General

  • Target

    ZEROWARE (new build 2020) (1).rar

  • Size

    1.7MB

  • MD5

    fdf0fde8d943c49a49599e29ae798a34

  • SHA1

    d1546c0ff3c1eccd1387f9cd4393a3c4c7b1d4ed

  • SHA256

    537bb76ab602ae445c3789f8a18d290cf82ae7c61f62bc43a04602b3240ffa4e

  • SHA512

    844212133bdce6e73e9014dad74992f3cce29804e4d5e8b86d704af82c1ea1ba08e6865251e492aac3588b6265af2b1eecb555c8747b8d5d629773adfa4b9e95

  • SSDEEP

    49152:rgh/AHEmLnwALQukJH8kNFGL1wbWVvATkQJkOu8:84HEUtEukJHJy1sQYTk+9

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • ZEROWARE (new build 2020) (1).rar
    .rar
  • ZEROWARE/Zero.dll
    .dll windows x86

    baa93d47220682c04d92f7797d9224ce


    Headers

    Imports

    Sections

  • ZEROWARE/Zero.hl.exe
    .exe windows x86


    Headers

    Sections

  • ZEROWARE/Zero.ini
  • ZEROWARE/Zero_orignal.dll
    .dll windows x86

    09d0478591d4f788cb3e5ea416c25237


    Headers

    Imports

    Sections

  • ZEROWARE/Zero_orignal.dll.log
  • ZEROWARE/config/fps+.cfg
  • ZEROWARE/config/fps-.cfg
  • ZEROWARE/config/knifebot_attack+.cfg
  • ZEROWARE/config/knifebot_attack-.cfg
  • ZEROWARE/config/legit.cfg
  • ZEROWARE/config/psilent.cfg
  • ZEROWARE/config/rage.cfg
  • ZEROWARE/config/zero.cfg
  • ZEROWARE/injmthd.ini
  • ZEROWARE/k l a.txt
  • ZEROWARE/ways/$1000$/ct
  • ZEROWARE/ways/$1000$/t
  • ZEROWARE/ways/$2000$/ct
  • ZEROWARE/ways/$2000$/t
  • ZEROWARE/ways/$5000$/ct
  • ZEROWARE/ways/$5000$/t
  • ZEROWARE/ways/35hp_2/ct
  • ZEROWARE/ways/35hp_2/ct_long
  • ZEROWARE/ways/35hp_2/new
  • ZEROWARE/ways/35hp_2/t
  • ZEROWARE/ways/35hp_2/t_long
  • ZEROWARE/ways/aim_deagle/ct
  • ZEROWARE/ways/aim_deagle/t
  • ZEROWARE/ways/aim_headshot/ct
  • ZEROWARE/ways/aim_headshot/t
  • ZEROWARE/ways/aim_map_usp/ct
  • ZEROWARE/ways/aim_map_usp/t
  • ZEROWARE/ways/awp_dust/ct
  • ZEROWARE/ways/awp_dust/t
  • ZEROWARE/ways/awp_india/ct
  • ZEROWARE/ways/awp_india/t
  • ZEROWARE/ways/awp_map/ct
  • ZEROWARE/ways/awp_map/t
  • ZEROWARE/ways/awp_rooftops/ct
  • ZEROWARE/ways/cs_assault/ct
  • ZEROWARE/ways/cs_assault/t
  • ZEROWARE/ways/cs_italy/ct
  • ZEROWARE/ways/cs_italy/t
  • ZEROWARE/ways/de_dust2/ct
  • ZEROWARE/ways/de_dust2/new
  • ZEROWARE/ways/de_dust2/t
  • ZEROWARE/ways/de_dust2/tt
  • ZEROWARE/ways/de_dust2/tt_all
  • ZEROWARE/ways/de_dust2_2x2/ct
  • ZEROWARE/ways/de_dust2_2x2/new
  • ZEROWARE/ways/de_dust2_2x2/t
  • ZEROWARE/ways/de_dust2_2x2/tt_all
  • ZEROWARE/ways/de_dust2x2/ct
  • ZEROWARE/ways/de_dust2x2/t
  • ZEROWARE/ways/de_dust_32/ct
  • ZEROWARE/ways/de_inferno/ct
  • ZEROWARE/ways/de_inferno/new
  • ZEROWARE/ways/de_inferno/t
  • ZEROWARE/ways/de_inferno_2x2/t
  • ZEROWARE/ways/de_mirage/new
  • ZEROWARE/ways/de_nuke/ct
  • ZEROWARE/ways/de_nuke/t
  • ZEROWARE/ways/de_train/ct
  • ZEROWARE/ways/de_train/new
  • ZEROWARE/ways/de_train/t
  • ZEROWARE/ways/de_westwood/ct
  • ZEROWARE/ways/de_westwood/t
  • ZEROWARE/ways/fy_pool_day/ct
  • ZEROWARE/ways/fy_pool_day/t
  • ZEROWARE/ways/hns_floppytown/ct
  • ZEROWARE/ways/hvh_lite2/new