General

  • Target

    Mod Installer.rar

  • Size

    33.2MB

  • MD5

    9e037f09ecd657d39aeae5e064cb190f

  • SHA1

    7ade3a7ac5d8f2f1c0a4ebdfb768842bf2ccaf25

  • SHA256

    f445d3662222075755bcadd7e8aea13830679f14cf290126bc024fa636a0982b

  • SHA512

    b067866f685bec6b2be0157dbf32692a0e5b8a486c8e3477c5e853fe56bda231fefd286b03e16d9efdc01cadbe5bab68ce1250e4f7b380466cbf84a9ce2cc871

  • SSDEEP

    786432:bUgF2j7RrqH9oYTzPSC2qZCkJQURBXDdkHBbmvCJS8Fn3GolxB6+IGo1irNBJ:bUgF23RNE6ywkOIzoBSqJh3Ggo1irNBJ

Score
9/10

Malware Config

Signatures

  • CoreEntity .NET Packer 1 IoCs

    A .NET packer called CoreEntity where it has embedded the payload as a BitMap object which is later decrypted.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Mod Installer.rar
    .rar
  • Mod Installer/Scarab.exe
    .exe windows x64

    dfa4b7e43927c69560b31967c9d4722b


    Headers

    Imports

    Exports

    Sections

  • Mod Installer/Scarab.pdb
  • Mod Installer/libHarfBuzzSharp.dll
    .dll windows x64

    24746f1e7a3f00835993ed8d16f1ef5f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Mod Installer/libSkiaSharp.dll
    .dll windows x64

    ffe661c0b06e35c1f2a6559c922e2926


    Code Sign

    Headers

    Imports

    Exports

    Sections