General

  • Target

    Sample.zip

  • Size

    29.5MB

  • MD5

    1e102c48a0dacfa077b0c3ff37beb12f

  • SHA1

    f7c7666bb5522d6083f46642da7d3e753db30a3f

  • SHA256

    936c0cc96d640e0ff3a334e0cb1a93f075879e1fa57d205de9cae52a44413e78

  • SHA512

    323e884d0b9d2e8e5490e91e86337a47e63f7beb0662644e06ddccf602da682ed372cc7f079f9df4a92ab8741de98bd71ccf17e86f7a2d22363f6c9304b6be42

  • SSDEEP

    786432:ZaUDaKAelLzkE7odb7oGqEvFwtEqd5FLWj3GDOINWr1Xun0F:pDaKZkP+qFwcj30OINWJXunw

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • Sample.zip
    .zip

    Password: infected

  • ram.zip
    .zip
  • GameAssembly.dll
    .dll windows:6 windows x64 arch:x64

    23b3b3aa9fdf356bc269e3f4f57831f8


    Headers

    Imports

    Exports

    Sections

  • RAM.exe
    .exe windows:6 windows x64 arch:x64

    ce1183cc150987a99aef5749f22af81e


    Headers

    Imports

    Exports

    Sections

  • RAM_Data/Plugins/x86_64/KS_Diagnostics_Process.dll
    .dll windows:6 windows x64 arch:x64

    8ac95d4ef8d56e2b91d1ccfdedb9407e


    Headers

    Imports

    Exports

    Sections

  • RAM_Data/Plugins/x86_64/lib_burst_generated.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections

  • RAM_Data/Resources/unity default resources
  • RAM_Data/Resources/unity_builtin_extra
  • RAM_Data/RuntimeInitializeOnLoads.json
  • RAM_Data/ScriptingAssemblies.json
  • RAM_Data/app.info
  • RAM_Data/boot.config
  • RAM_Data/globalgamemanagers
  • RAM_Data/globalgamemanagers.assets
  • RAM_Data/globalgamemanagers.assets.resS
  • RAM_Data/il2cpp_data/Metadata/global-metadata.dat
  • RAM_Data/il2cpp_data/Resources/mscorlib.dll-resources.dat
  • RAM_Data/level0
  • RAM_Data/sharedassets0.assets
  • RAM_Data/sharedassets0.assets.resS
  • UnityCrashHandler64.exe
    .exe windows:6 windows x64 arch:x64

    fe9c40f7a90a28f3ad70906de8c1e9ab


    Code Sign

    Headers

    Imports

    Sections

  • UnityPlayer.dll
    .dll windows:6 windows x64 arch:x64

    1683d1c92355e1075176c8a050bc7c72


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • baselib.dll
    .dll windows:6 windows x64 arch:x64

    db9c6dbbb87b8c007ce6d9eae665e766


    Code Sign

    Headers

    Imports

    Exports

    Sections