General

Malware Config

Signatures

Files

• SkyBlade.zip

  .zip

  Password: test

• SkyBlade/ModTools/CastleDB/castle.js

  .js
• SkyBlade/ModTools/Resources/Fog/0001.swatchbin
• SkyBlade/ModTools/Resources/Fog/0002.swatchbin
• SkyBlade/ModTools/Resources/Fog/0003.swatchbin
• SkyBlade/ModTools/Resources/Fog/0004.swatchbin
• SkyBlade/ModTools/Resources/FrameData.xml
• SkyBlade/ModTools/Resources/GroundLighting/base.swatchbin
• SkyBlade/ModTools/Resources/Lighting/0001.swatchbin
• SkyBlade/ModTools/Resources/Lighting/0002.swatchbin
• SkyBlade/ModTools/Resources/Lighting/0003.swatchbin
• SkyBlade/ModTools/Resources/Lighting/0004.swatchbin
• SkyBlade/ModTools/Resources/Motion/0001.swatchbin
• SkyBlade/ModTools/Resources/Motion/0002.swatchbin
• SkyBlade/ModTools/Resources/Shadows/0001.swatchbin
• SkyBlade/ModTools/Resources/Shadows/0002.swatchbin
• SkyBlade/ModTools/Resources/Shadows/0003.swatchbin
• SkyBlade/ModTools/Resources/Shadows/0004.swatchbin
• SkyBlade/ModTools/Resources/Shadows/0005.swatchbin
• SkyBlade/ModTools/Scripts/TechnicalDocumentation/bootstrap/css/bootstrap-responsive.css
• SkyBlade/ModTools/Scripts/TechnicalDocumentation/bootstrap/css/bootstrap-responsive.min.css
• SkyBlade/ModTools/Scripts/TechnicalDocumentation/bootstrap/css/bootstrap-select.min.css
• SkyBlade/ModTools/Scripts/TechnicalDocumentation/bootstrap/css/bootstrap.css
• SkyBlade/ModTools/Scripts/TechnicalDocumentation/bootstrap/css/bootstrap.min.css
• SkyBlade/ModTools/Scripts/TechnicalDocumentation/bootstrap/img/glyphicons-halflings-white.png

  .png
• SkyBlade/ModTools/Scripts/TechnicalDocumentation/bootstrap/img/glyphicons-halflings.png

  .png
• SkyBlade/ModTools/Scripts/TechnicalDocumentation/bootstrap/js/bootstrap-select.min.js

  .js
• SkyBlade/ModTools/Scripts/TechnicalDocumentation/bootstrap/js/bootstrap.js

  .js
• SkyBlade/ModTools/Scripts/TechnicalDocumentation/bootstrap/js/bootstrap.min.js

  .js
• SkyBlade/ModTools/Scripts/TechnicalDocumentation/favicon.ico
• SkyBlade/ModTools/Scripts/TechnicalDocumentation/haxe-nav.css
• SkyBlade/ModTools/Scripts/TechnicalDocumentation/highlighter.css
• SkyBlade/ModTools/Scripts/TechnicalDocumentation/highlighter.js

  .js
• SkyBlade/ModTools/Scripts/TechnicalDocumentation/index.html

  .html
• SkyBlade/ModTools/Scripts/TechnicalDocumentation/index.js

  .js
• SkyBlade/ModTools/Scripts/TechnicalDocumentation/jquery-1.9.1.min.js

  .js
• SkyBlade/ModTools/Scripts/TechnicalDocumentation/nav.js

  .js
• SkyBlade/ModTools/Scripts/TechnicalDocumentation/styles.css
• SkyBlade/ModTools/Scripts/TechnicalDocumentation/tool/mod/script/ExitNode.html

  .html
• SkyBlade/ModTools/Scripts/TechnicalDocumentation/tool/mod/script/LevelInfo.html

  .html
• SkyBlade/ModTools/Scripts/TechnicalDocumentation/tool/mod/script/LevelMob.html

  .html
• SkyBlade/ModTools/Scripts/TechnicalDocumentation/tool/mod/script/LevelProps.html

  .html
• SkyBlade/ModTools/Scripts/TechnicalDocumentation/tool/mod/script/Meta.html

  .html
• SkyBlade/ModTools/Scripts/TechnicalDocumentation/tool/mod/script/RoomNode.html

  .html
• SkyBlade/ModTools/Scripts/TechnicalDocumentation/tool/mod/script/SeededRandom.html

  .html
• SkyBlade/ModTools/Scripts/TechnicalDocumentation/tool/mod/script/Struct.html

  .html
• SkyBlade/ModTools/Scripts/TechnicalDocumentation/triangle-closed.png

  .png
• SkyBlade/ModTools/Scripts/TechnicalDocumentation/triangle-opened.png

  .png
• SkyBlade/Resources/cardIcons.png

  .png
• SkyBlade/Resources/cols.png

  .png
• SkyBlade/Resources/links.png

  .png
• SkyBlade/StartGame.exe

  .exe windows x86

  
  

  Code Sign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  02:66:ad:fa:17:63:89:d9:b4:30:1a:c8:7e:fd:6a:96

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  14-04-2021 00:00

  Not After

  16-04-2024 23:59

  Subject

  CN=Nvidia Corporation,OU=IT-MIS,O=Nvidia Corporation,L=Santa Clara,ST=California,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  38:63:de:f8

  Certificate

  Issuer

  CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net

  Not Before

  24-12-1999 17:50

  Not After

  24-07-2029 14:15

  Subject

  CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  58:da:13:ff:00:00:00:00:51:ce:0d:f7

  Certificate

  Issuer

  CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net

  Not Before

  22-07-2015 19:02

  Not After

  22-06-2029 19:32

  Subject

  CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  8d:ce:15:f3:a7:94:c5:87:00:00:00:00:55:92:33:f4

  Certificate

  Issuer

  CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

  Not Before

  22-07-2020 15:33

  Not After

  29-12-2030 16:29

  Subject

  CN=Entrust Timestamp Authority - TSA1,O=Entrust\, Inc.,L=Ottawa,ST=Ontario,C=CA

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  94:14:48:db:bb:c4:bf:8d:e4:c4:40:39:73:01:21:d3:15:d1:0c:9c:d8:23:4d:5b:0e:b2:10:28:31:72:5a:8a

  Signer

  Actual PE Digest

  94:14:48:db:bb:c4:bf:8d:e4:c4:40:39:73:01:21:d3:15:d1:0c:9c:d8:23:4d:5b:0e:b2:10:28:31:72:5a:8a

  Digest Algorithm

  sha256

  PE Digest Matches

  false

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Nvidia Corporation,OU=IT-MIS,O=Nvidia Corporation,L=Santa Clara,ST=California,C=US

  09-12-2021 10:18

  Valid: true

  Chain 1

  CN=Nvidia Corporation,OU=IT-MIS,O=Nvidia Corporation,L=Santa Clara,ST=California,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Sections

  GE4RtJ4C

  Size: 70KB - Virtual size: 144KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  JEkMqSqe

  Size: 202KB - Virtual size: 1.0MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  cMnPSFSk

  Size: 32KB - Virtual size: 64KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  flZbSMfS

  Size: 1024B - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  s0gc9Ubg

  Size: 7KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  ve125qzs

  Size: 312KB - Virtual size: 312KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .adata

  Size: - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE