Resubmissions

30/09/2023, 03:02

230930-djjf4agc41 7

30/09/2023, 03:01

230930-dhzrpagc4w 7

General

  • Target

    Papers Please.zip

  • Size

    37.6MB

  • MD5

    8570edcf40dc743029aa2624b8e4116f

  • SHA1

    a67afef6fe47de90934060111633257a5995b7f4

  • SHA256

    a9291742f6aec1f78060dcf2c7ca75d049616121ea703665e7a70730d5b8253d

  • SHA512

    2583e70cd9fdc5a103d1927030e858458e0044cb0644209ad150e1241f0997419976bded7ff34f00317c87cc3fa8bb3a3681cd280c29ba4f31004ffd5bc61a5d

  • SSDEEP

    786432:JXow7SDzLBJn3Zh+NRjqkqzEwL23ELTeVK2HoCfuX0upPFuP9KwY17OHnAJFzYyK:JXg/LfJhsRjq34p3QMoxX00Pk9zMOnGi

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • Papers Please.zip
    .zip
  • Papers Please/Extras/papers_please_poster/Poster24x36.png
    .png
  • Papers Please/Extras/papers_please_rulebook/Rulebook.pdf
    .pdf
  • Papers Please/Extras/republia_times_pc/EULA.txt
  • Papers Please/Extras/republia_times_pc/The Republia Times.exe
    .exe windows:5 windows x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86


    Headers

    Sections

  • Papers Please/Extras/six_degrees_of_sabotage_pc/EULA.txt
  • Papers Please/Extras/six_degrees_of_sabotage_pc/Six Degrees of Sabotage.exe
    .exe .ps1 windows:5 windows x86
  • Papers Please/PapersPlease.exe
    .exe windows:5 windows x86

