Behavioral task
behavioral1
Sample
The Witcher 2 Assassins of Kings v1.2 Trainer + 5/witcher2_v1.2_trn+5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
The Witcher 2 Assassins of Kings v1.2 Trainer + 5/witcher2_v1.2_trn+5.exe
Resource
win10v2004-20220812-en
General
-
Target
23832aa9611d46ac991a1a15cbf2a44800d99e2b8ec83b26e635714b55f9991f
-
Size
23KB
-
MD5
95e84383f9076b54a8e9fc326b371ae0
-
SHA1
0629db0eafc4d9b4d6575b939494f31f3b14d56d
-
SHA256
23832aa9611d46ac991a1a15cbf2a44800d99e2b8ec83b26e635714b55f9991f
-
SHA512
ce1a19adf6c42c309b4c0095ea0f65f8a9169103222ed84fa083105b7c9770472f12f133d2f595dc5f421b958c4134a7c68bbb92dcee2fc1a8ccb80e831b61d6
-
SSDEEP
384:7qgRNLYDzHfWZtduQL1r9JmEmUaBN13Plj2nCcfGiThk+0+sJwuXkrbh1IGZAi0U:xEnfWZTBZ9UdzxPaCcfVk/5wuX+TZ75R
Malware Config
Signatures
-
resource yara_rule static1/unpack001/The Witcher 2 Assassins of Kings v1.2 Trainer + 5/witcher2_v1.2_trn+5.exe upx
Files
-
23832aa9611d46ac991a1a15cbf2a44800d99e2b8ec83b26e635714b55f9991f.zip
-
The Witcher 2 Assassins of Kings v1.2 Trainer + 5/dRoLLe.nfo
-
The Witcher 2 Assassins of Kings v1.2 Trainer + 5/witcher2_v1.2_trn+5.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 300KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE