Resubmissions

15-07-2023 21:08

230715-zy9sgsbh22 4

15-07-2023 21:04

230715-zw1rsscf91 3

General

  • Target

    libwebp-7.zip

  • Size

    258.6MB

  • MD5

    d6686c4db6e2a6e9fdca77ec4601bd44

  • SHA1

    59ff19cb7ee8c7a6e33ed6a7f9b5cec119524bc7

  • SHA256

    13a895ce8db64f0859111a55b6544e6ddbd2267df49cb57450e3f4f1e03dba5c

  • SHA512

    2d26ae515066b55de0c2fdf5c8296571df9ea10681dc0a66bfee1589511d06c7cfaa35adc112d2614a61356110168e6d6efde18fad919673374bff1fe12a86db

  • SSDEEP

    6291456:ZKUQyPUV6t92N5BmPs2exonABvkSnrOwqyos0Ii3wT6efh3oPC:LQv6/2k01eAB8SrOwqZsNn6Ch30C

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • libwebp-7.zip
    .zip
  • NotoSans-Regular.ttf
  • NotoSansJP-Bold.otf
  • NotoSansJP-Regular.otf
  • NotoSansKR-Bold.otf
  • NotoSansKR-Regular.otf
  • NotoSansLao-Bold.ttf
  • NotoSansLao-Regular.ttf
  • NotoSansSC-Bold.otf
  • NotoSansSC-Regular.otf
  • NotoSansTC-Bold.otf
  • NotoSansTC-Regular.otf
  • NotoSansThai-Bold.ttf
  • NotoSansThai-Regular.ttf
  • SDL2.dll
    .dll windows x64

    d4c380c8f0a306c992e325e0a269b5a1


    Headers

    Imports

    Exports

    Sections

  • SDL2_image.dll
    .dll windows x64

    4dddb0e55addd0918013d39a1ac31b1a


    Headers

    Imports

    Exports

    Sections

  • SDL2_ttf.dll
    .dll windows x64

    ef86270e939bf16bd1425920bf67e512


    Headers

    Imports

    Exports

    Sections

  • audio/intro.wav
  • audio/sfx/CHAIN_Hit_01_mono.wav
  • audio/sfx/COINS_Rattle_03_mono.wav
  • audio/sfx/MUSIC_EFFECT_Orchestral_Brass_Positive_11_stereo.wav
  • audio/sfx/MUSIC_EFFECT_Orchestral_Brass_Positive_12_stereo.wav
  • audio/sfx/MUSIC_EFFECT_Space_Synth_Negative_01b_stereo.wav
  • audio/sfx/UI_Animate_Noise_Glide_Appear_stereo.wav
  • audio/sfx/UI_Animate_Noise_Glide_Disappear_stereo.wav
  • audio/sfx/UI_Click_Cut_mono.wav
  • audio/sfx/UI_Click_Metallic_Bright_mono.wav
  • audio/sfx/UI_Click_Subtle_mono.wav
  • audio/sfx/UI_Click_Tap_Hybrid_Muffled_mono.wav
  • audio/sfx/UI_Click_Tap_Knock_Subtle_Dark_mono.wav
  • audio/sfx/UI_Click_Tap_Short_mono.wav
  • audio/sfx/UI_Error_Double_Note_Down_Muffled_Short_stereo.wav
  • audio/sfx/UI_Toggle_Voice_Tripe_Note_Enable_stereo.wav
  • audio/sfx/WHOOSH_Fast_01_mono.wav
  • audio/sfx/WHOOSH_Fast_03_stereo.wav
  • audio/sfx/WHOOSH_Short_02_mono.wav
  • audio/sfx/ach1.wav
  • audio/sfx/bubble_effect_ultra.wav
  • audio/sfx/cmts.wav
  • audio/sfx/disabled.wav
  • audio/sfx/pop31.wav
  • audio/sfx/pop41.wav
  • audio/sfx/release.wav
  • audio/sfx/select.wav
  • audio/sfx/select_name.wav
  • audio/sfx/song_alpine.wav
  • audio/sfx/song_before-the-fall.wav
  • audio/sfx/song_bright-days-ahead.wav
  • audio/sfx/song_change-of-pace.wav
  • audio/sfx/song_exit.wav
  • audio/sfx/song_open-road.wav
  • audio/sfx/song_the-afterglow.wav
  • audio/sfx/tik-short.wav
  • audio/sfx/tik.wav
  • audio/sfx/ui_delete.wav
  • audio/sfx/ui_menu_button_beep_06.wav
  • audio/sfx/ui_menu_button_beep_12.wav
  • audio/sfx/ui_menu_button_error_message_01.wav
  • audio/sfx/ui_menu_popup_01.wav
  • audio/sfx/xo_lose.wav
  • data/BTChash.csv
  • data/BTCprice.csv
  • data/DEMOprice.csv
  • data/DOGEhash.csv
  • data/DOGEprice.csv
  • data/ETHhash.csv
  • data/ETHprice.csv
  • data/LTChash.csv
  • data/LTCprice.csv
  • data/XCHhash.csv
  • data/XCHprice.csv
  • data/XMRhash.csv
  • data/XMRprice.csv
  • data/names/Africa_1.txt
  • data/names/Africa_2.txt
  • data/names/Africa_3.txt
  • data/names/Asia_1.txt
  • data/names/Asia_2.txt
  • data/names/Asia_3.txt
  • data/names/EuropeEast_1.txt
  • data/names/EuropeEast_2.txt
  • data/names/EuropeEast_3.txt
  • data/names/EuropeWest_1.txt
  • data/names/EuropeWest_2.txt
  • data/names/EuropeWest_3.txt
  • data/names/MiddleEast_1.txt
  • data/names/MiddleEast_2.txt
  • data/names/MiddleEast_3.txt
  • data/names/NorthAmerica_1.txt
  • data/names/NorthAmerica_2.txt
  • data/names/NorthAmerica_3.txt
  • data/names/SouthAmerica_1.txt
  • data/names/SouthAmerica_2.txt
  • data/names/SouthAmerica_3.txt
  • data/shop_items.txt
  • game.exe
    .exe windows x64

