General

  • Target

    5699bc37dc975c5c19002621a251e26e

  • Size

    8.7MB

  • MD5

    5699bc37dc975c5c19002621a251e26e

  • SHA1

    f186e7b784dc194dc29f5c36896dfea2ce55fa49

  • SHA256

    205a0f685ef8114dc1b81d5509a70129b839551e55ad7b67cb3876c3ec10dbd5

  • SHA512

    eafa73bfcc868b9e07b14c6acf32b9636da40863431f8b62e0f3c16eaa6be29e478a56d44147adc1054557c0bb3cf17346fc8cf3f013fd7b95e1be4cfced2a33

  • SSDEEP

    196608:B3cN9VNkEJDq0nAo9C65swatGQ5lTZcGr5zSv/C:BM9VNLhEoo0yX1cGrhV

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 5699bc37dc975c5c19002621a251e26e
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISPlugin.dll
    .dll windows:4 windows x86 arch:x86

    873a1588ee12ce4e6beb76e8cd787cd4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISPlugin_JApply.dll
    .dll windows:4 windows x86 arch:x86

    db6e66bff3da6830d0cb7b1044febeeb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • BugTrace.dll.jdiff
  • CShell.dll.jdiff
  • GDPImpl.dll.jdiff
  • Game.dat.jdiff
  • TCJ.dll.jdiff
  • TStats.dll.jdiff
  • TenSLX.dll.jdiff
  • Tenparty.dat.jdiff
  • Tenrpcs.dll.jdiff
  • TerSafe.dll.jdiff
  • cfrf.cfd.jdiff
  • crossfire.exe.jdiff
  • crossfireBase.dll.jdiff
  • rez/RF100.REZ.jdiff
  • Խж.exe.nsis