General

  • Target

    3fe7be03e39e114a07c271d28f329a07

  • Size

    5.1MB

  • MD5

    3fe7be03e39e114a07c271d28f329a07

  • SHA1

    dc3aa6e91d2d35c484fde936a3bf2d4d29745b43

  • SHA256

    5cdd8f582f0d36c5e559dcc609ce91fde888dea52fb60516164fb3819df7b717

  • SHA512

    b069158f4fe2ab455b86b3e8c4c4d75ced5c5e8338960d18a09f680af3427fb6079d2f8e5462b8008dde51ad5f0d3c1103566cb3d0aad54c4f00658252aec96c

  • SSDEEP

    98304:OyZmWhFzeIIXQIkOM8/ByQEJLKOFzsUx4SEOEZOiGbWdIFnIRWuQZpM:DZmumEw/KbsUyOZiBdIkQ8

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 25 IoCs

    Checks for missing Authenticode signature.

Files

  • 3fe7be03e39e114a07c271d28f329a07
    .rar
  • - MuServer97+99 Viciados/Auto ODBC Setup.reg
  • - MuServer97+99 Viciados/CS/CS.exe
    .exe windows:4 windows x86 arch:x86

    51cb7b9cb47e8b8f2cda5f61f802275c


    Headers

    Imports

    Sections

  • - MuServer97+99 Viciados/CS/Connectserverlist.dat
  • - MuServer97+99 Viciados/CS/LOG_ERROR/CS_LOG_ERROR 2005-03-15.txt
  • - MuServer97+99 Viciados/CS/LOG_GSINFO/CS_LOG_GSINFO 2005-03-15.txt
  • - MuServer97+99 Viciados/CS/Leia-Me.txt
  • - MuServer97+99 Viciados/CS/data/Connectserverlist.dat
  • - MuServer97+99 Viciados/CS/data/ServerInfo.dat
  • - MuServer97+99 Viciados/CS/data/ServerList.dat
  • - MuServer97+99 Viciados/CS/data/version.wvd
  • - MuServer97+99 Viciados/DataServer1/Dataserver.exe
    .exe windows:4 windows x86 arch:x86

    ca3aaf6a4db19973d911b130f4501569


    Headers

    Imports

    Sections

  • - MuServer97+99 Viciados/DataServer1/Leia-Me.txt
  • - MuServer97+99 Viciados/DataServer1/WZ_AutoUpdater.exe
    .exe windows:4 windows x86 arch:x86

    3688717528d22e50c7f3a178709df129


    Headers

    Imports

    Sections

  • - MuServer97+99 Viciados/DataServer1/WZ_UM.dll
    .dll windows:4 windows x86 arch:x86

    bdbf0f67d51de174ca0260db26d2c536


    Headers

    Imports

    Exports

    Sections

  • - MuServer97+99 Viciados/DataServer1/wz_filelist.dat
  • - MuServer97+99 Viciados/DataServer1/wz_update.ini
  • - MuServer97+99 Viciados/DataServer2/Dataserver.exe
    .exe windows:4 windows x86 arch:x86

    ca3aaf6a4db19973d911b130f4501569


    Headers

    Imports

    Sections

  • - MuServer97+99 Viciados/DataServer2/Leia-Me.txt
  • - MuServer97+99 Viciados/DataServer2/WZ_AutoUpdater.exe
    .exe windows:4 windows x86 arch:x86

    3688717528d22e50c7f3a178709df129


    Headers

    Imports

    Sections

  • - MuServer97+99 Viciados/DataServer2/WZ_UM.dll
    .dll windows:4 windows x86 arch:x86

    bdbf0f67d51de174ca0260db26d2c536


    Headers

    Imports

    Exports

    Sections

  • - MuServer97+99 Viciados/DataServer2/wz_filelist.dat
  • - MuServer97+99 Viciados/DataServer2/wz_update.ini
  • - MuServer97+99 Viciados/ExDB/Exdb.exe
    .exe windows:4 windows x86 arch:x86

    6761cd01e2e6422055cd6f75aaaf6dc8


    Headers

    Imports

    Sections

  • - MuServer97+99 Viciados/ExDB/Leia-Me.txt
  • - MuServer97+99 Viciados/ExDB/LogProc.dll
    .dll windows:4 windows x86 arch:x86

    c176c048630f4cc5ce3185d711b16eef


    Headers

    Imports

    Exports

    Sections

  • - MuServer97+99 Viciados/ExDB/WZSock.dll
    .dll windows:4 windows x86 arch:x86

