General

  • Target

    24c0b6791c7c55941e5df10db86d9634

  • Size

    3.7MB

  • MD5

    24c0b6791c7c55941e5df10db86d9634

  • SHA1

    712fb4654aae91258dde2f6aee554983aff17e29

  • SHA256

    a96bb7346b0dcf819862eda05a335bbea0a2d24d06015bd2acbabed0b4f0b313

  • SHA512

    198affdf7682d82ac8547c9f6d1a56ead16ca39faca0345ab56b508b350c84f2022c1a9afe4b773eb08d6901d6129845160f9ab4ed304b9728ac3dd03251c82a

  • SSDEEP

    98304:grhLdZC3urFv5XOT/GKG8YSL9srrjtP1YSL9srrptPj:grhQuR5Xo9tOr3tOrP

Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 4 IoCs

    Detects file using ACProtect software.

Files

  • 24c0b6791c7c55941e5df10db86d9634
    .rar
  • ALI213-使用说明.txt
  • Win32.PLAZA/FarmTogether_Data/Mono/GameOverlayRenderer.dll
    .dll windows:5 windows x86 arch:x86

    4d9dc49377cf669aaf996caff5797492


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Win32.PLAZA/FarmTogether_Data/Mono/codex.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • Win32.PLAZA/FarmTogether_Data/Mono/steam_api.cdx
    .dll windows:5 windows x86 arch:x86

    505799f8a745662a7ae4877b9db0f7be


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Win32.PLAZA/FarmTogether_Data/Mono/steam_api.dll
    .dll windows:5 windows x86 arch:x86

    ae69073217569ab9c228525f28261f69


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Win32.PLAZA/FarmTogether_Data/Mono/steam_emu.ini
  • Win32.PLAZA/FarmTogether_Data/Mono/steamclient.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • Win32.PLAZA/GameOverlayRenderer.dll
    .dll windows:5 windows x86 arch:x86

    4d9dc49377cf669aaf996caff5797492


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Win32.PLAZA/codex.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • Win32.PLAZA/steam_api.cdx
    .dll windows:5 windows x86 arch:x86

    505799f8a745662a7ae4877b9db0f7be


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Win32.PLAZA/steam_api.dll
    .dll windows:5 windows x86 arch:x86

    ae69073217569ab9c228525f28261f69


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Win32.PLAZA/steam_emu.ini
  • Win32.PLAZA/steamclient.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • Win64.PLAZA/FarmTogether_Data/Mono/GameOverlayRenderer64.dll
    .dll windows:5 windows x64 arch:x64

    aaf92203080611f7b7db8f1538314ce7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Win64.PLAZA/FarmTogether_Data/Mono/codex64.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Win64.PLAZA/FarmTogether_Data/Mono/steam_api64.cdx
    .dll windows:5 windows x64 arch:x64

    477f42e8df284016fc9a7250f8f9a472


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Win64.PLAZA/FarmTogether_Data/Mono/steam_api64.dll
    .dll windows:5 windows x64 arch:x64

    cd25451867a525398eb9c27b4f8609af


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Win64.PLAZA/FarmTogether_Data/Mono/steam_emu.ini
  • Win64.PLAZA/FarmTogether_Data/Mono/steamclient64.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Win64.PLAZA/GameOverlayRenderer64.dll
    .dll windows:5 windows x64 arch:x64

    aaf92203080611f7b7db8f1538314ce7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Win64.PLAZA/codex64.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Win64.PLAZA/steam_api64.cdx
    .dll windows:5 windows x64 arch:x64

    477f42e8df284016fc9a7250f8f9a472


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Win64.PLAZA/steam_api64.dll
    .dll windows:5 windows x64 arch:x64

    cd25451867a525398eb9c27b4f8609af


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Win64.PLAZA/steam_emu.ini
  • Win64.PLAZA/steamclient64.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • 游侠NETSHOW论坛.url
  • 游侠网热门单机游戏.url