General

  • Target

    Please Dont Touch Anything.rar

  • Size

    42.7MB

  • MD5

    8c9bbfcfe11ce19437066e79734ec80f

  • SHA1

    43c20fdb216ed3f70aa5cf585d2603343d6fd14d

  • SHA256

    3479deed6bd02d4b462472613170daee8e0715a0a2d32dfa9fa760bd642bbfbe

  • SHA512

    852b0f5f7c110c966707a0d47d478429bc85fbebcdca03383db0cc5db596ee1cc2a73353f0efef89033ee0ed2ea6fb82f8e3965505d3bd58aff0ed5e83a3cd6f

  • SSDEEP

    786432:kQNxoU6f2uygcPmNoe0AJkk/Y5ASvDBdKSuP5GQQci5iUIF9BUbxrqX:kyde04BwzbBdK7UjcsiNF9ubpe

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Please Dont Touch Anything.rar
    .rar

    Password: infected

  • Please Dont Touch Anything(PabloWine)/D3DX9_43.dll
    .dll windows:6 windows x86 arch:x86

    Password: infected

    5fb75b2a87c1fa7cc3d7904a0b97084a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Please Dont Touch Anything(PabloWine)/DontTouchAnything.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    43d27a4801bf5ae4e116665f17d52292


    Headers

    Imports

    Sections

  • Please Dont Touch Anything(PabloWine)/data.win
  • Please Dont Touch Anything(PabloWine)/options.ini
  • Please Dont Touch Anything(PabloWine)/savedata.ini
  • Please Dont Touch Anything(PabloWine)/splash.png
    .png

    Password: infected

  • Please Dont Touch Anything(PabloWine)/steam000.wow
    .dll windows:5 windows x86 arch:x86

    Password: infected

    a6db89f60278d9e51423b9382539ec44


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Please Dont Touch Anything(PabloWine)/steam001.wow
    .exe windows:5 windows x86 arch:x86

    Password: infected

    43d27a4801bf5ae4e116665f17d52292


    Headers

    Imports

    Sections

  • Please Dont Touch Anything(PabloWine)/steam_api.dll
    .dll windows:5 windows x86 arch:x86

    Password: infected

    8bc2b2a627fa08bac5386b42bf778fde


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Please Dont Touch Anything(PabloWine)/steam_api.ini