CreateDecoder
CreateEncoder
CreateObject
GetHandlerProperty
GetHandlerProperty2
GetHashers
GetIsArc
GetMethodProperty
GetNumberOfFormats
GetNumberOfMethods
SetCaseSensitive
SetCodecs
SetLargePageMode
Overview
overview
3Static
static
3Rookie.rar
windows10-2004-x64
3Rookie/debuglog.txt
windows10-2004-x64
1Rookie/meta.7z
windows10-2004-x64
3Rookie/not...QU.txt
windows10-2004-x64
1Rookie/not...wn.txt
windows10-2004-x64
1Rookie/not...F).txt
windows10-2004-x64
1Rookie/not...F).txt
windows10-2004-x64
1Rookie/not...RP.txt
windows10-2004-x64
1Rookie/not...ne.txt
windows10-2004-x64
1Rookie/not...RP.txt
windows10-2004-x64
1Rookie/not...ef.txt
windows10-2004-x64
1Rookie/not...C).txt
windows10-2004-x64
1Rookie/not...wn.txt
windows10-2004-x64
1Rookie/not...wn.txt
windows10-2004-x64
1Rookie/not...wn.txt
windows10-2004-x64
1Rookie/not...ef.txt
windows10-2004-x64
1Rookie/not...ef.txt
windows10-2004-x64
1Rookie/not...CH.txt
windows10-2004-x64
1Rookie/not...QU.txt
windows10-2004-x64
1Rookie/not...ef.txt
windows10-2004-x64
1Rookie/not...ef.txt
windows10-2004-x64
1Rookie/not...QU.txt
windows10-2004-x64
1Rookie/not...wn.txt
windows10-2004-x64
1Rookie/not...QU.txt
windows10-2004-x64
1Rookie/not...QU.txt
windows10-2004-x64
1Rookie/nou...st.txt
windows10-2004-x64
1Rookie/rcl...E.html
windows10-2004-x64
1Rookie/rcl...ME.txt
windows10-2004-x64
1Rookie/rcl...og.txt
windows10-2004-x64
1Rookie/rcl...sh.txt
windows10-2004-x64
1Rookie/rcl...ne.ps1
windows10-2004-x64
1Rookie/rcl...ne.exe
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Rookie.rar
Resource
win10v2004-20230220-en
Behavioral task
behavioral2
Sample
Rookie/debuglog.txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
Rookie/meta.7z
Resource
win10v2004-20230220-en
Behavioral task
behavioral4
Sample
Rookie/notes/Apollo 11 v22+2.3 -QU.txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
Rookie/notes/Axegend v1+3.0.5 -unknown.txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral6
Sample
Rookie/notes/Beat Saber v406+1.25.1 -VRP (ALL DLC + BMBF).txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
Rookie/notes/Beat Saber v490+1.27.0 -VRP (ALL DLC + BMBF).txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral8
Sample
Rookie/notes/Captain Hardcore(18+) v1+0.4 -VRP.txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
Rookie/notes/Cherry VX v1+0.94 -f95zone.txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral10
Sample
Rookie/notes/Chupa Chupa VR v1+2.0 -VRP.txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
Rookie/notes/Doom3Quest v25+1.2.1 -DrBeef.txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral12
Sample
Rookie/notes/Epic Roller Coasters v5182+7.1.80 -QU (DLC).txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
Rookie/notes/Escape! v2+1.01 -unknown.txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral14
Sample
Rookie/notes/Fast Formula v1+1.0 -unknown.txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral15
Sample
Rookie/notes/Fly XR v1+0.01b -unknown.txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral16
Sample
Rookie/notes/Half-Life 1 VR - Blue Shift v27+1.4.9 -DrBeef.txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
Rookie/notes/Half-Life 1 VR - Opposing Force v27+1.4.9 -DrBeef.txt
Resource
win10v2004-20230221-en
Behavioral task
behavioral18
Sample
Rookie/notes/Madrid Noir v120+1.1.2 -ITCH.txt
Resource
win10v2004-20230221-en
Behavioral task
behavioral19
Sample
Rookie/notes/Moss v22600+1.0.0.22600 -QU.txt
Resource
win10v2004-20230221-en
