General

  • Target

    a1f3adefaa744eadba44d0eaf9c72598

  • Size

    10.4MB

  • MD5

    a1f3adefaa744eadba44d0eaf9c72598

  • SHA1

    a3a6c43ebe0635ce7d7bf4c61b3c66ffb7dd98a8

  • SHA256

    616b9a060c397b10dbe81f292d7efede7865598af9c617f036b7395367b50f2c

  • SHA512

    a60dc6f3363617185ed51e6bc81975d098fad9c15d4b54933621f46b69365cd75bce236d89a69a0da316ebdae7ffa23a5cccb281b6089808fe8c7eb41b6ca475

  • SSDEEP

    196608:7hwOFiaQ7LL287KpLOA8KjBFqM1soug61TAEnCe8H498ekBFSS3up:lTwaQX+pLJ8GY8F8AECAYFSS+p

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • a1f3adefaa744eadba44d0eaf9c72598
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • Data/3Ddata/character.pak
  • FreeImage.dll
    .dll windows:4 windows x86 arch:x86

    b3b9d6c411ee6b1733773556ff850f23


    Headers

    Imports

    Exports

    Sections

  • LUNAClient.exe
    .exe windows:4 windows x86 arch:x86

    da55bc5aff33636bd6805c7dcebcd263


    Headers

    Imports

    Sections

  • LUNAPatcher.exe
    .exe windows:5 windows x86 arch:x86

    ad2138a95397cb2e9799c70184175c13


    Headers

    Imports

    Exports

    Sections

  • Options.exe
    .exe windows:5 windows x86 arch:x86

    1cb8fe5f83eb0465e8dd509ab04468f6


    Headers

    Imports

    Sections

  • SoundLib.dll
    .dll windows:4 windows x86 arch:x86

    3a0b691c2029dafff244053fc2d13bdb


    Headers

    Imports

    Exports

    Sections

  • atl100.dll
    .dll windows:5 windows x86 arch:x86

    0bbf1228f837ecb83ec693b705100bde


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • celestiapatch
    .gz
  • celestiapatch
  • msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections