`gy���&Eƪ��2R�l�ٹ�����A?���� *�.|���X�O⧄���O� ֹ1n6i��}_�viMX��odP �ֺ:�}� A��S4^��A=?�]��k"��0UE�ڵ2cC�ȋ{~Bg�_������mN�;�>e���뒳��T�����v(J��|Qw���u���� �˕%�7a�D �],��_U7�㷨�UQ���$��&�Ck�('�U��|7��\_9��p?D'zkR�d��F�`�7�{���:��~А9Z�J]�|G[�_�5 �9_��-��8 X���3p$�{����7�Y�Q�dְS/�b1�I\@,Tߠ���찞D7���0BFB��{���@����'K +2Z������ �1�r�jq\"Ӄ:��=��" ^��=� ɥG2)�U���DTy��qǙ�+�(h�7������;��Q)�T�e��\~���V�u;�����>�ϥ��P�єH5�0/�B�m�<���%��.��U�zP���y�wV�o��k>4 3���]}MGG|���:{��?2��W�� <���Ed�������!`����]�>w�Q��*�{AW��M�Z����@�[�Z�gՍ�$�����'Y�բ%&�p��+>ɫ�?R�H8h%Ԓ|�R$� �L �0���ۀN�� B�㏝�c��=����ͭ&��7�(��q�5�v� � ;�u����)�pސG��W��JI��ߣYE�7���D*#n7@�������x.����0N7j%;���A�� �t(��L�{ASU�G[�F��k�:a����{?(�N:i��p���A�e��Jj�L�U���5�j�Z�@S>�X·H)��Iӈ+����&5�x�a=c��I�s��w��P`�ѽ4(�������rӤn=�|S�Y��ސ́�V���/�������v�a��WR�\��i�/ �&��f;l��U�;n��� I���6SP���(���d�h� �K8������cLx�z�bI�? O�wG�8SH�ca�m$�H4]�����c�PO�5�!�D�mI��_��x,@R涒�/��Z�W��� � 3�m��V����G%rB_�9�=9a䧎��v�Lt@A7&l�$�Xb\��SPW?�>�2�:�ew6 �~��X��W(�f��UZ�ُ�9m�V�FR���ɅH�Q��-��vM�!$c��妽���! a� MS���{���=�J� %����p%7Af�xL@����:�l����Lq-=�,�u���$Lx�e��;����'�5<+�jU�<Su6PJ�˕���|j�f�g����,� ����7\���յ��i O����C��d���C|�S:PF4ݶ�Kv�)lT���¯�1X�B. y�C�7� �842���)�p�R߷��3�[HE�y������6Ɂ�LMOK��N�f�_AQ��Ш�� ��lrs#�v���8�R?���lG˿e�������]��G�䭥/<�X��}�:���z�E���S�'*.�3ݏ�A(�k��P�!�S��������~e�����ӊ�w�OV�M�yN��XcQ]�>h�C<B��V���,�M�G��G�����b3�(yҀ7�J?�7��� A`��r�*����>�Ќ3�{9;��0 ��d��,����!G1D����a덁��$g}�P�cXP>��Ѣn ��N���,��PH&ĸ+7�M����>ȲNMhq r>���x;ԥ<S����v=b�D0���x�0��e>�s)Y����x՞g���|�,S&ۯ_��2 �p��")��������XS��~�q��4�Ҝ�T,�����4���O�N!�ȷ��`��'Ym$v(�F�T���}�Uh�K��>�X���b�$껥��R�1>����Z�0�M!�ӧ�]���:|�a!�ba ����5���/�Q|dg4���1$W�Q���� 滊2vȞy)�y�E�Z(��KB{��G�]%3��U��sIJ:���o(#�M��h� t�1�\�YKD�1N�r�u�胸3S\�qE�۾P������$�x���8� gpl嗩$7M>����u�����C������dl)��Ѷ��� �H̭�k���&���X���x�fq@������/�O3d�����^F��t��9 ��ͼ):d8�x�8��d�Ȧ-���DBqd9ؕH�ìFS-j�p�=I�kY�u��5�E�*���;8w.q$,Y>�$cA&� )4���wG����딌���bM�.��-�x+�D��Cjٍ>c�$͋��#w���ZQ�-4j��ö�'��ڑҫ�&��Y���|�<�2Кy_��hd��츓N|zr@�ʘ:��@��(�x�B�|}[�@>�����v�Wp�%M�+��G�%��쏕&�+*)E�����3�.