Behavioral task
behavioral20
Sample
Rookie/notes/Quake3Quest v4+1.0.0 -DrBeef.txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral21
Sample
Rookie/notes/Return to Castle Wolfenstein v49+1.3.0 -DrBeef.txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral22
Sample
Rookie/notes/The Wizards v14+1.11 -QU.txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral23
Sample
Rookie/notes/Together VR v2+1.5 -unknown.txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral24
Sample
Rookie/notes/Trover Saves the Universe v21+1.0 -QU.txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral25
Sample
Rookie/notes/Virtual Virtual Reality v11+1.8.13 -QU.txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral26
Sample
Rookie/nouns/blacklist.txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral27
Sample
Rookie/rclone/README.html
Resource
win10v2004-20230221-en
Behavioral task
behavioral28
Sample
Rookie/rclone/README.txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral29
Sample
Rookie/rclone/git-log.txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral30
Sample
Rookie/rclone/hash.txt
Resource
win10v2004-20230221-en
Behavioral task
behavioral31
Sample
Rookie/rclone/rclone.ps1
Resource
win10v2004-20230220-en
Behavioral task
behavioral32
Sample
Rookie/rclone/rclone.exe
Resource
win10v2004-20230220-en
Target
Rookie.zip
Size
170.1MB
MD5
6075a0cb5edab2627778c6bd4cef81b0
SHA1
8c9d3180aa0fda9913b8c36241d7252a2a00f6c9
SHA256
595d85d0f556fe76e3795b95efc8a7e572b1cd459e7edf0e1f63739118cffaf2
SHA512
2346b30595711a2ec4a7b8ac74d43a9b02abc628e7e62ade592a2820e220b0609b172ddfea001ead0bc0f916f591e6ffa767a76fa60cf35304ca35ee03d45f91
SSDEEP
3145728:q5sNJBadpxED92+QpDOdebFDaRlryqzEis7vMboi+IcyBJp0EZeCgcUeWq:q5sXkdrO1QpydebsHWMmyBJSEGvq
Checks for missing Authenticode signature.
resource |
---|
unpack001/Rookie/7z.dll |
unpack001/Rookie/7z.exe |
unpack001/Rookie/AndroidSideloader v2.19-beta.exe |
unpack001/Rookie/Sideloader Launcher.exe |
unpack001/Rookie/rclone/rclone.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
SysStringLen
VariantClear
VariantCopy
SysAllocString
SysAllocStringByteLen
SysFreeString
SysAllocStringLen
CharUpperW
CharPrevExA
SystemFunction036
strcat
strcpy
memset
realloc
free
malloc
__CxxFrameHandler
strlen
strchr
strstr
_CxxThrowException
wcscmp
strcmp
memmove
memcpy
memcmp
_purecall
exit
__C_specific_handler
_beginthreadex
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
__dllonexit
_onexit
_initterm
InitializeCriticalSection
ReleaseSemaphore
CreateSemaphoreW
ResetEvent
Sleep
CreateEventW
SetThreadAffinityMask
ResumeThread
WaitForSingleObject
SetEvent
GetModuleHandleW
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
QueryPerformanceCounter
GetOEMCP
FileTimeToLocalFileTime
DeleteCriticalSection
LocalFileTimeToFileTime
WaitForMultipleObjects
LeaveCriticalSection
EnterCriticalSection
GetSystemTimeAsFileTime
FileTimeToDosDateTime
DosDateTimeToFileTime
GlobalMemoryStatusEx
GetSystemInfo
GetCurrentProcess
GetProcessAffinityMask
CompareFileTime
GetLastError
MultiByteToWideChar
WideCharToMultiByte
CloseHandle
GetProcAddress
GetCurrentProcessId
GetTickCount
GetCurrentThreadId
GetModuleHandleA
CreateDecoder
CreateEncoder
CreateObject
GetHandlerProperty
GetHandlerProperty2
GetHashers
GetIsArc
GetMethodProperty
GetNumberOfFormats
GetNumberOfMethods
SetCaseSensitive
SetCodecs
SetLargePageMode
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
SysStringLen
VariantClear
VariantCopy
SysAllocString
SysStringByteLen
SysFreeString