    58e34ec70c13bb589e92e333cabfd80d


    Headers

    Imports

    Exports

    Sections

  • - MuServer97+99 Viciados/GameServer/GameServer.exe
    .exe windows:4 windows x86 arch:x86

    883b103d0d95b2c63829b158719c57e1


    Headers

    Imports

    Sections

  • - MuServer97+99 Viciados/GameServer/Leia-Me.txt
  • - MuServer97+99 Viciados/GameServer/WoLf.dll
    .dll windows:4 windows x86 arch:x86

    69edc4fcf8208018989769d08354616f


    Headers

    Imports

    Sections

  • - MuServer97+99 Viciados/GameServer/WoLf.ini
  • - MuServer97+99 Viciados/GameServer/log/20081016_MuOnline.log
  • - MuServer97+99 Viciados/GameServer/mumsg.dll
    .dll windows:4 windows x86 arch:x86

    6bdd810e99dea218ea8ba34db49abd74


    Headers

    Imports

    Exports

    Sections

  • - MuServer97+99 Viciados/JoinServer/Data/ServerContro.dat
  • - MuServer97+99 Viciados/JoinServer/JoinServer.exe
    .exe windows:4 windows x86 arch:x86

    0968cbdd4742b30ee507031fe08aa22e


    Headers

    Imports

    Sections

  • - MuServer97+99 Viciados/JoinServer/Leia-Me.txt
  • - MuServer97+99 Viciados/JoinServer/ServerContro.dat
  • - MuServer97+99 Viciados/JoinServer/message_chs.wtf
  • - MuServer97+99 Viciados/JoinServer/message_tai.wtf
  • - MuServer97+99 Viciados/Leia-Me.txt
  • - MuServer97+99 Viciados/MU2003_EVENT_SERVER/DATA/svconfig.ini
  • - MuServer97+99 Viciados/MU2003_EVENT_SERVER/LOG_ERROR/MU2003_LOG_ERROR 2005-3-15.txt
  • - MuServer97+99 Viciados/MU2003_EVENT_SERVER/Leia-Me.txt
  • - MuServer97+99 Viciados/MU2003_EVENT_SERVER/WZ_MU2003_EVENT_SERVER.exe
    .exe windows:4 windows x86 arch:x86

    515cf7c77331d675db9532c3559f67d7


    Headers

    Imports

    Sections

  • - MuServer97+99 Viciados/MUServerStartUP.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • - MuServer97+99 Viciados/MuEdit.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • - MuServer97+99 Viciados/MuEdit.ini
  • - MuServer97+99 Viciados/MuServerStartup.log
  • - MuServer97+99 Viciados/Patch/DM-Mu.dll
    .dll windows:4 windows x86 arch:x86

    147086644a99d2ca01c3697273385580


    Headers

    Imports

    Exports

    Sections

  • - MuServer97+99 Viciados/Patch/Data/Local/Dialog.bmd
  • - MuServer97+99 Viciados/Patch/Data/Local/Everyone.OZJ
    .jpg
  • - MuServer97+99 Viciados/Patch/Data/Local/Filter.bmd
  • - MuServer97+99 Viciados/Patch/Data/Local/FilterName.bmd
  • - MuServer97+99 Viciados/Patch/Data/Local/Gate.bmd
  • - MuServer97+99 Viciados/Patch/Data/Local/Loading01.OZJ
    .jpg
  • - MuServer97+99 Viciados/Patch/Data/Local/Loading02.OZJ
    .jpg
  • - MuServer97+99 Viciados/Patch/Data/Local/Loading03.OZJ
    .jpg
  • - MuServer97+99 Viciados/Patch/Data/Local/NpcName(Chs).txt
  • - MuServer97+99 Viciados/Patch/Data/Local/NpcName(Eng).txt
  • - MuServer97+99 Viciados/Patch/Data/Local/NpcName(Kor).txt
  • - MuServer97+99 Viciados/Patch/Data/Local/NpcName(Tai).txt
  • - MuServer97+99 Viciados/Patch/Data/Local/Skill.bmd
  • - MuServer97+99 Viciados/Patch/Data/Local/Text.bmd
  • - MuServer97+99 Viciados/Patch/Data/Local/Webzenlogo.OZJ
  • - MuServer97+99 Viciados/Patch/Data/Local/item.bmd
  • - MuServer97+99 Viciados/Patch/Data/Local/quest.bmd
  • - MuServer97+99 Viciados/Patch/launcher.exe
    .exe windows:4 windows x86 arch:x86