���"��ݎ^9�Т�f�\�"ŪWm����%�8���}�̒���$�R��Ʒ�����9�-�.%�����]��P�` ��� ���\�䶨5�P85q�?��������v}�� ����xJ���àGo.��J�QK��D ����U����@��V��*�C��[X��W�-���=ji�#J�����+a�<"���y��o"����07:����W�v]>����0Z]�F�#D�fP� J��D[�7� �손�>�{��^WM}�u��,�'Y�$�؛j��7k'U�L�U�).u)P]V7J���C-??D�]$�����(3��_4��b�Qa�,c���kvm�3طAڻ&�q0 ds+��s�eq^g���n��� ��J+Q��D�A�t>.����'Q~s[G�k���P[mw T;�aBl�K8��:m"q�|�p!E�@��壺ʮ�n`�23��v� D;Å�8 �2�$�yt}�c���$���3�)t��Y�i/\� ��e����B��4�;�9i�V�Y�;b~�q E�|Xo����ȩ�B�.���ٝb�2Xq�l��S�'���h���-�67�(��A�Ѐ�E��1}���$�-�����ݴ4��ӊ����c� �ݯ2��2�������\��b�'I[v�I���.�/⯫�b5������(bn�qI�*���Á�����W��9XI��錖�:��o�����ِ�b,�q��ց���Q�9̜.�xg:gp��^���G��٢�룙=`�b��]�_���*}V��&�l�q<�Vi��Q���+�M���}<餰W���O��c��^�b|� XِR.� %V����V{�c����:W/��I�y"�ލ!̤ ߛ�ixO)���O�9_����\%�� ���o�{˵�.bF��f���<�aO��j%�Ts�5Օ���ĽcKnK�l_�iR�Eb,i�|H��g�P ����)�D��5��U>c9s���K��a7?i�5q"z�_S�����/�U�\�f2Y��S!�_��͇�NSACj���s�}Q�m���O�O�N��K*�0����SP���IT�e\�ِ}�qp� /�H�[�˙4����}�N�8m���#�r;�t|��5�mK���~[���Ң��:�H�� �EWh��!����TPz�� �Eۿ�YQ!Tg��v'3���ٻeqP�@��4Fo ��iJ��EZ���uT�����1�P.:i����ZP��<�/��lj��z��+1-8���C*�܍��d�����R�1��r_��UL�Z� ����i/Y �O=� z]���ʴqKF����#��Q@[��jr��u\&�����-���?Ë��Z]_�� tH���
Static task
static1
General
-
Target
Genshin Impact v2.9.rar
-
Size
39.8MB
-
MD5
d790c0486d65cde584c50f6100874f51
-
SHA1
c0397972ac84118903a74cd918e1eb1529e8bbdf
-
SHA256
2844731b6cfded7a4bc2402195b91b556389184426936cbc4e89bec2dff1daee
-
SHA512
98045f0b6076cb61169088995378dec58f403118a8aee6028f921db4e0e4a7f2287a9a278a1f000d61eecd56ec246b6b2276c11cd65781a5a3fa0197c7403527
-
SSDEEP
786432:TgIfZGKDXejgxg+v0URojDYNqBOvLcynaVP1yUf4KSJdVknGk:EIEj4ogNqBOVaVSJdVs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/genshin_global.exe
Files
-
Genshin Impact v2.9.rar.rar
Password: gensh
-
genshin_global.exe.exe windows:4 windows x86
Password: gensh
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
Sections
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 37.3MB - Virtual size: 37.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
how to use.txt