General

  • Target

    41440d922fb2cafb5bf3ed2c2d1a7662

  • Size

    19.2MB

  • MD5

    41440d922fb2cafb5bf3ed2c2d1a7662

  • SHA1

    9807cdf53d374d8cb80798e861e1bd62f6480daa

  • SHA256

    5ee96369123e790101ef7f6473d2e3e51918190ab33e35c0ce43dec4abdcfe74

  • SHA512

    5d0b6cea2948ead2c11664be013b9cafd49d12b32efff5864f9407afbcacb3f64640cefff0d0b90addb87d818354b63a2370da6b8732a091fd2508efe6b2b0f0

  • SSDEEP

    393216:Rv/x5FYUf6o1QP1rA9uYz4ycy7+OKpUipTx79W3CfaQpiPJ39M:Rh5FYBo1Qguq4yRKOziFxsCSQpgJ3m

Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 38 IoCs

    Checks for missing Authenticode signature.

Files

  • 41440d922fb2cafb5bf3ed2c2d1a7662
    .rar
  • system/ALAudio.dll
    .dll windows:4 windows x86 arch:x86

    8e42d296e9fe242e90224190b6a790ce


    Headers

    Imports

    Exports

    Sections

  • system/ALAudio.int
  • system/Core.dll
    .dll windows:4 windows x86 arch:x86

    dce8b86b91c27f6a28086d6b632ad31f


    Headers

    Imports

    Exports

    Sections

  • system/Core.u
  • system/D3DDrv.dll
    .dll windows:4 windows x86 arch:x86

    8ba3d16902c41c11d35476aac955d102


    Headers

    Imports

    Exports

    Sections

  • system/Editor.u
  • system/Engine.int
  • system/Engine.u
  • system/Env.int
  • system/Fire.dll
    .dll windows:4 windows x86 arch:x86

    80fc6a1a8dbf2fb360c95ccf3aa5c88d


    Headers

    Imports

    Exports

    Sections

  • system/Fire.u
  • system/GameGuard.des
    .dll windows:4 windows x86 arch:x86

    f9ade0aa18f660a34a4fa23392e21838


    Headers

    Imports

    Sections

  • system/GameGuard/GameGuard.ver
  • system/GameGuard/GameMon.des
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • system/GameGuard/Lineage2us.ini
  • system/GameGuard/NPSCAN.DES
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • system/GameGuard/Splash.jpg
    .jpg
  • system/GameGuard/Thumbs.db
  • system/GameGuard/npgg.erl
  • system/GameGuard/npgg9x.des
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • system/GameGuard/npggNT.des
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • system/GameGuard/npgl.erl
  • system/GameGuard/npgl1.erl
  • system/GameGuard/npgl2.erl
  • system/GameGuard/npgm.erl
  • system/GameGuard/npgmup.des
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • system/GameGuard/npgmup.des.new
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • system/GameGuard/npgmup.erl
  • system/GameGuard/npsc.des
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • system/GameGuard/npsc.erl
  • system/GamePlay.u
  • system/Hennas.utx
  • system/IpDrv.dll
    .dll windows:4 windows x86 arch:x86

    95bfed20ee86e20a82fa8b88c18ee3fd


    Headers

    Imports

    Exports

    Sections

  • system/IpDrv.u
  • system/L2.exe
    .exe windows:5 windows x86 arch:x86

    8509944a6e5816d2301f4970fded595b


    Headers

    Imports

    Sections

  • system/L2.exe.lnk
    .lnk
  • system/L2CompiledShader.bin
  • system/Lineage2us.ini
  • system/LineageDeco.u
  • system/LineageMonster.int
  • system/LineageMonster.u
  • system/LineageMonster2.u
  • system/LineageMonster3.int
  • system/LineageMonster3.u
  • system/LineageNpc.int
  • system/LineageVehicle.u
  • system/LineageWarrior.u
  • system/Localization.ini
  • system/Npkdb.des
    .dll windows:4 windows x86 arch:x86

    aa3efbd5119e67c3e3e9985720f45350


    Headers

    Imports

    Exports

    Sections

  • system/Option.ini
  • system/actionname-e.dat
  • system/armorgrp.bak
  • system/armorgrp.dat
  • system/armorgrp.rar
    .rar
  • armorgrp.dat
  • system/armorgrp/armorgrp.dat
  • system/armorgrpmask.dat
  • system/asiahm-medium.ttf
  • system/backup/armorgrpmask.dat
  • system/backup/itemname-e.dat
  • system/backup/weapongrp.dat
  • system/bighead.int
  • system/castlename-e.dat
  • system/chargrp.dat
  • system/chatfilter.ini
  • system/classinfo-e.dat
  • system/clientdata.dat
  • system/cloak.int
  • system/commandname-e.dat
  • system/core.int
  • system/creditfont.gly
  • system/creditgrp-e.dat
  • system/dec-l2.ini
  • system/defopenal32.dll
    .dll windows:4 windows x86 arch:x86

