General

  • Target

    FreezIns ENB V3.1 12-26-2017.rar

  • Size

    7.8MB

  • MD5

    cec8a4692d0cede2beaab367dfc8c23f

  • SHA1

    cb84bf0568950ba977d8a7db7ddb63392b12a2d0

  • SHA256

    f8710d7a983fbbe9a7e56df03e00f7df54421340988e9542d624f831cb62e0c9

  • SHA512

    9a1a9bb0958185a914c5d1a9a672d5d4ce09251d702cebf7e29e42500a7da493a096feb4510b082546b4a171d1c2785e27c19bd43633b7f05008e1ba734ff44b

  • SSDEEP

    196608:33LAJwz3IHFNolo8wavzZVstKjqojOiWjD08s2O:3bAJkYHFXqZVfjhjVWjDq2O

Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • FreezIns ENB V3.1 12-26-2017.rar
    .rar
  • FreezIn's ENB V3.1 12-25-2017/Clouds/Option A/READ THIS OR YOUR GAME WILL CRASH.txt
  • FreezIn's ENB V3.1 12-25-2017/Clouds/Option A/Replace your current particle.txd/particle.txd
  • FreezIn's ENB V3.1 12-25-2017/Clouds/Option B/Import cloud texture into your existing particle.txd/cloud1.png
    .png
  • FreezIn's ENB V3.1 12-25-2017/Clouds/Option B/Import cloud texture into your existing particle.txd/cloudhigh.png
    .png
  • FreezIn's ENB V3.1 12-25-2017/Clouds/Option B/Import cloud texture into your existing particle.txd/cloudmasked.png
    .png
  • FreezIn's ENB V3.1 12-25-2017/Copy to game folder/d3d9.dll
    .dll windows x86


    Headers

    Exports

    Sections

  • FreezIn's ENB V3.1 12-25-2017/Copy to game folder/enbeffect.fx
  • FreezIn's ENB V3.1 12-25-2017/Copy to game folder/enblocal.ini
  • FreezIn's ENB V3.1 12-25-2017/Copy to game folder/enbseries.ini
  • FreezIn's ENB V3.1 12-25-2017/Install this with modloader/Increased draw distance timecyc/timecyc.dat
  • FreezIn's ENB V3.1 12-25-2017/Install this with modloader/READ THIS.txt
  • FreezIn's ENB V3.1 12-25-2017/Install this with modloader/Vanilla draw distance timecyc ~ 1600/timecyc.dat
  • FreezIn's ENB V3.1 12-25-2017/READ OR DIE.txt
  • FreezIn's ENB V3.1 12-25-2017/Windows 8-10/README.txt
  • FreezIn's ENB V3.1 12-25-2017/Windows 8-10/gta_sa.exe
    .exe windows x86

    83fa14dca08906691b3ff3778b54b308


    Headers

    Imports

    Sections

  • FreezIn's ENB V3.1 12-25-2017/Windows 8-10/startup_RUN_AS_ADMIN.bat
    .bat .vbs
  • FreezIn's ENB V3.1 12-25-2017/Windows 8-10/startup_SP.bat
    .bat .vbs