C:\Users\Sam\Downloads\_newdg\DesktopGoose v0.3\FOR MOD-MAKERS\GooseAutumn\DefaultMod\obj\Release\GooseAutumn.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Desktop Goose v0.31/DesktopGoose v0.31/GooseDesktop.exe
Resource
win11-20240221-en
General
-
Target
Desktop_Goose_v0.31.zip
-
Size
4.1MB
-
MD5
f2bb459ca88af7077fe3400c05686af9
-
SHA1
541337872fd849142e711ace8f83e42c79e10fd9
-
SHA256
07f0240cecebc2492db8197a2e4dc53153fc34d7fb297bb6cdc90d8eace03cfc
-
SHA512
0ebe6fc4e0f5cf968ded266acfc583133bbe9ed816bbe5329953a5dab2b8ea511cc4f3e4d6fbaabc83494fffd9bd7a249e8ec57244db64054680d02b4c627cac
-
SSDEEP
98304:D2shpAKXr3qe3S1s+2FpwDhbJ/XKGEzJKiMRg:hr3qEDP6D5J/tE1K3Rg
Malware Config
Signatures
-
Unsigned PE 9 IoCs
Checks for missing Authenticode signature.
resource unpack001/Desktop Goose v0.31/DesktopGoose v0.31/Assets/Mods/Autumn/Autumn.dll unpack001/Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/bin/Release/DefaultMod.dll unpack001/Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/bin/Release/GooseModdingAPI.dll unpack001/Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/obj/Release/DefaultMod.dll unpack001/Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/GooseModdingAPI/bin/Release/GooseModdingAPI.dll unpack001/Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/GooseModdingAPI/obj/Release/GooseModdingAPI.dll unpack001/Desktop Goose v0.31/DesktopGoose v0.31/GooseDesktop.exe unpack001/Desktop Goose v0.31/DesktopGoose v0.31/GooseModdingAPI.dll unpack001/Desktop Goose v0.31/DesktopGoose v0.31/MMQ.dll
Files
-
Desktop_Goose_v0.31.zip.zip
-
Desktop Goose v0.31/DesktopGoose v0.31/Assets/Images/MemeAttributions.txt
-
Desktop Goose v0.31/DesktopGoose v0.31/Assets/Images/Memes/GooseDance.gif.gif
-
Desktop Goose v0.31/DesktopGoose v0.31/Assets/Images/Memes/Meme1.png.png
-
Desktop Goose v0.31/DesktopGoose v0.31/Assets/Images/Memes/Meme2.png.png
-
Desktop Goose v0.31/DesktopGoose v0.31/Assets/Images/Memes/Meme3.png.png
-
Desktop Goose v0.31/DesktopGoose v0.31/Assets/Images/Memes/Meme4.png.png
-
Desktop Goose v0.31/DesktopGoose v0.31/Assets/Images/Memes/Meme5.png.png
-
Desktop Goose v0.31/DesktopGoose v0.31/Assets/Images/Memes/Meme6.png.png
-
Desktop Goose v0.31/DesktopGoose v0.31/Assets/Images/Memes/Meme7.png.png
-
Desktop Goose v0.31/DesktopGoose v0.31/Assets/Images/OtherGfx/DonatePage.png.png
-
Desktop Goose v0.31/DesktopGoose v0.31/Assets/Images/OtherGfx/heart.png.png
-
Desktop Goose v0.31/DesktopGoose v0.31/Assets/Mods/Autumn/Autumn.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Desktop Goose v0.31/DesktopGoose v0.31/Assets/Sound/Music/Rename me to just Music.mp3
-
Desktop Goose v0.31/DesktopGoose v0.31/Assets/Sound/NotEmbedded/BITE.mp3
-
Desktop Goose v0.31/DesktopGoose v0.31/Assets/Sound/NotEmbedded/Honk1.mp3
-
Desktop Goose v0.31/DesktopGoose v0.31/Assets/Sound/NotEmbedded/Honk2.mp3
-
Desktop Goose v0.31/DesktopGoose v0.31/Assets/Sound/NotEmbedded/Honk3.mp3
-
Desktop Goose v0.31/DesktopGoose v0.31/Assets/Sound/NotEmbedded/Honk4.mp3
-
Desktop Goose v0.31/DesktopGoose v0.31/Assets/Sound/NotEmbedded/MudSquith.mp3
-
Desktop Goose v0.31/DesktopGoose v0.31/Assets/Text/NotepadMessages/am goose.txt
-
Desktop Goose v0.31/DesktopGoose v0.31/Assets/Text/NotepadMessages/good work.txt
-
Desktop Goose v0.31/DesktopGoose v0.31/Assets/Text/NotepadMessages/gooseASCII1.txt
-
Desktop Goose v0.31/DesktopGoose v0.31/Assets/Text/NotepadMessages/hard to type.txt
-
Desktop Goose v0.31/DesktopGoose v0.31/Assets/Text/NotepadMessages/i cause problems.txt
-
Desktop Goose v0.31/DesktopGoose v0.31/Assets/Text/NotepadMessages/peace was never.txt
-
Desktop Goose v0.31/DesktopGoose v0.31/Autumn.txt
-
Desktop Goose v0.31/DesktopGoose v0.31/Close Goose.bat
-
Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/.vs/GooseMod/v14/.suo
-
Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/.vs/GooseModdingAPI/v14/.suo
-
Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/DefaultMod.csproj
-
Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/ModMain.cs
-
Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/Properties/AssemblyInfo.cs
-
Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/TaskDemo_FollowLowAccel.cs
