General

  • Target

    37a7c59519143938e8f1d81957767522.bin

  • Size

    77.4MB

  • MD5

    37a7c59519143938e8f1d81957767522

  • SHA1

    3daffe02a5adc7e82e89118dadc2f4a0c62678b5

  • SHA256

    8cd461c36c677d24325f72e7a5af3c1a5530d1195a584c40080d9dbafce6afd0

  • SHA512

    1d0e76b1abf13af5b09fba83bc34ffe9179d2cbceb963d705c3b4d655c99713f80f3ab6a0b0fffe22c9f137ae73508a9b4d3f77e7b2493fb73ee38c8f099fdbb

  • SSDEEP

    1572864:Tn4Kd01HG2Q1BMos4TEBsGn+/I+017feqkum1Isv5ruLcghxyVVOtB:j4fHGH1SIWs1I/1b1kuEZRrsoMtB

Score
3/10

Malware Config

Signatures

  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

Files

  • 37a7c59519143938e8f1d81957767522.bin
    .zip

    Password: infected

  • Vulkan.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    b34f154ec913d2d2c435cbd644e91687


    Headers

    Imports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    Password: infected

    7b79709c0d5576549eb261e3410f95f8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/app-64.7z
    .7z

    Password: infected

  • LICENSE.electron.txt
  • LICENSES.chromium.html
  • System.exe
    .exe windows:5 windows x64 arch:x64

    Password: infected

    5d8d583fba535d084df082f4bcef2d21


    Headers

    Imports

    Exports

    Sections

  • chrome_100_percent.pak
  • chrome_200_percent.pak
  • d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    Password: infected

    8235041cfd6fffb926142c2c78013446


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ffmpeg.dll
    .dll windows:5 windows x64 arch:x64

    Password: infected

    14338d2168d869b1b53d66354179e8c5


    Headers

    Imports

    Exports

    Sections

  • icudtl.dat
  • libEGL.dll
    .dll windows:5 windows x64 arch:x64

    Password: infected

    592e6e55d4fe33d1bd84e3b3016fe3b2


    Headers

    Imports

    Exports

    Sections

  • libGLESv2.dll
    .dll windows:5 windows x64 arch:x64

    5585f5d849dffc51c08f9c2876f039ac


    Headers

    Imports

    Exports

    Sections

  • locales/af.pak
  • locales/am.pak
  • locales/ar.pak
  • locales/bg.pak
  • locales/bn.pak
  • locales/ca.pak
  • locales/cs.pak
  • locales/da.pak
  • locales/de.pak
  • locales/el.pak
  • locales/en-GB.pak
  • locales/en-US.pak
  • locales/es-419.pak
  • locales/es.pak
  • locales/et.pak
  • locales/fa.pak
  • locales/fi.pak
  • locales/fil.pak
  • locales/fr.pak
  • locales/gu.pak
  • locales/he.pak
  • locales/hi.pak
  • locales/hr.pak
  • locales/hu.pak
  • locales/id.pak
  • locales/it.pak
  • locales/ja.pak
  • locales/kn.pak
  • locales/ko.pak
  • locales/lt.pak
  • locales/lv.pak
  • locales/ml.pak
  • locales/mr.pak
  • locales/ms.pak
  • locales/nb.pak
  • locales/nl.pak
  • locales/pl.pak
  • locales/pt-BR.pak
  • locales/pt-PT.pak
  • locales/ro.pak
  • locales/ru.pak
  • locales/sk.pak
  • locales/sl.pak
  • locales/sr.pak
  • locales/sv.pak
  • locales/sw.pak
  • locales/ta.pak
  • locales/te.pak
  • locales/th.pak
  • locales/tr.pak
  • locales/uk.pak
  • locales/ur.pak
  • locales/vi.pak
  • locales/zh-CN.pak
  • locales/zh-TW.pak
  • resources.pak
  • resources/app.asar
  • resources/elevate.exe
    .exe windows:6 windows x86 arch:x86

    c3afe98a750f2d4f1ed5d2ac323cb5e0


    Headers

    Imports

    Sections

  • snapshot_blob.bin
  • v8_context_snapshot.bin
  • vk_swiftshader.dll
    .dll windows:5 windows x64 arch:x64

    c6d5499631d983c25f3393a4b4b13399


    Headers

    Imports

    Exports

    Sections

  • vk_swiftshader_icd.json
  • vulkan-1.dll
    .dll windows:5 windows x64 arch:x64

    49ed29c3ff417b26c7cd92ecc9b7dcb3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z.dll
    .dll windows:6 windows x86 arch:x86

