General

  • Target

    SHADOW-BYPASS 2.8.zip

  • Size

    20.6MB

  • MD5

    8391733a6754d0578c517cf92d914a8b

  • SHA1

    a16aeb137e49e05ee085c9eb43cfa24199db403b

  • SHA256

    fd73b30a5225b5960e1b9f9d5d9e09d0b13acd0bdbe1dcb8265f3c235590cf06

  • SHA512

    2f9f4faf60031efa50aaf933fb37a3a1159302d8fd274d7335792d3ea4482f3ae84ad630f5eefb7979d04f19dbad7f70d40bdbdb56df42aeada2d89d529bbca6

  • SSDEEP

    393216:Fx/lDj7MG1xUBMFS4gPnd5AiHiyx65D9LkFcLrO:f/lDXhxPgPnMiHivjTrO

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • SHADOW-BYPASS 2.8.zip
    .zip
  • SHADOW-BYPASS 2.8/BYPASS/Memlib.dll
    .dll windows:6 windows x86

    d6fe572a2067ff4ea118bd72ce0d5458


    Headers

    Imports

    Exports

    Sections

  • SHADOW-BYPASS 2.8/BYPASS/Shadow Bypass_protected.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • SHADOW-BYPASS 2.8/SETUP/Clean_Gameloop.bat
  • SHADOW-BYPASS 2.8/SETUP/Gameloop 32 Bit.exe
    .exe windows:5 windows x86

    0e2b0c48d5c7e0af756a1d45ad1efe66


    Headers

    Imports

    Sections

  • SHADOW-BYPASS 2.8/SETUP/Gameloop 64 Bit.exe
    .exe windows:5 windows x86

    0e2b0c48d5c7e0af756a1d45ad1efe66


    Headers

    Imports

    Sections

  • SHADOW-BYPASS 2.8/SETUP/How To Use .txt
  • SHADOW-BYPASS 2.8/SETUP/Kill_Gameloop.bat