Errors

Reason
too many matches

General

  • Target

    6210910726291456.zip

  • Size

    671.5MB

  • MD5

    8c99ec9fe9c0e850825eacac09be05fb

  • SHA1

    ffaf5ff589a1fb6f076b21031d4d83d2b73a997c

  • SHA256

    929adcf731e730ee1251eeef8513fd774b1357c1c3e1da4d287722ed778434f9

  • SHA512

    20b3ecadd9ba975be6ac7e24f30e24d184d66256360cfcd569e97514070aceeb62cba3c53d1963b3b34cbb45bf99abdeee3cc3b3bebf4416f92796780850bcd6

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 6210910726291456.zip
    .zip

    Password: infected

  • 03ff897da4bfb8bc549fdb1ebf7ee940bcb9b57fed7d26d83c45d1e9ec1f40b3
    .exe windows x86


  • 10493d98a6e78b7bbc60a9aae5ce5fa1a67cdace2a6be41740c92e21dcdb5f41
    .exe windows x86


  • 11747d3247254b7db3fb7d6b8c0b47d21546b208b1573a73ae20f46ca4131e67
    .exe windows x86


  • 1f62ade6c94145711aeab42c03f2b7b2408190c6e5f37a0041a154a93e9551d4
    .rar
  • San11 Tc/00000000.256
  • San11 Tc/Doc/ASK.URL
    .url
  • San11 Tc/Doc/Reg/bg.jpg
    .jpg
  • San11 Tc/Doc/Reg/btn_reg.gif
    .gif
  • San11 Tc/Doc/Reg/btn_user.gif
    .gif
  • San11 Tc/Doc/Reg/caution.gif
    .gif
  • San11 Tc/Doc/Reg/dot_line.gif
    .gif
  • San11 Tc/Doc/Reg/frame_bottom.gif
    .gif
  • San11 Tc/Doc/Reg/frame_center.gif
    .gif
  • San11 Tc/Doc/Reg/frame_left02.gif
    .gif
  • San11 Tc/Doc/Reg/frame_left03.gif
    .gif
  • San11 Tc/Doc/Reg/frame_right02.gif
    .gif
  • San11 Tc/Doc/Reg/frame_right03.gif
    .gif
  • San11 Tc/Doc/Reg/san11.css
  • San11 Tc/Doc/Reg/san11_reg.htm
  • San11 Tc/Doc/Reg/spacer.gif
    .gif
  • San11 Tc/Doc/Reg/step01.gif
    .gif
  • San11 Tc/Doc/Reg/step02.gif
    .gif
  • San11 Tc/Doc/Reg/step03.gif
    .gif
  • San11 Tc/Doc/Reg/step04.gif
    .gif
  • San11 Tc/Doc/Reg/subttl_fan.gif
    .gif
  • San11 Tc/Doc/Reg/subttl_reg.gif
    .gif
  • San11 Tc/Doc/Reg/table_bottom.gif
    .gif
  • San11 Tc/Doc/Reg/table_center.gif
    .gif
  • San11 Tc/Doc/Reg/table_top.gif
    .gif
  • San11 Tc/Doc/Reg/title01.gif
    .gif
  • San11 Tc/Doc/Reg/title02.jpg
    .jpg
  • San11 Tc/Doc/Reg/title03.jpg
    .jpg
  • San11 Tc/Doc/Reg/title_reg.gif
    .gif
  • San11 Tc/Doc/Reg/title_user.gif
    .gif .ps1
  • San11 Tc/DrvMgt.dll
    .dll windows x86


    Exports

  • San11 Tc/LinkSan11Res.exe
    .exe windows x86


  • San11 Tc/Readme.txt
  • San11 Tc/S11Launcher.exe
    .exe windows x86


  • San11 Tc/S11PKLauncher.exe
    .exe windows x86


  • San11 Tc/SECDRV.SYS
    .exe windows x86


  • San11 Tc/STcheck.wma
  • San11 Tc/San11.exe
    .exe windows x86


  • San11 Tc/ali213.bin
  • San11 Tc/san11pk.exe
    .exe windows x86


  • San11 Tc/开始游戏.exe
    .exe windows x86


  • 23c9e16cc6549ca05d349e7d04805309171cfe8a8426cdb7376f2a41b757a67b
    .exe windows x86


  • 36a18ae31faa401de370fc7c808bd43f5f7af14c9f6f71cbd2aa9f8cca6555d0
    .exe windows x86


  • 4109a062b38d66ee7222cd984120e056acd0f5dad490c623f411c8abb18796d4
    .exe windows x86


  • 65953553f6fa29856dcc50faf580c1b73d3a9d0a8202b2c8af1df7af3f7e5412
    .rar
  • CW3.exe
    .exe windows x86


