General

  • Target

    papers-please-0-5-13-beta-en-win.zip

  • Size

    12.3MB

  • MD5

    afced39b6b8554f73de1b9fafa60609d

  • SHA1

    a2eb27cf00f285e33a681445b839f9106cd9dd08

  • SHA256

    53c9c17e3fb5162993a372dcbfe1be327b5a1d06fc68dbfa2d2a5243cdfd0b8d

  • SHA512

    8bd0aa8124f267fb163306227792f96a7d6e8eca074b92a417c51d91af93e948926a43ca68ec94dd0a0afb1c81e32b49b2dbb302e4e63621e8c58a7b3ad19f8e

  • SSDEEP

    393216:1k4w4zkhxZUfzyzm5OAB+iiybKvjl5JZhM+aFUaSm:yv4zoxZUbyz2BziybUM95

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • papers-please-0-5-13-beta-en-win.zip
    .zip
  • PapersPlease.exe
    .exe windows:5 windows x86

    241b267ea8e1a9f570631f74ba6a7ca8


    Headers

    Imports

    Exports

    Sections

  • Readme.txt
  • assets/Art.dat
  • assets/Inconsolata-Bold.ttf
  • assets/Version
  • assets/music/Theme.ogg
  • assets/sound/booth-ambient.wav
  • assets/sound/booth-intro.wav
  • assets/sound/border-alarm.wav
  • assets/sound/border-ambient.wav
  • assets/sound/border-boom.wav
  • assets/sound/border-guardshot0.wav
  • assets/sound/border-guardshot1.wav
  • assets/sound/border-guardshot2.wav
  • assets/sound/border-gunshot.wav
  • assets/sound/button-down.wav
  • assets/sound/button-drop.wav
  • assets/sound/button-up.wav
  • assets/sound/camera-flash.wav
  • assets/sound/clothes-shuffle.wav
  • assets/sound/coin-dragstart.wav
  • assets/sound/coin-dragstop.wav
  • assets/sound/coin-drop.wav
  • assets/sound/curtain-open.wav
  • assets/sound/filer-close.wav
  • assets/sound/filer-open.wav
  • assets/sound/inspect-close.wav
  • assets/sound/inspect-diagramon.wav
  • assets/sound/inspect-highlight.wav
  • assets/sound/inspect-interrogateon.wav
  • assets/sound/inspect-open.wav
  • assets/sound/inspect-unhighlight.wav
  • assets/sound/paper-dragstart0.wav
  • assets/sound/paper-dragstart1.wav
  • assets/sound/paper-dragstart2.wav
  • assets/sound/paper-dragstop0.wav
  • assets/sound/paper-dragstop1.wav
  • assets/sound/paper-dragstop2.wav
  • assets/sound/paper-spit.wav
  • assets/sound/paper-turnpage0.wav
  • assets/sound/paper-turnpage1.wav
  • assets/sound/paper-turnpage2.wav
  • assets/sound/photo-print.wav
  • assets/sound/printer-feed.wav
  • assets/sound/printer-line.wav
  • assets/sound/printer-tear.wav
  • assets/sound/shutter-drop.wav
  • assets/sound/shutter-rise.wav
  • assets/sound/speech-announce.wav
  • assets/sound/speech-entrant.wav
  • assets/sound/speech-inspector.wav
  • assets/sound/stamp-down.wav
  • assets/sound/stamp-up.wav
  • assets/sound/stampbar-close.wav
  • assets/sound/stampbar-open.wav
  • assets/sound/text-reveal0.wav
  • assets/sound/text-reveal1.wav
  • assets/sound/text-reveal2.wav
  • assets/sound/text-reveal3.wav
  • assets/sound/traveler-breathein.wav
  • assets/sound/traveler-breatheout.wav
  • assets/sound/traveler-walkin.wav
  • assets/sound/traveler-walkout.wav
  • mods/MakingMods.txt
  • mods/sample.ppmod
    .zip
  • __MACOSX/sample/._.DS_Store
  • __MACOSX/sample/._Title.png
  • sample/.DS_Store
  • sample/Title.png
    .png
  • sample/_mod.xml
  • mods/sample/Title.png
    .png
  • mods/sample/_mod.xml
  • nme.ndll
    .dll windows:5 windows x86

    04fb966d82a44788ef9bce514e54bf6e


    Headers

    Imports

    Exports

    Sections

  • regexp.dll
    .dll windows:5 windows x86

    d683af93822d2164e901f657c2fc8e06


    Headers

    Imports

    Exports

    Sections

  • std.dll
    .dll windows:5 windows x86

    22d1f17b8e5cce56102c9be32b9c8a4e


    Headers

    Imports

    Exports

    Sections

  • zlib.dll
    .dll windows:5 windows x86

    f78ca0b3074e6ee91adc0a9eebcd4ba2


    Headers

    Imports

    Exports

    Sections