General

  • Target

    GrowtopiaInstaller (1).exe

  • Size

    218.0MB

  • MD5

    bf92788a9c20dc30b91909bf8df4e887

  • SHA1

    e2f03b2204f555a8ead3bac920610841c679154d

  • SHA256

    57940cea653aa71470f4700672f72b2052e21c9bf361520320c7443e1fc3e64a

  • SHA512

    341bd9c56e3ea8cfd451b50cdd02a2ca29e38b0700ba2549fb6477ae3eb27f4d2fbc2fb3b4b4d1057c71aae6c36472d0a7a68f96f33b95003c0ebb6c3416191e

  • SSDEEP

    3145728:8hDBZkc8dHRkRR/07hPVAVx5AzR7918ZpYGhF01d7V17rfdGB6qp1iuqkiQUmPS4:aTkXdHmRRS6va10ZDhip7rlGsbuuNER

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • GrowtopiaInstaller (1).exe
    .exe windows:4 windows x86 arch:x86

    b78ecf47c0a3e24a6f4af114e2d1f5de


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    610235b90207a63ccf481f0d4375d329


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Growtopia.exe
    .exe windows:6 windows x64 arch:x64

    4f1b6ef6fa20864063ca9d57f2c69625


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SecureEngineSDK64.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Exports

    Sections

  • anzu.dll
    .dll windows:6 windows x64 arch:x64

    1054328810b3c31a1c138b627a283240


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ubiservices.dll
    .dll windows:6 windows x64 arch:x64

    e89ec276be430c2ab3bfecf0d0f1eedf


    Headers

    Imports

    Exports

    Sections

  • vc_redist.x64.exe
    .exe windows:5 windows x86 arch:x86

    8e2588a9cf43886de3449dfff03137b6


    Code Sign

    Headers

    Imports

    Sections

  • vc_redist.x86.exe
    .exe windows:5 windows x86 arch:x86

    8e2588a9cf43886de3449dfff03137b6


    Code Sign

    Headers

    Imports

    Sections

  • zlibwapi.dll
    .dll windows:4 windows x64 arch:x64

    2ad53bea1f66fb1ef61d05c891663d87


    Headers

    Imports

    Exports

    Sections