    31cce03c3cc76ce6a09f0eb31d1c5adf


    Headers

    Imports

    Sections

  • - MuServer97+99 Viciados/Patch/main.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • - MuServer97+99 Viciados/Patch/server.db
  • - MuServer97+99 Viciados/RankingServer/DevilSqure_EventServer.exe
    .exe windows:4 windows x86 arch:x86

    e9412f1adc11b36604cdfa07d132fe6a


    Headers

    Imports

    Sections

  • - MuServer97+99 Viciados/RankingServer/LOG_ERROR/LOG_ERROR 2005-3-15.txt
  • - MuServer97+99 Viciados/RankingServer/Leia-Me.txt
  • - MuServer97+99 Viciados/RankingServer/RankingDBscript.txt
  • - MuServer97+99 Viciados/RankingServer/storedprocedure/SP_SETT_EVENT_INSERT.sql
  • - MuServer97+99 Viciados/RankingServer/storedprocedure/SP_SETT_EVENT_RESULT.sql
  • - MuServer97+99 Viciados/RankingServer/storedprocedure/USP_EVENT_EDIT.sql
  • - MuServer97+99 Viciados/RankingServer/storedprocedure/USP_EVENT_LIST.sql
  • - MuServer97+99 Viciados/RankingServer/storedprocedure/USP_EVENT_LIST_PAGECOUNT.sql
  • - MuServer97+99 Viciados/RankingServer/svconfig.ini
  • - MuServer97+99 Viciados/RankingServer/table/T_Event_Barunson.sql
  • - MuServer97+99 Viciados/StartUp.ini
  • - MuServer97+99 Viciados/Viciados MU - O Maior Portal de MuOnline do Brasil.url
    .url
  • - MuServer97+99 Viciados/VipManager/DSN.INI
  • - MuServer97+99 Viciados/VipManager/Historico.txt
  • - MuServer97+99 Viciados/VipManager/Leia-Me.txt
  • - MuServer97+99 Viciados/VipManager/SQLNames.txt
  • - MuServer97+99 Viciados/data/BloodCastle.dat
  • - MuServer97+99 Viciados/data/CheckFileList.dat
  • - MuServer97+99 Viciados/data/ConnectMember.txt
  • - MuServer97+99 Viciados/data/Dec1.dat
  • - MuServer97+99 Viciados/data/DevilSquare.dat
  • - MuServer97+99 Viciados/data/Enc2.dat
  • - MuServer97+99 Viciados/data/IpList.dat
  • - MuServer97+99 Viciados/data/Leia-Me.txt
  • - MuServer97+99 Viciados/data/MSVCP60.DLL
    .dll windows:4 windows x86 arch:x86