-
Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/bin/Release/DefaultMod.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
C:\Users\Start Minecraft\Documents\Visual Studio 2015\Projects\GooseDesktop\_API Solution\GooseModdingAPI\DefaultMod\obj\Release\DefaultMod.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/bin/Release/DefaultMod.pdb
-
Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/bin/Release/GooseModdingAPI.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
C:\Users\Start Minecraft\Documents\Visual Studio 2015\Projects\GooseDesktop\_API Solution\GooseModdingAPI\GooseModdingAPI\obj\Release\GooseModdingAPI.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/bin/Release/GooseModdingAPI.pdb
-
Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/obj/Release/DefaultMod.csproj.FileListAbsolute.txt
-
Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/obj/Release/DefaultMod.csprojResolveAssemblyReference.cache
-
Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/obj/Release/DefaultMod.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
C:\Users\Start Minecraft\Documents\Visual Studio 2015\Projects\GooseDesktop\_API Solution\GooseModdingAPI\DefaultMod\obj\Release\DefaultMod.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/obj/Release/DefaultMod.pdb
-
Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/obj/Release/DesignTimeResolveAssemblyReferencesInput.cache
-
Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/GooseMod.sln
-
Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/GooseModdingAPI/Exports.cs
-
Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/GooseModdingAPI/GooseModdingAPI.csproj
-
Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/GooseModdingAPI/Properties/AssemblyInfo.cs
-
Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/GooseModdingAPI/SamEngine.cs
-
Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/GooseModdingAPI/bin/Release/GooseModdingAPI.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
C:\Users\Start Minecraft\Documents\Visual Studio 2015\Projects\GooseDesktop\_API Solution\GooseModdingAPI\GooseModdingAPI\obj\Release\GooseModdingAPI.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/GooseModdingAPI/bin/Release/GooseModdingAPI.pdb
-
Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/GooseModdingAPI/obj/Release/GooseModdingAPI.csproj.FileListAbsolute.txt
-
Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/GooseModdingAPI/obj/Release/GooseModdingAPI.csprojResolveAssemblyReference.cache
-
Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/GooseModdingAPI/obj/Release/GooseModdingAPI.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
C:\Users\Start Minecraft\Documents\Visual Studio 2015\Projects\GooseDesktop\_API Solution\GooseModdingAPI\GooseModdingAPI\obj\Release\GooseModdingAPI.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/GooseModdingAPI/obj/Release/GooseModdingAPI.pdb
-
Desktop Goose v0.31/DesktopGoose v0.31/FOR MOD-MAKERS/What is this.txt
-
Desktop Goose v0.31/DesktopGoose v0.31/GooseDesktop.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\Start Minecraft\documents\visual studio 2015\Projects\GooseDesktop\GooseDesktop\obj\Release\GooseDesktop.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 194KB - Virtual size: 193KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Desktop Goose v0.31/DesktopGoose v0.31/GooseModdingAPI.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
C:\Users\Start Minecraft\Documents\Visual Studio 2015\Projects\GooseDesktop\_API Solution\GooseModdingAPI\GooseModdingAPI\obj\Release\GooseModdingAPI.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Desktop Goose v0.31/DesktopGoose v0.31/MMQ.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
C:\Users\Start Minecraft\Documents\Visual Studio 2015\_Libraries\MMQ-master\MMQ\obj\Release\MMQ.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Desktop Goose v0.31/DesktopGoose v0.31/Read me! Honk.txt
-
Desktop Goose v0.31/DesktopGoose v0.31/changelog.txt
-
Desktop Goose v0.31/DesktopGoose v0.31/config.ini
-
Desktop Goose v0.31/DesktopGoose v0.31/patrons.txt