Static task
static1
Behavioral task
behavioral1
Sample
Bin/Extensions/FpsUnlocker.exe
Resource
win10-20220812-en
Behavioral task
behavioral2
Sample
Bin/Extensions/FpsUnlocker.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
Nihon.exe
Resource
win10-20220812-en
Behavioral task
behavioral4
Sample
Nihon.exe
Resource
win10v2004-20220812-en
General
-
Target
Nihon.zip
-
Size
10.3MB
-
MD5
0a2d32c6bca9fa8e411f76771d6792bd
-
SHA1
17822c3c94ee1dfeb49d946157e91a3d921bd7e9
-
SHA256
bbbf9d3cc81a45f29ce4fb2b934195a7b65e76b1b1186377f62db1f11a48e7e1
-
SHA512
385ad8df8d94e36eb4f3d8e1f282af7ac3d58eb8ce6352147637a1a473b2231cf4f5c14619e626ff48f7a13ae4ee49cfc967917a0cdfabaab51ad31dbfc5b0d1
-
SSDEEP
196608:MM4Q2kqJvpPnm5YKis5nJTJzYZorWWUAlHcT/D70zPWzR+MfxA0imLxP7oAzvUqi:Ofm5Y4TJCorWu9g/P0zPWd+MfiBKJlUZ
Malware Config
Signatures
Files
-
Nihon.zip.zip
-
Bin/Extensions/FpsUnlocker.exe.exe windows x64
8a30acffa5d4e68c6f30f1c14d9a5f09
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
SetConsoleTextAttribute
GetStdHandle
GetProcessId
CreateMutexA
Sleep
GetLastError
CloseHandle
ReadProcessMemory
GetExitCodeProcess
Process32First
K32EnumProcessModulesEx
OpenProcess
CreateToolhelp32Snapshot
K32GetModuleFileNameExA
QueryFullProcessImageNameA
Process32Next
K32GetModuleInformation
IsWow64Process
VirtualQueryEx
GetCurrentProcess
SetConsoleTitleA
TerminateThread
FreeConsole
CreateThread
GetConsoleWindow
GetConsoleScreenBufferInfo
WriteConsoleW
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
HeapReAlloc
ReadConsoleW
ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetFileSizeEx
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
AllocConsole
WriteProcessMemory
HeapFree
HeapAlloc
WriteFile
GetModuleFileNameW
GetModuleHandleExW
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
GetFileInformationByHandle
SetEndOfFile
SetFilePointerEx
AreFileApisANSI
SetLastError
GetModuleHandleW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
FormatMessageW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
GetCPInfo
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
FreeLibrary
LoadLibraryExW
ExitProcess
RtlUnwind
user32
GetWindowTextA
MessageBoxA
EnumWindows
IsWindowVisible
GetSystemMenu
GetMessageA
CheckMenuRadioItem
DispatchMessageA
LoadCursorA
CreatePopupMenu
TrackPopupMenu
ShowWindow
DefWindowProcA
CreateWindowExA
TranslateMessage
LoadIconA
AppendMenuA
CheckMenuItem
PostQuitMessage
EnableMenuItem
RegisterClassExA
SetForegroundWindow
GetCursorPos
GetWindowThreadProcessId
gdi32
GetStockObject
shell32
ShellExecuteA
Shell_NotifyIconA
wininet
InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
Sections
.text Size: 259KB - Virtual size: 259KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Nihon.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 9.6MB - Virtual size: 9.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Nihon.exe.config
-
Privacy Policy.txt
-
Scripts/Aimbot 3.0.txt.js
-
Scripts/Aimbot.txt.js
-
Scripts/Alt+Print.txt
-
Scripts/Arsenal Kill All.txt
-
Scripts/Arsenal.txt
-
Scripts/ArsenalHitboxExtender.txt
-
Scripts/BRM5 Tp.txt
-
Scripts/Bacon Hub.txt
-
Scripts/BloxBurg.txt
-
Scripts/BloxHunt.txt
-
Scripts/Boys And Girls Hangout Gun.txt
-
Scripts/Btools.txt
-
Scripts/Build And Boat For Treasure.txt
-
Scripts/CBROKillAll.txt
-
Scripts/CC Aimbot V2.txt
-
Scripts/CC Aimbot.txt.js
-
Scripts/CMD-X.txt
-
Scripts/CTRL+Del.txt
-
Scripts/Click TP Tool.txt
-
Scripts/Coco Hub.txt
-
Scripts/CocoHub.txt
-
Scripts/Dark Hub.txt
-
Scripts/Dex Explorer v2.txt.js
-
Scripts/Dex Explorer.txt.js
-
Scripts/DexV1.txt
-
Scripts/DexV4.txt
-
Scripts/DivineSisters.txt
-
Scripts/EclipseMM2.txt
-
Scripts/FPSBoost.txt
-
Scripts/Fathom Hub.txt
-
Scripts/Flee The Facility.txt
-
Scripts/Full Bright.txt
-
Scripts/Function Benchmark.txt
-
Scripts/Globals Script.txt
-
Scripts/Infinite Jump.txt
-
Scripts/Infinite Yield.txt
-
Scripts/Invisible Fling.txt
-
Scripts/Jailbreak.txt
-
Scripts/Kraken Hub.txt
-
Scripts/LucidityMM2.txt
-
Scripts/MM2.txt
-
Scripts/MM2Autofarm.txt
-
Scripts/Mad City 2.txt.js
-
Scripts/Mad City GUI.txt
-
Scripts/Mad City.txt
-
Scripts/Mad Emotes.txt
-
Scripts/MeepCity Plus.txt
-
Scripts/MheeHub.txt
-
Scripts/Murder Mystery 2.txt
-
Scripts/NoClip.txt
-
Scripts/NoClipKeybind.txt
-
Scripts/OpFinality.txt
-
Scripts/Orca Hub.txt
-
Scripts/Ori Hub.txt
-
Scripts/Owl Hub.txt
-
Scripts/OxieHub.txt.js
-
Scripts/Phantom Forces.txt
-
Scripts/Prison Life.txt
-
Scripts/Prisonware.txt
-
Scripts/Remote Spy.txt
-
Scripts/Reviz Admin.txt
-
Scripts/SharkBite.txt
-
Scripts/Simple BloxBurg Auto Farm.txt
-
Scripts/TopKek V3.txt.js
-
Scripts/UnitClassifiedGUI.txt
-
Scripts/ViiPer Hub.txt
-
Scripts/Walk On Walls.txt
-
Scripts/ZyrexHub.txt
-
Scripts/oofNotoriety.txt