    Exports

  • CW3_Data/Managed/Assembly-CSharp-firstpass.dll
    .dll windows x86


  • CW3_Data/Managed/Assembly-CSharp.dll
    .dll windows x86


  • CW3_Data/Managed/Assembly-UnityScript-firstpass.dll
    .dll windows x86


  • CW3_Data/Managed/Assembly-UnityScript.dll
    .dll windows x86


  • CW3_Data/Managed/Boo.Lang.dll
    .dll windows x86


  • CW3_Data/Managed/Mono.Security.dll
    .dll windows x86


  • CW3_Data/Managed/System.Core.dll
    .dll windows x86


  • CW3_Data/Managed/System.Xml.Linq.dll
    .dll windows x86


  • CW3_Data/Managed/System.Xml.dll
    .dll windows x86


  • CW3_Data/Managed/System.dll
    .dll windows x86


  • CW3_Data/Managed/UnityEngine.Networking.dll
    .dll windows x86


  • CW3_Data/Managed/UnityEngine.UI.dll
    .dll windows x86


  • CW3_Data/Managed/UnityEngine.dll
    .dll windows x86


  • CW3_Data/Managed/UnityEngine.xml
    .xml
  • CW3_Data/Managed/UnityScript.Lang.dll
    .dll windows x86


  • CW3_Data/Managed/mscorlib.dll
    .dll windows x86


  • CW3_Data/Mono/etc/mono/1.0/DefaultWsdlHelpGenerator.aspx
    .js
  • CW3_Data/Mono/etc/mono/2.0/DefaultWsdlHelpGenerator.aspx
    .js
  • CW3_Data/Mono/etc/mono/browscap.ini
  • CW3_Data/Mono/etc/mono/config
  • CW3_Data/Mono/etc/mono/mconfig/config.xml
    .xml
  • CW3_Data/Mono/mono.dll
    .dll windows x86


    Exports

  • CW3_Data/Plugins/CSteamworks.dll
    .dll windows x86


    Exports

  • CW3_Data/Plugins/SteamConfig.ini
  • CW3_Data/Plugins/steam_api.dll
    .dll windows x86


    Exports

  • CW3_Data/Resources/unity default resources
  • CW3_Data/Resources/unity_builtin_extra
  • CW3_Data/level0
  • CW3_Data/level1
  • CW3_Data/level2
  • CW3_Data/level3
  • CW3_Data/level4
  • CW3_Data/level5
  • CW3_Data/level6
  • CW3_Data/level7
  • CW3_Data/mainData
  • SteamConfig.ini
  • ali213.bin
  • steam_api.dll
    .dll windows x86


    Exports

  • 开始游戏.exe
    .exe windows x86


  • 7329142bfc45dd91934e1c3b14f4aa7ef658e3a7c69919eeba2552831e81e19e
    .rar
  • ${Garden Story}.exe
    .exe windows x86


  • ali213.bin
  • audiogroup1.dat
  • audiogroup2.dat
  • audiogroup3.dat
  • books.csv
  • buildings.csv
  • catalogues.csv
  • credits.csv
  • data.win
  • descriptions.csv
  • dialogue.csv
  • gathers.csv
  • items.csv
  • local_save.txt
  • map.csv
  • memories.csv
  • options.ini
  • requests.csv
  • save/settings/account_name.txt
  • save/settings/language.txt
  • save/settings/listen_port.txt
  • save/settings/user_steam_id.txt
  • steam_api.dll
    .dll windows x86


    Exports

  • storyprog.csv
  • utilities.csv
  • 开始游戏.exe
    .exe windows x86


  • 79d68522e40a8ad61b6b136823aafdb371cccf29b357f2d0e97d1495994fc354
    .exe windows x86


  • 7f479efadf9d415d1dd2d5cd256691701ecaa60e7b7f9676e9af2eb839e0787d
    .exe windows x86


  • 819a30128e0392a5930ef51b218c06738ce14f1ad26d31c31816cc8e6d9d95ec
    .exe windows x86


  • 830b3b4d266300066c7d5147bf8261f7d728180a0cff5fd23e19967c0092f83a
    .rar
  • ${Garden Story}.exe
    .exe windows x86


  • ali213.bin
  • audiogroup1.dat
  • audiogroup2.dat
  • audiogroup3.dat
  • books.csv
  • buildings.csv
  • catalogues.csv
  • credits.csv
  • data.win
  • descriptions.csv
  • dialogue.csv
  • gathers.csv
  • items.csv
  • local_save.txt
  • map.csv
  • memories.csv
  • options.ini
  • requests.csv
  • save/settings/account_name.txt
  • save/settings/language.txt
  • save/settings/listen_port.txt
  • save/settings/user_steam_id.txt
  • steam_api.dll
    .dll windows x86


    Exports

  • storyprog.csv
  • utilities.csv
  • 开始游戏.exe
    .exe windows x86


  • 88a660e6da9cadad1d6353c8bcda546204f12dbd696b294bcfc8b3c6ea01a660
    .rar
  • ${Garden Story}.exe
    .exe windows x86


  • ali213.bin
  • audiogroup1.dat
  • audiogroup2.dat
  • audiogroup3.dat
  • books.csv
  • buildings.csv
  • catalogues.csv
  • credits.csv
  • data.win
  • descriptions.csv
  • dialogue.csv
  • gathers.csv
  • items.csv
  • local_save.txt
  • map.csv
  • memories.csv
  • options.ini
  • requests.csv
  • save/settings/account_name.txt
  • save/settings/language.txt
  • save/settings/listen_port.txt
  • save/settings/user_steam_id.txt
  • steam_api.dll
    .dll windows x86


    Exports

  • storyprog.csv
  • utilities.csv
  • 开始游戏.exe
    .exe windows x86


  • 927d369e4a0167f87d102bf23a2cff6765eb28ad272632e0c5fd15cdcafe178a
    .rar
  • San11 Tc/00000000.256
  • San11 Tc/Doc/ASK.URL
    .url
  • San11 Tc/Doc/Reg/bg.jpg
    .jpg
  • San11 Tc/Doc/Reg/btn_reg.gif
    .gif
  • San11 Tc/Doc/Reg/btn_user.gif
    .gif
  • San11 Tc/Doc/Reg/caution.gif
    .gif
  • San11 Tc/Doc/Reg/dot_line.gif
    .gif
  • San11 Tc/Doc/Reg/frame_bottom.gif
    .gif
  • San11 Tc/Doc/Reg/frame_center.gif
    .gif
  • San11 Tc/Doc/Reg/frame_left02.gif
    .gif
  • San11 Tc/Doc/Reg/frame_left03.gif
    .gif
  • San11 Tc/Doc/Reg/frame_right02.gif
    .gif
  • San11 Tc/Doc/Reg/frame_right03.gif
    .gif
  • San11 Tc/Doc/Reg/san11.css
  • San11 Tc/Doc/Reg/san11_reg.htm
  • San11 Tc/Doc/Reg/spacer.gif
    .gif
  • San11 Tc/Doc/Reg/step01.gif
    .gif
  • San11 Tc/Doc/Reg/step02.gif
    .gif
  • San11 Tc/Doc/Reg/step03.gif
    .gif
  • San11 Tc/Doc/Reg/step04.gif
    .gif
  • San11 Tc/Doc/Reg/subttl_fan.gif
    .gif
  • San11 Tc/Doc/Reg/subttl_reg.gif
    .gif
  • San11 Tc/Doc/Reg/table_bottom.gif
    .gif
  • San11 Tc/Doc/Reg/table_center.gif
    .gif
  • San11 Tc/Doc/Reg/table_top.gif
    .gif
  • San11 Tc/Doc/Reg/title01.gif
    .gif
  • San11 Tc/Doc/Reg/title02.jpg
    .jpg
  • San11 Tc/Doc/Reg/title03.jpg
    .jpg
  • San11 Tc/Doc/Reg/title_reg.gif
    .gif
  • San11 Tc/Doc/Reg/title_user.gif
    .gif .ps1
  • San11 Tc/DrvMgt.dll
    .dll windows x86


    Exports

  • San11 Tc/LinkSan11Res.exe
    .exe windows x86


  • San11 Tc/Readme.txt
  • San11 Tc/S11Launcher.exe
    .exe windows x86


  • San11 Tc/S11PKLauncher.exe
    .exe windows x86


  • San11 Tc/SECDRV.SYS
    .exe windows x86


  • San11 Tc/STcheck.wma
  • San11 Tc/San11.exe
    .exe windows x86


  • San11 Tc/ali213.bin
  • San11 Tc/san11pk.exe
    .exe windows x86


  • San11 Tc/开始游戏.exe
    .exe windows x86


  • 9e3b3c191ee7f50dbb755793873a8bfa9b3c46b844da0154b1a1a6e2d3f25f94
    .rar
  • GameAssembly.dll
    .dll windows x86


    Exports

  • LYNE.exe
    .exe windows x86


    Exports

  • LYNE_Data/Plugins/x86/SteamConfig.ini
  • LYNE_Data/Plugins/x86/steam_api.dll
    .dll windows x86


