General

  • Target

    AVP GP.rar

  • Size

    2.4MB

  • MD5

    38745da9ad63b0bc4e91f0a0781616e1

  • SHA1

    54138148c0b4a593382f63f94f4699f8f59f2497

  • SHA256

    ea06fd26ee5681697d99d367ab90e2de4e56a6fb591611f249220204826d61d3

  • SHA512

    4f3467ae53b998bfef9210d7796df7d39c13b378fdeaa19b6d64320da1a65a79afdbac9a56fde9fc959b94a29f4e0e91f621b2ab256ef9b227f8bc3e4ebf2a91

  • SSDEEP

    49152:VWGDvIujDZhCE1NI6mohVJdY+4/IhiZA67J3SY5V764kxKI1ZbgaT1C:LvxDZhCWDmCJdY+2IhCAc3SYP770KAbA

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • AVP GP.rar
    .rar

    Password: thanks

  • AVPGameProtect.exe
    .exe windows:4 windows x86 arch:x86

    Password: thanks

    bcbd14cee47ba72ef3538cd49adf4f0d


    Headers

    Imports

    Exports

    Sections

  • AngelScriptLib.dll
    .dll windows:4 windows x86 arch:x86

    Password: thanks

    0ce2ab2118a0ca6472c1adbcb3039618


    Headers

    Imports

    Exports

    Sections

  • Yara.dll
    .dll windows:5 windows x86 arch:x86

    Password: thanks

    2707ca6dfcf5357f52b27257b14cbe91


    Headers

    Imports

    Exports

    Sections

  • libcurl.dll
    .dll windows:4 windows x86 arch:x86

    Password: thanks

    8d970c7fb352cc798c570f6027abfe18


    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    Password: thanks

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/AYaraLib.dll
    .dll windows:4 windows x86 arch:x86

    Password: thanks

    4a5965449c340215aa5d2c5e47e4ac72


    Headers

    Imports

    Exports

    Sections

  • plugins/CCLEODecrypt.dll
    .dll windows:4 windows x86 arch:x86

    Password: thanks

    b61022580d98442ac458a969799a19da


    Headers

    Imports

    Exports

    Sections

  • plugins/checkupdate.dll
    .dll windows:4 windows x86 arch:x86

    Password: thanks

    6a8b46361c755ac37043c8b37f386bd3


    Headers

    Imports

    Exports

    Sections

  • plugins/scm.bin
  • rules/AVPGameProtect.yrb
  • scripts/Fyp2.asb
  • scripts/Fyp3.asb
  • scripts/Inverse2_slonob.asb
  • scripts/InverseC6_slonob.asb
  • scripts/Inverse_slonob.asb
  • scripts/Magayka.asb
  • scripts/Magayka2.asb
  • scripts/Swap_slonob.asb
  • scripts/Voron.asb
  • scripts/custom_invert.asb
  • scripts/depth_invert.asb
  • scripts/depth_invert_bug.asb
  • scripts/fyp.asb
  • scripts/fyp_key.asb
  • scripts/inv_1.asb
  • scripts/inv_2.asb
  • scripts/mag.asb
  • scripts/not_1.asb
  • scripts/not_2.asb
  • scripts/not_3.asb
  • scripts/rules/CLEODecryptors.yrb
  • scripts/swap01.asb
  • scripts/xor_1.asb
  • scripts/xor_10.asb
  • scripts/xor_2.asb
  • scripts/xor_3.asb
  • scripts/xor_4.asb
  • scripts/xor_5.asb
  • scripts/xor_6.asb
  • scripts/xor_7.asb
  • scripts/xor_8.asb
  • scripts/xor_9.asb