    44de19c02b63d0236abda7d185ff4d7e


    Headers

    Imports

    Exports

    Sections

  • Papers Please/Redist/dxwebsetup.exe
    .exe windows:5 windows x86

    1494de9b53e05fc1f40cb92afbdd6ce4


    Code Sign

    Headers

    Imports

    Sections

  • Papers Please/Redist/vcredist_x86.exe
    .exe windows:5 windows x86

    a1f6f100bff4507a3332f3f0cdfc24f5


    Code Sign

    Headers

    Imports

    Sections

  • Papers Please/assets/Art.dat
  • Papers Please/assets/Inconsolata-Bold.ttf
  • Papers Please/assets/Version
  • Papers Please/assets/music/Death.ogg
  • Papers Please/assets/music/Theme.ogg
  • Papers Please/assets/music/Victory.ogg
  • Papers Please/assets/sound/booth-ambient.wav
  • Papers Please/assets/sound/booth-boom.wav
  • Papers Please/assets/sound/booth-intro.wav
  • Papers Please/assets/sound/border-alarm.wav
  • Papers Please/assets/sound/border-ambient.wav
  • Papers Please/assets/sound/border-boom.wav
  • Papers Please/assets/sound/border-bosshorn.wav
  • Papers Please/assets/sound/border-callguards.wav
  • Papers Please/assets/sound/border-foghorn.wav
  • Papers Please/assets/sound/border-guardshot0.wav
  • Papers Please/assets/sound/border-guardshot1.wav
  • Papers Please/assets/sound/border-guardshot2.wav
  • Papers Please/assets/sound/border-gunshot.wav
  • Papers Please/assets/sound/border-tranqshot.wav
  • Papers Please/assets/sound/border-truckwreck.wav
  • Papers Please/assets/sound/button-down.wav
  • Papers Please/assets/sound/button-drop.wav
  • Papers Please/assets/sound/button-up.wav
  • Papers Please/assets/sound/camera-flash.wav
  • Papers Please/assets/sound/car-driveby.wav
  • Papers Please/assets/sound/clothes-shuffle.wav
  • Papers Please/assets/sound/crowd-panic.wav
  • Papers Please/assets/sound/curtain-open.wav
  • Papers Please/assets/sound/filer-close.wav
  • Papers Please/assets/sound/filer-open.wav
  • Papers Please/assets/sound/grenade-roll.wav
  • Papers Please/assets/sound/heavy-dragstart.wav
  • Papers Please/assets/sound/heavy-drop.wav
  • Papers Please/assets/sound/inspect-close.wav
  • Papers Please/assets/sound/inspect-diagramon.wav
  • Papers Please/assets/sound/inspect-highlight.wav
  • Papers Please/assets/sound/inspect-interrogateon.wav
  • Papers Please/assets/sound/inspect-open.wav
  • Papers Please/assets/sound/inspect-unhighlight.wav
  • Papers Please/assets/sound/metal-dragstart0.wav
  • Papers Please/assets/sound/metal-dragstart1.wav
  • Papers Please/assets/sound/metal-dragstart2.wav
  • Papers Please/assets/sound/metal-dragstop0.wav
  • Papers Please/assets/sound/metal-dragstop1.wav
  • Papers Please/assets/sound/metal-dragstop2.wav
  • Papers Please/assets/sound/metal-drop.wav
  • Papers Please/assets/sound/metal-turnpage.wav
  • Papers Please/assets/sound/motorbike-rev.wav
  • Papers Please/assets/sound/paper-dragstart0.wav
  • Papers Please/assets/sound/paper-dragstart1.wav
  • Papers Please/assets/sound/paper-dragstart2.wav
  • Papers Please/assets/sound/paper-dragstop0.wav
  • Papers Please/assets/sound/paper-dragstop1.wav
  • Papers Please/assets/sound/paper-dragstop2.wav
  • Papers Please/assets/sound/paper-spit.wav
  • Papers Please/assets/sound/paper-turnpage0.wav
  • Papers Please/assets/sound/paper-turnpage1.wav
  • Papers Please/assets/sound/paper-turnpage2.wav
  • Papers Please/assets/sound/photo-print.wav
  • Papers Please/assets/sound/poison-apply.wav
  • Papers Please/assets/sound/printer-feed.wav
  • Papers Please/assets/sound/printer-line.wav
  • Papers Please/assets/sound/printer-tear.wav
  • Papers Please/assets/sound/rifle-cock.wav
  • Papers Please/assets/sound/rifle-keyinsert.wav
  • Papers Please/assets/sound/rifle-unlock.wav
  • Papers Please/assets/sound/shutter-drop.wav
  • Papers Please/assets/sound/shutter-rise.wav
  • Papers Please/assets/sound/speech-announce.wav
  • Papers Please/assets/sound/speech-bomber.wav
  • Papers Please/assets/sound/speech-entrant.wav
  • Papers Please/assets/sound/speech-inspector.wav
  • Papers Please/assets/sound/speech-out.wav
  • Papers Please/assets/sound/stamp-down.wav
  • Papers Please/assets/sound/stamp-up.wav
  • Papers Please/assets/sound/stampbar-close.wav
  • Papers Please/assets/sound/stampbar-open.wav
  • Papers Please/assets/sound/text-reveal0.wav
  • Papers Please/assets/sound/text-reveal1.wav
  • Papers Please/assets/sound/text-reveal2.wav
  • Papers Please/assets/sound/text-reveal3.wav
  • Papers Please/assets/sound/time-up.wav
  • Papers Please/assets/sound/timebomb-beep.wav
  • Papers Please/assets/sound/timebomb-wirecut.wav
  • Papers Please/assets/sound/traveler-breathein.wav
  • Papers Please/assets/sound/traveler-breatheout.wav
  • Papers Please/assets/sound/traveler-riflehit.wav
  • Papers Please/assets/sound/traveler-walkin.wav
  • Papers Please/assets/sound/traveler-walkout.wav
  • Papers Please/nme.ndll
    .dll windows:5 windows x86

    9c70858551fa0eb2d0475cd571a3080f


    Headers

    Imports

    Exports

    Sections

  • Papers Please/regexp.dll
    .dll windows:5 windows x86

    d683af93822d2164e901f657c2fc8e06


    Headers

    Imports

    Exports

    Sections

  • Papers Please/small-games.info.url
  • Papers Please/std.dll
    .dll windows:5 windows x86

    22d1f17b8e5cce56102c9be32b9c8a4e


    Headers

    Imports

    Exports

    Sections

  • Papers Please/steam_api.dll
    .dll windows:5 windows x86

    c8f50da9fc3d14d3498faa74ad01ca94


    Headers

    Imports

    Exports

    Sections

  • Papers Please/steamwrap.ndll
    .dll windows:5 windows x86

    21f90862ae9a1050881a530d3da067a3


    Headers

    Imports

    Exports

    Sections

  • Papers Please/uninstall.exe
    .exe windows:4 windows x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • Papers Please/zlib.dll
    .dll windows:5 windows x86

    f78ca0b3074e6ee91adc0a9eebcd4ba2


    Headers

    Imports

    Exports

    Sections