Overview
overview
1Static
static
Warlock_an...ib.dll
windows7-x64
1Warlock_an...ib.dll
windows10-2004-x64
1Warlock_an...er.exe
windows7-x64
1Warlock_an...er.exe
windows10-2004-x64
1Warlock_an...ll.bat
windows7-x64
1Warlock_an...ll.bat
windows10-2004-x64
1Warlock_an...ll.ps1
windows7-x64
1Warlock_an...ll.ps1
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Warlock_and_Boobs_v0.350.2_Gallery_Mod/decrypter/RgssDecrypter.Lib.dll
Resource
win7-20221111-es
Behavioral task
behavioral2
Sample
Warlock_and_Boobs_v0.350.2_Gallery_Mod/decrypter/RgssDecrypter.Lib.dll
Resource
win10v2004-20221111-es
Behavioral task
behavioral3
Sample
Warlock_and_Boobs_v0.350.2_Gallery_Mod/decrypter/RgssDecrypter.exe
Resource
win7-20220812-es
Behavioral task
behavioral4
Sample
Warlock_and_Boobs_v0.350.2_Gallery_Mod/decrypter/RgssDecrypter.exe
Resource
win10v2004-20220812-es
Behavioral task
behavioral5
Sample
Warlock_and_Boobs_v0.350.2_Gallery_Mod/install.bat
Resource
win7-20220901-es
Behavioral task
behavioral6
Sample
Warlock_and_Boobs_v0.350.2_Gallery_Mod/install.bat
Resource
win10v2004-20221111-es
Behavioral task
behavioral7
Sample
Warlock_and_Boobs_v0.350.2_Gallery_Mod/install.ps1
Resource
win7-20220812-es
Behavioral task
behavioral8
Sample
Warlock_and_Boobs_v0.350.2_Gallery_Mod/install.ps1
Resource
win10v2004-20221111-es
General
-
Target
1641969_Warlock_and_Boobs_v0.350.2_Gallery_Mod.zip
-
Size
271KB
-
MD5
ff3c042171524e4392a804d963f9b37f
-
SHA1
81b981b0106aba98c38a766f3616270594dd2336
-
SHA256
d99a07a2146118e5c0a552eaa9aee84e643f5d1d38c4a6af30db25ef2a77e73f
-
SHA512
45f96de1b29f1eb26d2396abe2801fdc729437b2debe134f8879dac2c0236eceae95a1e89a2bdd033589958c79279105a720bad8a192ed18c8bbde34c73565db
-
SSDEEP
6144:CDaSbfpDhI4nmXxO7+a51ulCtnRWuYBzMKQD0m7LL6TMuX8:CLRDhIS4GdXtYxSRXv2MH
Malware Config
Signatures
Files
-
1641969_Warlock_and_Boobs_v0.350.2_Gallery_Mod.zip.zip
-
Warlock_and_Boobs_v0.350.2_Gallery_Mod/Data/Map013.rvdata2
-
Warlock_and_Boobs_v0.350.2_Gallery_Mod/Data/Map159.rvdata2
-
Warlock_and_Boobs_v0.350.2_Gallery_Mod/Data/MapInfos.rvdata2
-
Warlock_and_Boobs_v0.350.2_Gallery_Mod/decrypter/LICENSE
-
Warlock_and_Boobs_v0.350.2_Gallery_Mod/decrypter/RgssDecrypter.Lib.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Warlock_and_Boobs_v0.350.2_Gallery_Mod/decrypter/RgssDecrypter.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Warlock_and_Boobs_v0.350.2_Gallery_Mod/install.bat
-
Warlock_and_Boobs_v0.350.2_Gallery_Mod/install.ps1.ps1