General

  • Target

    57c608ef58ee10fd5bfec7ba8d9cfe82

  • Size

    16.5MB

  • MD5

    57c608ef58ee10fd5bfec7ba8d9cfe82

  • SHA1

    01586300686601f3ec8d3a86275f82f9171be061

  • SHA256

    4a86b75be4d93218654a837c7745554d50dbbeefb6aa7941b5934a184aedd3ad

  • SHA512

    1b0c6bdd428fd751bda022f2a961856e5559560b0fc133f7990182ec4e5bb2c872cb7970c69e7874484319ae8ba66cc4595feb4f7f39334963992641d0d24eb6

  • SSDEEP

    393216:PVrny6iYYf3D7eh9M+gP2S8lvLUbhN8FQ3RblGmEsgZ:xymczG418lzwhN8FAblpH4

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 26 IoCs

    Checks for missing Authenticode signature.

Files

  • 57c608ef58ee10fd5bfec7ba8d9cfe82
    .rar
  • system/Core.dll
    .dll windows:4 windows x86 arch:x86

    dfab70f77bc8e58389380477f7624cbf


    Headers

    Imports

    Exports

    Sections

  • system/Engine.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • system/GameGuard.des
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • system/L2.bin
    .exe .ps1 windows:4 windows x86 arch:x86 polyglot


    Headers

    Exports

    Sections

  • system/L2CompiledShader.bin
  • system/Lineage2us.ini
  • system/Microsoft.VC80.OpenMP.manifest
  • system/Option.ini
  • system/actionname-e.dat
  • system/alaudio.dll
    .dll windows:4 windows x86 arch:x86

    35039f89e184b3cf086e445f41a5b3ac


    Headers

    Imports

    Exports

    Sections

  • system/alaudio.int
  • system/armorgrp.dat
  • system/bighead.int
  • system/castlename-e.dat
  • system/chargrp.dat
  • system/chatfilter.ini
  • system/classinfo-e.dat
  • system/cloak.int
  • system/commandname-e.dat
  • system/core.int
  • system/core.u
  • system/creditfont.gly
  • system/creditgrp-e.dat
  • system/d3ddrv.dll
    .dll windows:4 windows x86 arch:x86

    9c37f098190c1fbda66707aa3fcb7c5b


    Headers

    Imports

    Exports

    Sections

  • system/d3ddrv.int
  • system/dsetup.dll
    .dll windows:1 windows x86 arch:x86

    1080f87882e1b5fe641a7c86ecc40d7b


    Headers

    Imports

    Exports

    Sections

  • system/editor.u
  • system/encvag.dll
    .dll windows:4 windows x86 arch:x86

    a268499ce7d6f3e663f7366ce8d74977


    Headers

    Imports

    Exports

    Sections

  • system/engine.int
  • system/engine.u
  • system/entereventgrp.dat
  • system/env.int
  • system/etcitemgrp.dat
  • system/eula-e.dat
  • system/fire.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • system/fire.u
  • system/gameplay.u
  • system/gametip-e.dat
  • system/hair.int
  • system/hairaccessorylocgrp.dat
  • system/hennagrp-e.dat
  • system/huntingzone-e.dat
  • system/ifc23.dll
    .dll windows:4 windows x86 arch:x86

    bd50fe7fdb58744c65b849e157dca30c


    Headers

    Imports

    Exports

    Sections

  • system/instantzonedata-e.dat
  • system/interface.u
  • system/interface.xdat
  • system/ipdrv.dll
    .dll windows:4 windows x86 arch:x86

    4f590189644795ea79033dfe93fb1f02


    Headers

    Imports

    Exports

    Sections

  • system/ipdrv.int
  • system/ipdrv.u
  • system/itemname-e.dat
  • system/itemprime.dat
  • system/l2.exe
    .exe windows:4 windows x86 arch:x86

    ea9af1d9c82be5e053cc961bf2169dee


    Headers

    Imports

    Sections

  • system/l2.ini
  • system/l2.int
  • system/l2.log
  • system/l2Second.log
  • system/l2forecf.ffe
  • system/l2precompiledshader.bin
  • system/largefont-e.gly
  • system/largefont.gly
  • system/lineagecreature.dll
    .dll windows:4 windows x86 arch:x86

    78fc40f46d972af0469d315e32da3de0


    Headers

    Imports

    Exports

    Sections

  • system/lineagecreature.u
  • system/lineagedeco.u
  • system/lineageeffect.u
  • system/lineagemonster.int
  • system/lineagemonster.u
  • system/lineagemonster2.int
  • system/lineagemonster2.u
  • system/lineagemonster3.int
  • system/lineagemonster3.u
  • system/lineagemonster4.int
  • system/lineagemonster4.u
  • system/lineagenpc.int
  • system/lineagenpc.u
  • system/lineagenpc2.int
  • system/lineagenpc2.u
  • system/lineagenpcev.u
  • system/lineagesceneinfo.u
  • system/lineageskilleffect.u
  • system/lineagevehicle.u
  • system/lineagewarrior.int
  • system/lineagewarrior.u
  • system/loaderCT1++.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • system/localization.ini
  • system/logongrp.dat
  • system/mobskillanimgrp.dat
  • system/msxml4.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    8991c2f7d65712f80962d1750bf247ac


    Headers

    Imports

    Exports

    Sections

  • system/msxml4a.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • system/msxml4r.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • system/musicinfo.dat
  • system/npcgrp.dat
  • system/npcname-e.dat
  • system/npkcrypt.dll
    .dll windows:4 windows x86 arch:x86

    c704036ad0838314940c7d1b0ecae505


    Headers

    Imports

    Exports

    Sections

  • system/npkcrypt.sys
    .sys windows:5 windows x86 arch:x86

    2db22becfe595b3a63cf88e7c6a32f33


    Headers

    Imports

    Sections

  • system/npkcrypt.vxd
  • system/npkcusb.sys
    .sys windows:5 windows x86 arch:x86

    74b26dd53b6ea6032ac7ce83de54e348


    Headers

    Imports

    Sections

  • system/npkpdb.dll
    .dll windows:4 windows x86 arch:x86

    19d4374f3e0c08ff9cdb4826b422ae5e


    Headers

    Imports

    Exports

    Sections

  • system/nsplash.dll
    .dll windows:4 windows x86 arch:x86

    20f36619550af4fcdc1875121499e834


    Headers

    Imports

    Exports

    Sections

  • system/nwindow.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • system/nwindow.u
  • system/obscene-e.dat
  • system/ogg.dll
    .dll windows:4 windows x86 arch:x86

    ae8296446b2dd8fef8a9215f21142275


    Headers

    Imports

    Exports

    Sections

  • system/openal32.dll
    .dll windows:4 windows x86 arch:x86

    bc81b622121c4235a8858ecacac0371b


    Headers

    Imports

    Exports

    Sections

  • system/optiondata_client-e.dat
  • system/predefinedshader.bin
  • system/productname-e.dat
  • system/questname-e.dat
  • system/raiddata-e.dat
  • system/recipe-c.dat
  • system/ridedata.dat
  • system/sceneplayerdata.dat
  • system/servername-e.dat
  • system/shortcutalias.dat
  • system/skillgrp.dat
  • system/skillname-e.dat