General

  • Target

    1069b96116f6a8cad4fc844eec9f7a22

  • Size

    8.8MB

  • MD5

    1069b96116f6a8cad4fc844eec9f7a22

  • SHA1

    7ae205b9ff2f0445d4a7157de995fb4aa46c2a88

  • SHA256

    a31f798049f96d8c19ef9d3c3be4bd2e2a387ece411a5c2e5a53ceb0e05660b9

  • SHA512

    e4bbe119cadc346d39a72888e8d70133c13b05a735cc334c9c36975d16608ed13c5974954735c707ae47b924c5df0ce8c9cbc8f4f4544ae2fd8d5cc366aa983e

  • SSDEEP

    196608:9t2bvd8j/X5Y7s8XEcHHXdnnapj0nktvkNRh0pWZ9UB8WNG8N7+F/uCWgfff6:7Avd8j/K7t9ntnPgk7ZrWU8N76FffS

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • 1069b96116f6a8cad4fc844eec9f7a22
    .rar
  • system/ALAudio.dll
    .dll windows:4 windows x86 arch:x86

    bb7246984349a04a0bc888abd94386c9


    Headers

    Imports

    Exports

    Sections

  • system/ALAudio.int
  • system/CheckGrp.log
  • system/Cloak.int
  • system/Core.dll
    .dll windows:4 windows x86 arch:x86

    8499c92062d594b17c5ffcc1dac41953


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • system/Core.int
  • system/Core.u
  • system/CreditFont.gly
  • system/D3DDrv.dll
    .dll windows:4 windows x86 arch:x86

    9cefb15d4e7fcd4b445af7dce9beeb23


    Headers

    Imports

    Exports

    Sections

  • system/D3DDrv.int
  • system/Editor.u
  • system/Engine.dll
    .dll windows:4 windows x86 arch:x86

    51b25584b8de7b66309b022544e71a33


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • system/Engine.int
  • system/Engine.u
  • system/Env.int
  • system/Fire.u
  • system/GameGuard.des
    .dll windows:4 windows x86 arch:x86

    ac5547a4cef5a0a41523374a369ff4b1


    Headers

    Imports

    Sections

  • system/GamePlay.u
  • system/Hair.int
  • system/IFC23.DLL
    .dll windows:4 windows x86 arch:x86

    bd50fe7fdb58744c65b849e157dca30c


    Headers

    Imports

    Exports

    Sections

  • system/actionname-e.dat
  • system/armorgrp.dat
  • system/bighead.int
  • system/britemgrp.dat
  • system/castlename-e.dat
  • system/charcreategrp.dat
  • system/chargrp.dat
  • system/chatfilter.ini
  • system/classinfo-e.dat
  • system/commandname-e.dat
  • system/creditgrp-e.dat
  • system/dsetup.dll
    .dll windows:5 windows x86 arch:x86

    be7881b9057e280694ac261c86c2ef25


    Headers

    Imports

    Exports

    Sections

  • system/encvag.dll
    .dll windows:4 windows x86 arch:x86

    a268499ce7d6f3e663f7366ce8d74977


    Headers

    Imports

    Exports

    Sections

  • system/entereventgrp.dat
  • system/etcitemgrp.dat
  • system/eula-e.dat
  • system/fire.dll
    .dll windows:4 windows x86 arch:x86

    30b02433802e638b2af4e5c939cf802a


    Headers

    Imports

    Exports

    Sections

  • system/gametip-e.dat
  • system/hairaccessorylocgrp.dat
  • system/hennagrp-e.dat
  • system/huntingzone-e.dat
  • system/instantzonedata-e.dat
  • system/interface.u
  • system/interface.xdat