Init
General
-
Target
7020d3d4d366e4e78bb86beb0d4e69d9892f84348167855ff40448f3ab09a8ae.zip.zip
-
Size
2.6MB
-
MD5
60a1dc05d39a0f59d6fb357b7d234a5d
-
SHA1
12020233628553d3bc92b3fc433a98e9bdca00b8
-
SHA256
60c3cff394ce6c30e56054266f9e3634e8604524edf8a2ffb812c24125e9402d
-
SHA512
74bb292db5080635eddd8e52f62a756195ce0d896f00fa6c344898b549f1fdd4097b9593093fd160c17ee26eb7236f745aff094ab78e7969cf67cf80d70ba459
-
SSDEEP
49152:SFdvB/3rdzZPpPJwAogCtvwBG9ZJnoAiYbvc8ocDpkTdJe:CRBz1Z0AoVtvwBG9ZJnoAiYI8JDpu/e
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
7020d3d4d366e4e78bb86beb0d4e69d9892f84348167855ff40448f3ab09a8ae.zip.zip
Password: infected
-
7020d3d4d366e4e78bb86beb0d4e69d9892f84348167855ff40448f3ab09a8ae.zip
-
BattlEye/BEServer_x86.dll
67f25c651d5aed71470cafb8f6af8768
Headers
Imports
Exports
Sections
-
BattlEye/BEServer_x86.so
-
Changes.txt
-
anims/barret.poa
-
anims/bezbroni.poa
-
anims/biega.poa
-
anims/biegaranny.poa
-
anims/biegatyl.poa
-
anims/bije.poa
-
anims/celuje.poa
-
anims/celujeodrzut.poa
-
anims/change.poa
-
anims/chat.poa
-
anims/cieszy.poa
-
anims/cigar.poa
-
anims/clipin.poa
-
anims/clipout.poa
-
anims/firemode.poa
-
anims/gora.poa
-
anims/goraodrzut.poa
-
anims/kolba.poa
-
anims/krocze.poa
-
anims/kuca.poa
-
anims/kucaidzie.poa
-
anims/kucaidzietyl.poa
-
anims/laduje.poa
-
anims/lezy.poa
-
anims/lezyidzie.poa
-
anims/match.poa
-
anims/odrzut.poa
-
anims/odrzut2.poa
-
anims/pistolet.poa
-
anims/rucha.poa
-
anims/rzuca.poa
-
anims/samo.poa
-
anims/samo2.poa
-
anims/shotgun.poa
-
anims/skok.poa
-
anims/skokdolobrot.poa
-
anims/skokdolobrottyl.poa
-
anims/skokwbok.poa
-
anims/slideback.poa
-
anims/smoke.poa
-
anims/spada.poa
-
anims/stoi.poa
-
anims/strzala.poa
-
anims/stunt.poa
-
anims/szcza.poa
-
anims/takeoff.poa
-
anims/template.poa
-
anims/wipe.poa
-
anims/wstaje.poa
-
anims/wyrzuca.poa
-
anims/zmienbron.poa
-
bots/Admiral.bot
-
bots/Billy.bot
-
bots/Blain.bot
-
bots/Boogie Man.bot
-
bots/Commando.bot
-
bots/D Dave.bot
-
bots/Danko.bot
-
bots/Dutch.bot
-
bots/John.bot
-
bots/Kruger.bot
-
bots/Poncho.bot
-
bots/Roach.bot
-
bots/Sgt. Mac.bot
-
bots/Sniper.bot
-
bots/Stevie.bot
-
bots/Terminator.bot
-
lobby_servers.txt
-
maps/Airpirates.PMS
-
maps/Arena.PMS
-
maps/Arena2.PMS
-
maps/Arena3.PMS
-
maps/Bigfalls.PMS
-
maps/Blox.PMS
-
maps/Bridge.PMS
-
maps/Bunker.PMS
-
maps/Cambodia.PMS
-
maps/Daybreak.PMS
-
maps/DesertWind.PMS
-
maps/Factory.PMS
-
maps/Flashback.PMS
-
maps/HH.PMS
-
maps/Island2k5.PMS
-
maps/Jungle.PMS
-
maps/Krab.PMS
-
maps/Lagrange.PMS
-
maps/Leaf.PMS
-
maps/MrSnowman.PMS
-
maps/RatCave.PMS
-
maps/Rok.PMS
-
maps/Shau.PMS
-
maps/Tropiccave.PMS
-
maps/ctf_Ash.PMS
-
maps/ctf_B2b.PMS
-
maps/ctf_Cobra.PMS
-
maps/ctf_Conquest.PMS
-
maps/ctf_Death2.PMS
-
maps/ctf_Division.PMS
-
maps/ctf_Dropdown2.PMS
-
maps/ctf_Equinox.PMS
-
maps/ctf_Kampf.PMS
-
maps/ctf_Lanubya.PMS
-
maps/ctf_Laos.PMS
-
maps/ctf_Maya.PMS
-
maps/ctf_Maya2.PMS
-
maps/ctf_Nuubia.PMS
-
maps/ctf_Ruins.PMS
-
maps/ctf_Run.PMS
-
maps/ctf_Snakebite.PMS
-
maps/ctf_Steel.PMS
-
maps/ctf_Viet.PMS
-
maps/ctf_Voland.PMS
-
maps/htf_Arch.PMS
-
maps/htf_Baire.PMS
-
maps/htf_Boxed.PMS
-
maps/htf_Desert.PMS
-
maps/htf_Dusk.PMS
-
maps/htf_Erbium.PMS
-
maps/htf_Muygen.PMS
-
maps/htf_Nuclear.PMS
-
maps/htf_Prison.PMS
-
maps/htf_Rubik.PMS
-
maps/htf_Void.PMS
-
maps/htf_Zajacz.PMS
-
maps/inf_Abel.PMS
-
maps/inf_Fortress.PMS
-
maps/inf_Messner.PMS
-
maps/inf_Moonshine.PMS
-
maps/inf_Outpost.PMS
-
maps/inf_Warehouse.PMS
-
objects/flag.po
-
objects/gostek.po
-
objects/karabin.po
-
objects/kit.po
-
objects/para.po
-
objects/stat.po
-
readme.txt
-
remote.txt
-
scripts/AdminCore.pas
-
scripts/Core.pas
-
scripts/Includes.txt
-
scripts/NetworkCore.pas
-
scripts/SocketCore.pas
-
server.ini
-
serverscript
-
soldat.ini
-
soldatserver
-
soldatserver.exe
Headers
Sections
-
weapons.ini
-
weapons_realistic.ini