    2656ea25cde98f31a490513c2db04ae8


    Headers

    Imports

    Exports

    Sections

  • include/_mingw.h
  • include/assert.h
  • include/celib.h
  • include/celog.h
  • include/cepipelib.c
  • include/cesocket.h
  • include/conio.h
  • include/ctype.h
  • include/dir.h
  • include/direct.h
  • include/dirent.h
  • include/dos.h
  • include/errno.h
  • include/excpt.h
  • include/fcntl.h
  • include/fenv.h
  • include/float.h
  • include/inttypes.h
  • include/io.h
  • include/jni.h
  • include/limits.h
  • include/locale.h
  • include/malloc.h
  • include/math.h
  • include/mem.h
  • include/memory.h
  • include/process.h
  • include/setjmp.h
  • include/share.h
  • include/signal.h
  • include/stdarg.h
  • include/stdbool.h
  • include/stddef.h
  • include/stdint.h
  • include/stdio.h
  • include/stdlib.h
  • include/string.h
  • include/tccdefs.h
  • include/tchar.h
  • include/time.h
  • include/vadefs.h
  • include/values.h
  • include/varargs.h
  • include/wchar.h
  • include/wctype.h
  • include/windowslite.h
  • languages/CeShare.po
  • languages/How to add languages.txt
  • languages/Java.po
  • languages/SaveSessions.po
  • languages/VersionCheck.po
  • languages/cheatengine-x86_64.pot
  • languages/fr_FR/LisezMoi.md
  • languages/fr_FR/cheatengine-x86_64.mo
  • languages/fr_FR/cheatengine-x86_64.po
  • languages/fr_FR/lclstrconsts.mo
  • languages/fr_FR/lclstrconsts.po
  • languages/fr_FR/tutorial-x86_64.mo
  • languages/fr_FR/tutorial-x86_64.po
  • languages/it_IT/Java.po
  • languages/it_IT/LICENSE.MD
  • languages/it_IT/SaveSessions.po
  • languages/it_IT/VersionCheck.po
  • languages/it_IT/lclstrconsts.po
  • languages/it_IT/monoscript.po
  • languages/it_IT/name.txt
  • languages/language.ini
  • languages/lclstrconsts.po
  • languages/monoscript.po
  • languages/patchscan.po
  • languages/pseudocodediagram.po
  • languages/ru_RU/CeShare.po
  • languages/ru_RU/Java.po
  • languages/ru_RU/SaveSessions.po
  • languages/ru_RU/VersionCheck.po
  • languages/ru_RU/cheatengine-x86_64.po
  • languages/ru_RU/lclstrconsts.po
  • languages/ru_RU/monoscript.po
  • languages/ru_RU/name.txt
  • languages/ru_RU/patchscan.po
  • languages/ru_RU/pseudocodediagram.po
  • languages/ru_RU/tutorial-x86_64.po
  • languages/zh_CN/CeShare.po
  • languages/zh_CN/SaveSessions.po
  • languages/zh_CN/VersionCheck.po
  • languages/zh_CN/cheatengine-x86_64.po
  • languages/zh_CN/cheatengine.po
  • languages/zh_CN/java.po
  • languages/zh_CN/lclstrconsts.po
  • languages/zh_CN/monoscript.po
  • languages/zh_CN/patchscan.po
  • languages/zh_CN/pseudocodediagram.po
  • languages/zh_CN/tutorial-x86_64.po
  • languages/zh_TW/Java.po
  • languages/zh_TW/SaveSessions.po
  • languages/zh_TW/VersionCheck.po
  • languages/zh_TW/cheatengine-x86_64.po
  • languages/zh_TW/lclstrconsts.po
  • languages/zh_TW/monoscript.po
  • languages/zh_TW/patchscan.po
  • languages/zh_TW/pseudocodediagram.po
  • languages/zh_TW/tutorial-x86_64.po
  • lua/lauxlib.pas
  • lua/lua.pas
    .js
  • lua/lualib.pas
  • lua_extra/lua.exe
    .exe windows:6 windows x64 arch:x64

    305a3483275b958c6b18c492ecca8d26


    Headers

    Imports

    Sections

  • lua_extra/lua53-32.exp
  • lua_extra/lua53-32.lib
  • lua_extra/lua53-64.exp
  • lua_extra/lua53-64.lib
  • lua_extra/luac32.exe
    .exe windows:6 windows x86 arch:x86

    df3bb821a427e60e03315ecf0d446170


    Headers

    Imports

    Sections

  • lua_extra/luac64.exe
    .exe windows:6 windows x64 arch:x64

    7c1b0e130d7d46ddb9e63b559288e6d4


    Headers

    Imports

    Sections