    a13be8f15d30f1cb1441fbb991095e15


    Headers

    Imports

    Exports

    Sections

  • system/dsetup.dll
    .dll windows:5 windows x86 arch:x86

    be28f4a1484edb9f576c216977513a44


    Headers

    Imports

    Exports

    Sections

  • system/encvag.dll
    .dll windows:4 windows x86 arch:x86

    a268499ce7d6f3e663f7366ce8d74977


    Headers

    Imports

    Exports

    Sections

  • system/engine.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • system/entereventgrp.dat
  • system/entry.dll
    .dll windows:4 windows x86 arch:x86

    da6f19d0a9bb1f1f56e38c937e32c9ad


    Headers

    Imports

    Exports

    Sections

  • system/env.clear.int
  • system/etcitemgrp.bak
  • system/etcitemgrp.dat
  • system/etcitemgrp.rar
    .rar
  • etcitemgrp.dat
  • system/eula-e.dat
  • system/gametip-e.dat
  • system/hair.int
  • system/hairaccessarygrp.dat
  • system/hairaccessorylocgrp.dat
  • system/hairgrp.dat
  • system/helmetgrp.dat
  • system/hennagrp-e.bak
  • system/hennagrp-e.dat
  • system/huntingzone-e.dat
  • system/ifc23.dll
    .dll windows:4 windows x86 arch:x86

    bd50fe7fdb58744c65b849e157dca30c


    Headers

    Imports

    Exports

    Sections

  • system/interface.u
  • system/interface.xdat
  • system/ipdrv.int
  • system/item.rar
    .rar
  • itemname-e.bak
  • itemname-e.dat
  • system/itemname-e.bak
  • system/itemname-e.dat
  • system/itemname-e.rar
    .rar
  • itemname-e.dat
  • system/l2.bin
    .exe windows:4 windows x86 arch:x86

    76201e9d234c80048e4994fc2b3a84d6


    Headers

    Imports

    Exports

    Sections

  • system/l2.ini
  • system/l2.iniOFF
  • system/l2.int
  • system/l2.old
  • system/l2encdec.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • system/l2forecf.ffe
  • system/largefont-e.gly
  • system/largefont-r.gly
  • system/largefont.gly
  • system/lineagecreature.dll
    .dll windows:4 windows x86 arch:x86

    86a73e5ca23dbcad5e6e78b9c9c7a74f


    Headers

    Imports

    Exports

    Sections

  • system/lineagecreature.u
  • system/lineageeffect.u
  • system/lineageenv.dll
    .dll windows:4 windows x86 arch:x86

    b46ff09e85b15218310bb84e224ed317


    Headers

    Imports

    Exports

    Sections

  • system/lineageenv.u
  • system/lineagemonster2.int
  • system/lineagenpc.u
  • system/lineagenpc2.int
  • system/lineagenpc2.u
  • system/lineagenpcev.u
  • system/lineagewarrior.int
  • system/logongrp.dat
  • system/mobskillanimgrp.dat
  • system/msxml4.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    c15ed04b7f96417436d03d1ab8b9e327


    Headers

    Imports

    Exports

    Sections

  • system/msxml4a.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • system/msxml4g.dll
    .dll windows:4 windows x86 arch:x86

    80fc6a1a8dbf2fb360c95ccf3aa5c88d


    Headers

    Imports

    Exports

    Sections

  • system/msxml4r.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • system/musicinfo.dat
  • system/nextpay_sms.sql
  • system/npcgrp.dat
  • system/npcname-e.dat
  • system/npkcrypt.dll
    .dll windows:4 windows x86 arch:x86

    c704036ad0838314940c7d1b0ecae505


    Headers

    Imports

    Exports

    Sections

  • system/npkcrypt.sys
    .sys windows:5 windows x86 arch:x86

    2db22becfe595b3a63cf88e7c6a32f33


    Headers

    Imports

    Sections

  • system/npkcrypt.vxd
  • system/npkcusb.sys
    .sys windows:5 windows x86 arch:x86

    74b26dd53b6ea6032ac7ce83de54e348


    Headers

    Imports

    Sections

  • system/npkpdb.dll
    .dll windows:4 windows x86 arch:x86

    19d4374f3e0c08ff9cdb4826b422ae5e


    Headers

    Imports

    Exports

    Sections

  • system/nwindow.dll
    .dll windows:4 windows x86 arch:x86

    7ed58c66da0e35d0c281d0afe132b553


    Headers

    Imports

    Exports

    Sections

  • system/nwindow.u
  • system/nwindow_gg.dll
    .dll windows:4 windows x86 arch:x86

    7ed58c66da0e35d0c281d0afe132b553


    Headers

    Imports

    Exports

    Sections

  • system/obscene-e.dat
  • system/ogg.dll
    .dll windows:4 windows x86 arch:x86

    ae8296446b2dd8fef8a9215f21142275


    Headers

    Imports

    Exports

    Sections

  • system/openal32.dll
    .dll windows:4 windows x86 arch:x86

    bc81b622121c4235a8858ecacac0371b


    Headers

    Imports

    Exports

    Sections

  • system/optiondata_client-e.dat