SysAllocStringLen
CharUpperW
OpenProcessToken
GetFileSecurityW
SetFileSecurityW
RegOpenKeyExW
RegQueryValueExW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegCloseKey
_exit
_c_exit
_XcptFilter
_onexit
__dllonexit
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
__C_specific_handler
_beginthreadex
_isatty
memcmp
_purecall
memset
strlen
wcsstr
_cexit
wcscmp
strcmp
memmove
fflush
fputc
fputs
_iob
fgetc
fclose
free
_CxxThrowException
malloc
__CxxFrameHandler
memcpy
__initenv
exit
__getmainargs
_initterm
__setusermatherr
_commode
_fmode
__set_app_type
SetThreadAffinityMask
CreateEventW
SetEvent
InitializeCriticalSection
GetVersionExW
CloseHandle
ResumeThread
WaitForSingleObject
VirtualFree
VirtualAlloc
GetConsoleMode
SetConsoleMode
SetFileApisToOEM
GetCommandLineW
GetConsoleScreenBufferInfo
SetConsoleCtrlHandler
GetProcessTimes
QueryPerformanceFrequency
QueryPerformanceCounter
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetProcessAffinityMask
OpenEventW
UnmapViewOfFile
MapViewOfFile
OpenFileMappingW
GetStdHandle
GetSystemTimeAsFileTime
FileTimeToDosDateTime
IsProcessorFeaturePresent
GlobalMemoryStatusEx
GetSystemInfo
GetProcessAffinityMask
FileTimeToLocalFileTime
FileTimeToSystemTime
CompareFileTime
GetCurrentProcess
GetDiskFreeSpaceW
SetEndOfFile
WriteFile
ReadFile
SetFilePointer
GetFileSize
DeviceIoControl
GetLastError
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
LoadLibraryExW
LoadLibraryW
GetModuleFileNameW
LocalFree
FormatMessageW
SetFileTime
CreateFileW
SetFileAttributesW
RemoveDirectoryW
MoveFileW
GetProcAddress
GetModuleHandleW
CreateDirectoryW
DeleteFileW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetTempPathW
SetLastError
GetCurrentProcessId
GetTickCount
GetCurrentThreadId
GetFileInformationByHandle
FindClose
FindFirstFileW
FindNextFileW
GetModuleHandleA
GetFileAttributesW
GetLogicalDriveStringsW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateIoCompletionPort
CreateThread
CreateWaitableTimerA
CreateWaitableTimerExW
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsW
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetLastError
GetProcAddress
GetProcessAffinityMask
GetQueuedCompletionStatusEx
GetStartupInfoA
GetStdHandle
GetSystemDirectoryA
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadContext
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
PostQueuedCompletionStatus
QueryPerformanceCounter
ResumeThread
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetConsoleCtrlHandler
SetErrorMode
SetEvent
SetProcessPriorityBoost
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SuspendThread
SwitchToThread
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WriteConsoleW
WriteFile
__C_specific_handler
lstrlenA
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_beginthread
_cexit
_errno
_fmode
_initterm
_onexit
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf
_cgo_dummy_export
go_hostAccess
go_hostChflags
go_hostChmod
go_hostChown
go_hostCreate
go_hostDestroy
go_hostFgetattr
go_hostFlush
go_hostFsync
go_hostFsyncdir
go_hostFtruncate
go_hostGetattr
go_hostGetxattr
go_hostInit
go_hostLink
go_hostListxattr
go_hostMkdir
go_hostMknod
go_hostOpen
go_hostOpendir
go_hostRead
go_hostReaddir
go_hostReadlink
go_hostRelease
go_hostReleasedir
go_hostRemovexattr
go_hostRename
go_hostRmdir
go_hostSetchgtime
go_hostSetcrtime
go_hostSetxattr
go_hostStatfs
go_hostSymlink
go_hostTruncate
go_hostUnlink
go_hostUtimens
go_hostWrite
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