    df6df901097f60dd1122c81b9338e624


    Headers

    Imports

    Sections

  • gfx/bigos.png
    .png
  • gfx/btcnote.png
    .png
  • gfx/cflogo.png
    .png
  • gfx/cursor-down.png
    .png
  • gfx/cursor-finger-clicked.png
    .png
  • gfx/cursor-finger.png
    .png
  • gfx/cursor-grab.png
    .png
  • gfx/cursor-hand.png
    .png
  • gfx/cursor-left.png
    .png
  • gfx/cursor-pointer.png
    .png
  • gfx/cursor-right.png
    .png
  • gfx/cursor-up.png
    .png
  • gfx/dino.png
    .png
  • gfx/hospital.png
    .png
  • gfx/main/atlas_list.txt
  • gfx/main/build.atlas
  • gfx/main/build.png
    .png
  • gfx/main/pack.atlas
  • gfx/main/pack.png
    .png
  • gfx/main/people.atlas
  • gfx/main/people.png
    .png
  • gfx/main/readme.txt
  • gfx/menu1.png
    .png
  • gfx/menu2.png
    .png
  • gfx/upsell.png
    .png
  • gfx/world-map.png
    .png
  • lang/cs.txt
  • lang/de.txt
  • lang/es.txt
  • lang/fi.txt
  • lang/fr.txt
  • lang/hu.txt
  • lang/it.txt
  • lang/ko.txt
  • lang/lo.txt
  • lang/nl.txt
  • lang/pl.txt
  • lang/pt_BR.txt
  • lang/ru.txt
  • lang/sk.txt
  • lang/sr.txt
  • lang/sv.txt
  • lang/th.txt
  • lang/tr.txt
  • lang/uk.txt
  • lang/vi.txt
  • lang/zh.txt
  • libfreetype-6.dll
    .dll windows x64

    6e5e3d5c78a614ccc13f79cb8f561b33


    Headers

    Imports

    Exports

    Sections

  • libjpeg-9.dll
    .dll windows x64

    0c2dc34190018f12ac94500a6ddd639a


    Headers

    Imports

    Exports

    Sections

  • libpng16-16.dll
    .dll windows x64

    1d243a681c53b17663865498e77cb5a2


    Headers

    Imports

    Exports

    Sections

  • libtiff-5.dll
    .dll windows x64

    07faa6c186f4189cca71ff04643bcd7e


    Headers

    Imports

    Exports

    Sections

  • libwebp-7.dll
    .dll windows x64

    f91d797666de5b6280ece58a34ceba9e


    Headers

    Imports

    Exports

    Sections

  • main.ttf
  • mods/active.txt
  • mods/demo/RVN.txt
  • mods/demo/RVNhash.txt
  • mods/demo/RVNprice.txt
  • mods/demo/ac_bolt.png
    .png
  • mods/demo/ac_off.png
    .png
  • mods/demo/ac_on.png
    .png
  • mods/demo/caseBottom.png
    .png
  • mods/demo/caseDeluxe.txt
  • mods/demo/caseDeluxeA.png
    .png
  • mods/demo/caseDeluxeB.png
    .png
  • mods/demo/caseDeluxeC.png
    .png
  • mods/demo/caseDeluxeD.png
    .png
  • mods/demo/caseDeluxeDesktop.txt
  • mods/demo/caseDeluxeE.png
    .png
  • mods/demo/caseDeluxeF.png
    .png
  • mods/demo/caseDeluxeG.png
    .png
  • mods/demo/caseDeluxeH.png
    .png
  • mods/demo/caseDeluxeTower.txt
  • mods/demo/caseLeft.png
    .png
  • mods/demo/caseRight.png
    .png
  • mods/demo/caseTop.png
    .png
  • mods/demo/commands.txt
  • mods/demo/cpuM.png
    .png
  • mods/demo/cpuM.txt
  • mods/demo/demoGPU-slotted.png
    .png
  • mods/demo/demoGPU.png
    .png
  • mods/demo/demoGPU.txt
  • mods/demo/deskAback.png
    .png
  • mods/demo/deskAfront.png
    .png
  • mods/demo/deskBback.png
    .png
  • mods/demo/deskBfront.png
    .png
  • mods/demo/deskCback.png
    .png
  • mods/demo/deskCfront.png
    .png
  • mods/demo/deskClassic.txt
  • mods/demo/deskDback.png
    .png
  • mods/demo/deskDfront.png
    .png
  • mods/demo/gen1.png
    .png
  • mods/demo/industrialAC.txt
  • mods/demo/mb-board.png
    .png
  • mods/demo/mb-slot-cpu.png
    .png
  • mods/demo/mb-slot-m2.png
    .png
  • mods/demo/mb-slot-pcie-text.png
    .png
  • mods/demo/mb-slot-ram.png
    .png
  • mods/demo/mboard4GPU.txt
  • mods/demo/ssdLinux8TB-slotted.png
    .png
  • mods/demo/ssdLinux8TB.png
    .png
  • mods/demo/ssdLinux8TB.txt
  • mods/files.txt
  • mods/identifiers.txt
  • mods/readme.txt
  • steam_api64.dll
    .dll windows x64

    c69c22b5a3698527f0d3c9618c3affbd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • zlib1.dll
    .dll windows x64

    9833fe070c600df4abfd312b6aa69324


    Headers

    Imports

    Exports

    Sections