:BxBWR4GCp8TrUDpDyw4
TLSH
T17B163355FE40863FE91209B15A64C12347B5FA323931E857B3E90BAE4FB3BD01A79316
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Call of Duty Black Ops 3 V1.00 Trainer +3 MrAntiFun.EXE

File Explorer

Call of Duty Black Ops 3 V1.00 Trainer +3 MrAntiFun.EXE

.exe 4.2MB

Call of Duty Black Ops 3 V1.00 Trainer +3 MrAntiFun.EXE

IMPHASH 8d92fa1956a6a631c642190121740197
SHA256 6554960b5f5295deb917cae80835becbff29df6468574f9d898ed35c1fa9065a
MD5 a91512da09e0b62f9a3765a17636def6
SHA1 2cbf7ecf447c8da93acefa788265f7bcfe9a3775
SHA512 baf0d489088ef631d9182f3bd7aace25bc50e05c2eae3d345b8853b7ee4e7cc8db3330c31280242d0a4727c8ae3b875ebd5803c50064d1fce1638648424dbbe8
SSDEEP 98304:BxBWRsTTGC6aiOFCzfLs/y4gJUDpzJByw4TeIAScE:BxBWR4GCp8TrUDpDyw4
TLSH
T17B163355FE40863FE91209B15A64C12347B5FA323931E857B3E90BAE4FB3BD01A79316
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5611

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shlwapi

PathAddBackslashA PathStripPathA PathRemoveFileSpecA

kernel32

GetModuleFileNameA FindResourceA GetModuleHandleA SizeofResource LoadResource GetTempPathA CreateDirectoryA DeleteFileA CreateFileA WriteFile CloseHandle CreateProcessA WaitForSingleObject RemoveDirectoryA FlushFileBuffers GetTempFileNameA GetCurrentThreadId GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep GetProcAddress ExitProcess GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetLastError GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryA InitializeCriticalSectionAndSpinCount HeapAlloc VirtualAlloc HeapReAlloc RtlUnwind SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

MessageBoxA

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorA

Sharing