    Exports

  • LYNE_Data/Resources/unity default resources
  • LYNE_Data/Resources/unity_builtin_extra
  • LYNE_Data/app.info
  • LYNE_Data/boot.config
  • LYNE_Data/globalgamemanagers
  • LYNE_Data/globalgamemanagers.assets
  • LYNE_Data/il2cpp_data/Metadata/global-metadata.dat
  • LYNE_Data/il2cpp_data/Resources/mscorlib.dll-resources.dat
  • LYNE_Data/il2cpp_data/etc/mono/2.0/Browsers/Compat.browser
  • LYNE_Data/il2cpp_data/etc/mono/2.0/DefaultWsdlHelpGenerator.aspx
    .js
  • LYNE_Data/il2cpp_data/etc/mono/2.0/machine.config
    .xml
  • LYNE_Data/il2cpp_data/etc/mono/2.0/settings.map
    .xml
  • LYNE_Data/il2cpp_data/etc/mono/2.0/web.config
    .xml
  • LYNE_Data/il2cpp_data/etc/mono/4.0/Browsers/Compat.browser
  • LYNE_Data/il2cpp_data/etc/mono/4.0/DefaultWsdlHelpGenerator.aspx
    .js
  • LYNE_Data/il2cpp_data/etc/mono/4.0/machine.config
    .xml
  • LYNE_Data/il2cpp_data/etc/mono/4.0/settings.map
    .xml
  • LYNE_Data/il2cpp_data/etc/mono/4.0/web.config
    .xml
  • LYNE_Data/il2cpp_data/etc/mono/4.5/Browsers/Compat.browser
  • LYNE_Data/il2cpp_data/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx
    .js
  • LYNE_Data/il2cpp_data/etc/mono/4.5/machine.config
    .xml
  • LYNE_Data/il2cpp_data/etc/mono/4.5/settings.map
    .xml
  • LYNE_Data/il2cpp_data/etc/mono/4.5/web.config
    .xml
  • LYNE_Data/il2cpp_data/etc/mono/browscap.ini
  • LYNE_Data/il2cpp_data/etc/mono/config
  • LYNE_Data/il2cpp_data/etc/mono/mconfig/config.xml
    .xml
  • LYNE_Data/level0
  • LYNE_Data/level1
  • LYNE_Data/resources.assets
  • LYNE_Data/resources.assets.resS
  • LYNE_Data/resources.resource
  • LYNE_Data/sharedassets0.assets
  • LYNE_Data/sharedassets0.assets.resS
  • LYNE_Data/sharedassets1.assets
  • LYNE_Data/sharedassets1.assets.resS
  • UnityCrashHandler32.exe
    .exe windows x86


  • UnityPlayer.dll
    .dll windows x86


    Exports

  • _CommonRedist/vcredist/2010/installscript.vdf
  • _CommonRedist/vcredist/2010/vcredist_x64.exe
    .exe windows x86


  • _CommonRedist/vcredist/2010/vcredist_x86.exe
    .exe windows x86


  • ali213.bin
  • readme.txt
  • 开始游戏.exe
    .exe windows x86


  • a16d93019cdc5ad490cea5b93b1a2fd99d44400c9a6856e05077480416f4891e
    .rar
  • Loop Hero.exe
    .exe windows x86


  • SteamConfig.ini
  • ali213.bin
  • audiogroup1.dat
  • audiogroup2.dat
  • camp.ini
  • data.win
  • fonts/ADYS.otf
  • fonts/NotoSansJP-Medium.otf
  • fonts/NotoSansKR-Medium.otf
  • fonts/NotoSansSC-Medium.otf
  • fonts/NotoSansTC-Medium.otf
  • fonts/NotoSans_OFL.txt
  • fonts/Roboto-Bold.ttf
  • fonts/Roboto_LICENSE.txt
  • local/lang_chifull.ini
  • local/lang_chisimp.ini
  • local/lang_eng.ini
  • local/lang_esp.ini
  • local/lang_fra.ini
  • local/lang_ger.ini
  • local/lang_jap.ini
  • local/lang_kor.ini
  • local/lang_por.ini
  • local/lang_rus.ini
  • local/vocal/eng/DONTOPEN.txt
  • options.ini
  • steam_api.dll
    .dll windows x86


    Exports

  • variables.ini
  • 开始游戏.exe
    .exe windows x86


  • a7d5e877727f3b46844e53979d19ef4e19b69ef2a6fa023a9cf45f6058a294fa
    .exe windows x86


  • b71b047261de3921549a5a8ccfbc7c9387a8816679af80fa2940d84df1fba905
    .rar
  • bed48beda41d5907a18a862c298908d69d4acec1ab7c765649d68dd9e1b9246a
    .exe windows x86


  • c9ca33841bdd96c1f482148c2d0dd71bf1c5a24cf158d778db6e73cb353512c8
    .rar
  • dd1784f4b0e99ac55e82f833188ecf29af6b86c5c64956a3242aff29141e1893
    .exe windows x86


  • eeb8f3cd85140c0be44e6b42067918149aae33612d5067d0b90ee6a1a0b660cb
    .rar
  • f78a55a7b9940ef4ba56b2f21de49c798a257c54ae279271633d9af61d60541f
    .rar
  • feef4c98a336b938ebd35adc8f773e500842ab53ef87214a95588767211e4ea4
    .rar