Static task
static1
Behavioral task
behavioral1
Sample
EditLord/bin/Win64_Shipping_Client/EditLord.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
EditLord/bin/Win64_Shipping_Client/EditLord.dll
Resource
win10v2004-20220812-en
General
-
Target
7db2bb801f55af84c405bf3619cf13b2425753a62af9c429db14fde2bda824fc
-
Size
2.3MB
-
MD5
42c6f421630453235701b8a8dab9fd4c
-
SHA1
ddd40fa946c21edc7451fbe8f3bdcaa08547226e
-
SHA256
7db2bb801f55af84c405bf3619cf13b2425753a62af9c429db14fde2bda824fc
-
SHA512
7eb8bcd184c2a96183cb23f54609a3340423f49accc71058ea47cfec8ff8accb40896040419c5ed3ee54701e97165afce80c2e3a2515f5fe255f968af0102615
-
SSDEEP
49152:rd9ebrn7AkDe8Ji9MMR+bSfnOD3/4nK0vTKoTJ42GNltq5q1eKMMBmc:rd439hYj+buOD4nlHLIimmc
Malware Config
Signatures
Files
-
7db2bb801f55af84c405bf3619cf13b2425753a62af9c429db14fde2bda824fc.zip
-
Baijin Troops.zip.zip
-
Baijin Troops/ModuleData/baijin_skill_sets.xml
-
Baijin Troops/ModuleData/baijincrafting_pieces.xml
-
Baijin Troops/ModuleData/baijincrafting_templates.xml.xml
-
Baijin Troops/ModuleData/baijinheroes.xml
-
Baijin Troops/ModuleData/baijinitems/arm_armors.xml.xml
-
Baijin Troops/ModuleData/baijinitems/body_armors.xml.xml
-
Baijin Troops/ModuleData/baijinitems/head_armors.xml.xml
-
Baijin Troops/ModuleData/baijinitems/horses_and_others.xml.xml
-
Baijin Troops/ModuleData/baijinitems/leg_armors.xml.xml
-
Baijin Troops/ModuleData/baijinitems/shields.xml.xml
-
Baijin Troops/ModuleData/baijinitems/shoulder_armors.xml.xml
-
Baijin Troops/ModuleData/baijinitems/weapons.xml.xml
-
Baijin Troops/ModuleData/baijinlords.xml
-
Baijin Troops/ModuleData/baijinminbing.xml.xml
-
Baijin Troops/ModuleData/baijintroop.xml.xml
-
Baijin Troops/ModuleData/baijinweapon_descriptions.xml
-
Baijin Troops/ModuleData/moretroop.xml.xml
-
Baijin Troops/ModuleData/nanduzengqiang.xml.xml
-
Baijin Troops/ModuleData/ѡ滻/baijinheroes - ԭ汸.xml
-
Baijin Troops/ModuleData/ѡ滻/baijinheroes - ļͬʱ滻ͺ.xml
-
Baijin Troops/ModuleData/ѡ滻/baijinlords - Ů.xml
-
Baijin Troops/ModuleData/ѡ滻/baijinlords - ԭ汸.xml
-
Baijin Troops/ModuleData/ѡ滻/baijinlords - ļͬʱ滻ͺ.xml
-
Baijin Troops/ModuleData/ѡ滻/baijinlords - 桤Ů.xml
-
Baijin Troops/ModuleData/ѡ滻/nanduzengqiang - ԭ汸.xml.xml
-
Baijin Troops/ModuleData/ѡ滻/nanduzengqiang - 滻ǿĶ.xml.xml
-
Baijin Troops/SubModule.xml.xml
-
EditLordñ༭.zip.zip
-
EditLord/ModuleData/Languages/CNs/language_data.xml.xml
-
EditLord/ModuleData/Languages/CNs/strings.xml.xml
-
EditLord/ModuleData/Languages/EN/strings.xml.xml
-
EditLord/ModuleData/Languages/KEYS/module_strings.xml.xml
-
EditLord/SubModule.xml
-
EditLord/bin/Win64_Shipping_Client/EditLord.dll.dll windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
T7TroopUnlocker.zip.zip
-
һЩ˵.txt
-
ѡmod/BetterAttributes\вͬӳ.zip.zip
-
ѡmod/MarryAnyoneһ.zip.zip
-
ѡmod/MyLittleWarbandҵССսţģ.zip.zip
-
ѡmod/SpearReworkìж.zip.zip
-
ѡmod/ָŻ.zip.zip