General

  • Target

    UndertaleDemo.zip

  • Size

    24.3MB

  • MD5

    e569a8f34b53d2e0abbc7f935346ddce

  • SHA1

    ffac74fab7d94a14165f5117c636eaed66cfc6d2

  • SHA256

    5ec38c1600152b720fd4d0700e8ea226083d40e0b4c4e13243a215738ccfb837

  • SHA512

    5a93dfe953ac52611be73fcb18f241e6fe8d5d2a803572d26c47c7084337855d0edeb1edd88d16ba07137526623a2fa13f4c4ea84d821436d70ec71288bf80d1

  • SSDEEP

    786432:r7Yr2pJg7plDEOdFfSNgGbsgMvflYO59+7wuJM6EFy:wrWg7fggU6yClFy

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • UndertaleDemo.zip
    .zip

    Password: eee

  • OpenAL32.dll
    .dll windows x86

    Password: eee

    f05a32afb245ec1cf9fedbd9a77a9197


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • UndertaleDemo.exe
    .exe windows x86

    Password: eee

    c3fc9b28e768e49e0d6c772792780b72


    Headers

    Imports

    Sections

  • data/monster/115
  • data/monster/132
  • data/monster/133
  • data/monster/14
  • data/monster/14_old
  • data/monster/167
  • data/monster/168
  • data/monster/169
  • data/monster/170
  • data/monster/171
  • data/monster/209
  • data/monster/210
  • instruction/0.png
    .png
  • instruction/1.png
    .png
  • instruction/10.png
    .png
  • instruction/11.png
    .png
  • instruction/12.png
    .png
  • instruction/13.png
    .png
  • instruction/14.png
    .png
  • instruction/15.png
    .png
  • instruction/16.png
    .png
  • instruction/17.png
    .png
  • instruction/18.png
    .png
  • instruction/19.png
    .png
  • instruction/2.png
    .png
  • instruction/3.png
    .png
  • instruction/4.png
    .png
  • instruction/5.png
    .png
  • instruction/6.png
    .png
  • instruction/7.png
    .png
  • instruction/8.png
    .png
  • instruction/9.png
    .png
  • instruction/Thumbs.db
  • instructionbooklet.html
  • msvcr100.dll
    .dll windows x86

    Password: eee

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • music/bad.ogg
  • music/battle1.ogg
  • music/boss1.ogg
  • music/cymbal.ogg
  • music/flowey.ogg
  • music/gameover.ogg
  • music/ghostbattle.ogg
  • music/grandpasemi.ogg
  • music/house1.ogg
  • music/house2.ogg
  • music/intronoise.ogg
  • music/menu1.ogg
  • music/menu2.ogg
  • music/menu3.ogg
  • music/menu4.ogg
  • music/papyrus.ogg
  • music/piano.ogg
  • music/prebattle1.ogg
  • music/ruins.ogg
  • music/silence.ogg
  • music/story.ogg
  • music/tension.ogg
  • music/toomuch.ogg
  • music/toriel.ogg
  • ogg.dll
    .dll windows x86

    Password: eee

    6735c42b0686b3434395406c0333d3d6


    Headers

    Imports

    Exports

    Sections

  • readme.txt
  • vorbis.dll
    .dll windows x86

    Password: eee

    0d587ec2cbc497b890ef951bae4cefb5


    Headers

    Imports

    Exports

    Sections

  • vorbisfile.dll
    .dll windows x86

    Password: eee

    679aecba2ddbc33e6b4ca43fb581d3d5


    Headers

    Imports

    Exports

    Sections

  • wrap_oal.dll
    .dll windows x86

    Password: eee

    64a644550f66c54650a8edab8350f3ae


    Code Sign

    Headers

    Imports

    Exports

    Sections