    1b1839992700df52b049b87961a724e3


    Headers

    Imports

    Exports

    Sections

  • - MuServer97+99 Viciados/data/Monster.txt
  • - MuServer97+99 Viciados/data/MonsterSetBase.txt
  • - MuServer97+99 Viciados/data/MonsterSetBase97+99.txt
  • - MuServer97+99 Viciados/data/ServerInfo.dat
  • - MuServer97+99 Viciados/data/Terrain1.att
  • - MuServer97+99 Viciados/data/Terrain10.att
  • - MuServer97+99 Viciados/data/Terrain11.att
  • - MuServer97+99 Viciados/data/Terrain12.att
  • - MuServer97+99 Viciados/data/Terrain2.att
  • - MuServer97+99 Viciados/data/Terrain3.att
  • - MuServer97+99 Viciados/data/Terrain4.att
  • - MuServer97+99 Viciados/data/Terrain5.att
  • - MuServer97+99 Viciados/data/Terrain6.att
  • - MuServer97+99 Viciados/data/Terrain7.att
  • - MuServer97+99 Viciados/data/Terrain8.att
  • - MuServer97+99 Viciados/data/Terrain9.att
  • - MuServer97+99 Viciados/data/badsyntax.txt
  • - MuServer97+99 Viciados/data/commonserver.cfg
  • - MuServer97+99 Viciados/data/eventitembag.txt
  • - MuServer97+99 Viciados/data/eventitembag10.txt
  • - MuServer97+99 Viciados/data/eventitembag11.txt
  • - MuServer97+99 Viciados/data/eventitembag12.txt
  • - MuServer97+99 Viciados/data/eventitembag2.txt
  • - MuServer97+99 Viciados/data/eventitembag3.txt
  • - MuServer97+99 Viciados/data/eventitembag4.txt
  • - MuServer97+99 Viciados/data/eventitembag5.txt
  • - MuServer97+99 Viciados/data/eventitembag6.txt
  • - MuServer97+99 Viciados/data/eventitembag7.txt
  • - MuServer97+99 Viciados/data/eventitembag8.txt
  • - MuServer97+99 Viciados/data/eventitembag9.txt
  • - MuServer97+99 Viciados/data/gate.txt
  • - MuServer97+99 Viciados/data/item(Kor).txt
  • - MuServer97+99 Viciados/data/lang/chs/CheckSum.dat
  • - MuServer97+99 Viciados/data/lang/chs/Item(chs).txt
  • - MuServer97+99 Viciados/data/lang/chs/Quest(chs).txt
  • - MuServer97+99 Viciados/data/lang/chs/Skill(chs).txt
  • - MuServer97+99 Viciados/data/lang/chs/TestClient_PatchInfo.txt
  • - MuServer97+99 Viciados/data/lang/chs/commonloc.cfg
  • - MuServer97+99 Viciados/data/lang/kor/Quest(Kor).txt
  • - MuServer97+99 Viciados/data/lang/kor/item(Kor).txt
  • - MuServer97+99 Viciados/data/lang/kor/skill(Kor).txt
  • - MuServer97+99 Viciados/data/lang/message_chs.wtf
  • - MuServer97+99 Viciados/data/lang/tai/094m/CheckSum.dat
  • - MuServer97+99 Viciados/data/lang/tai/094m/commonloc.cfg
  • - MuServer97+99 Viciados/data/lang/tai/CheckSum.dat
  • - MuServer97+99 Viciados/data/lang/tai/CheckSumold.dat
  • - MuServer97+99 Viciados/data/lang/tai/Item(Tai).txt
  • - MuServer97+99 Viciados/data/lang/tai/Quest(Tai).txt
  • - MuServer97+99 Viciados/data/lang/tai/Skill(Tai).txt
  • - MuServer97+99 Viciados/data/lang/tai/TestClient_PatchInfo.txt
  • - MuServer97+99 Viciados/data/lang/tai/commonloc.cfg
  • - MuServer97+99 Viciados/data/message_chs.wtf
  • - MuServer97+99 Viciados/data/message_tai.wtf
  • - MuServer97+99 Viciados/data/shop0.txt
  • - MuServer97+99 Viciados/data/shop1.txt
  • - MuServer97+99 Viciados/data/shop10.txt
  • - MuServer97+99 Viciados/data/shop2.txt
  • - MuServer97+99 Viciados/data/shop3.txt
  • - MuServer97+99 Viciados/data/shop4.txt
  • - MuServer97+99 Viciados/data/shop5.txt
  • - MuServer97+99 Viciados/data/shop6.txt
  • - MuServer97+99 Viciados/data/shop7.txt
  • - MuServer97+99 Viciados/data/shop8.txt
  • - MuServer97+99 Viciados/data/shop9.txt
  • - MuServer97+99 Viciados/data/subtypes.txt
  • - MuServer97+99 Viciados/db baks/Leia-Me.txt
  • - MuServer97+99 Viciados/db baks/MuOnline
  • - MuServer97+99 Viciados/db baks/Ranking
  • - MuServer97+99 Viciados/deletar_todos_logs.bat
  • - MuServer97+99 Viciados/muitem.mdb
  • - MuServer97+99 Viciados/utilitarios/BMDEditor.exe
    .exe windows:4 windows x86 arch:x86

    f253096b1fc8a1bfcf18c23e40291425


    Headers

    Imports

    Sections

  • - MuServer97+99 Viciados/utilitarios/Builder.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • - MuServer97+99 Viciados/utilitarios/Leia-Me.txt
  • - MuServer97+99 Viciados/utilitarios/MUimgGUI.exe
    .exe windows:4 windows x86 arch:x86

    40291e59eee7345f89859efcc3cf371d


    Headers

    Imports

    Sections