General

  • Target

    a9ae73a4a3fff160e533ee2ee2e67ceb

  • Size

    20.0MB

  • MD5

    a9ae73a4a3fff160e533ee2ee2e67ceb

  • SHA1

    ea50378c4f785c3a5a32f52c084584828939521c

  • SHA256

    50e97318c7b1e6d88a6080aa855bf8b1824102153f48cadef45da1423bf4afa7

  • SHA512

    9236af10a33793b5c5127bac032c6a5c6ac029164fffd05b805ef3b529210f4fda0f01520a2e15212accdaa23b0fa7a43df5f68d8945b079f7dbccf8eb7bc170

  • SSDEEP

    393216:PVaKeQyVx6FYzPaf6o1QP8IWBVs5KZXHLrJQ1edPiMN8kYiiKNrBWz3r:PveQq6FYL7o1Q08KZe1CPiMNRrNrBWz7

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Themida packer 2 IoCs

    Detects Themida, an advanced Windows software protection system.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 28 IoCs

    Checks for missing Authenticode signature.

Files

  • a9ae73a4a3fff160e533ee2ee2e67ceb
    .rar
  • animations/l2event.ukx
  • animations/l2farm.ukx
  • animations/l2tears.ukx
  • animations/l2teleport.ukx
  • l2text/server_help.htm
  • system/Core.dll.BAK
    .dll windows:4 windows x86 arch:x86

    dce8b86b91c27f6a28086d6b632ad31f


    Headers

    Imports

    Exports

    Sections

  • system/GameGuard.des
    .dll windows:4 windows x86 arch:x86

    60d988d5328c96e45618a0738ea2d876


    Headers

    Imports

    Sections

  • system/ItemName-e.dat
  • system/L2CompiledShader.bin
  • system/LargeFont-r.gly
  • system/Lineage2us.ini
  • system/NpcName-e.dat
  • system/Option.ini
  • system/SmallFont-r.gly
  • system/actionname-e.dat
  • system/alaudio.dll
    .dll windows:4 windows x86 arch:x86

    8e42d296e9fe242e90224190b6a790ce


    Headers

    Imports

    Exports

    Sections

  • system/alaudio.int
  • system/armorgrp.dat
  • system/asiahm-medium.ttf
  • system/bighead.int
  • system/castlename-e.dat
  • system/chargrp.dat
  • system/chatfilter.ini
  • system/classinfo-e.dat
  • system/cloak.int
  • system/commandname-e.dat
  • system/core.dll
    .dll windows:4 windows x86 arch:x86

    dce8b86b91c27f6a28086d6b632ad31f


    Headers

    Imports

    Exports

    Sections

  • system/core.int
  • system/core.u
  • system/creditfont.gly
  • system/creditgrp-e.dat
  • system/d3ddrv.dll
    .dll windows:4 windows x86 arch:x86

    8ba3d16902c41c11d35476aac955d102


    Headers

    Imports

    Exports

    Sections

  • system/defopenal32.dll
    .dll windows:4 windows x86 arch:x86

    a13be8f15d30f1cb1441fbb991095e15


    Headers

    Imports

    Exports

    Sections

  • system/dsetup.dll
    .dll windows:5 windows x86 arch:x86

    be28f4a1484edb9f576c216977513a44


    Headers

    Imports

    Exports

    Sections

  • system/editor.u
  • system/encvag.dll
    .dll windows:4 windows x86 arch:x86

    a268499ce7d6f3e663f7366ce8d74977


    Headers

    Imports

    Exports

    Sections

  • system/engine.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • system/engine.dll.BAK
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • system/engine.int
  • system/engine.u
  • system/entereventgrp.dat
  • system/env.int
  • system/etcitemgrp.dat
  • system/eula-e.dat
  • system/fire.dll
    .dll windows:4 windows x86 arch:x86

    80fc6a1a8dbf2fb360c95ccf3aa5c88d


    Headers

    Imports

    Exports

    Sections

  • system/fire.u
  • system/gameplay.u
  • system/gametip-e.dat
  • system/hair.int
  • system/hairaccessarygrp.dat
  • system/hairaccessorylocgrp.dat
  • system/hairgrp.dat
  • system/helmetgrp.dat
  • system/hennagrp-e.dat
  • system/huntingzone-e.dat
  • system/ifc23.dll
    .dll windows:4 windows x86 arch:x86

    bd50fe7fdb58744c65b849e157dca30c


    Headers

    Imports

    Exports

    Sections

  • system/interface.u
  • system/interface.xdat
  • system/ipdrv.dll
    .dll windows:4 windows x86 arch:x86

    95bfed20ee86e20a82fa8b88c18ee3fd


    Headers

    Imports

    Exports

    Sections

  • system/ipdrv.int
  • system/ipdrv.u
  • system/l2.bin
    .exe windows:4 windows x86 arch:x86

    76201e9d234c80048e4994fc2b3a84d6


    Headers

    Imports

    Exports

    Sections

  • system/l2.exe
    .exe windows:5 windows x86 arch:x86

    8509944a6e5816d2301f4970fded595b


    Headers

    Imports

    Sections

  • system/l2.ini
  • system/l2.int
  • system/l2forecf.ffe
  • system/largefont-e.gly
  • system/largefont.gly
  • system/lineagecreature.dll
    .dll windows:4 windows x86 arch:x86

    86a73e5ca23dbcad5e6e78b9c9c7a74f


    Headers

    Imports

    Exports

    Sections

  • system/lineagecreature.u
  • system/lineagedeco.u
  • system/lineageeffect.u
  • system/lineagemonster.int
  • system/lineagemonster.u
  • system/lineagemonster2.int
  • system/lineagemonster2.u
  • system/lineagemonster3.int
  • system/lineagemonster3.u
  • system/lineagenpc.int
  • system/lineagenpc.u
  • system/lineagenpc2.int
  • system/lineagenpc2.u
  • system/lineagenpcev.u
  • system/lineagevehicle.u
  • system/lineagewarrior.int
  • system/lineagewarrior.u
  • system/localization.ini
  • system/logongrp.dat
  • system/mobskillanimgrp.dat
  • system/msxml4.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    c15ed04b7f96417436d03d1ab8b9e327


    Headers

    Imports

    Exports

    Sections

  • system/msxml4a.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • system/msxml4r.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • system/musicinfo.dat
  • system/nProtect.des
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • system/npcgrp.dat
  • system/npkcrypt.dll
    .dll windows:4 windows x86 arch:x86

    c704036ad0838314940c7d1b0ecae505


    Headers

    Imports

    Exports

    Sections

  • system/npkcrypt.sys
    .sys windows:5 windows x86 arch:x86

    2db22becfe595b3a63cf88e7c6a32f33


    Headers

    Imports

    Sections

  • system/npkcrypt.vxd
  • system/npkcusb.sys
    .sys windows:5 windows x86 arch:x86

    74b26dd53b6ea6032ac7ce83de54e348


    Headers

    Imports

    Sections

  • system/npkpdb.dll
    .dll windows:4 windows x86 arch:x86

    19d4374f3e0c08ff9cdb4826b422ae5e


    Headers

    Imports

    Exports

    Sections

  • system/nwindow.dll
    .dll windows:4 windows x86 arch:x86

    7ed58c66da0e35d0c281d0afe132b553


    Headers

    Imports

    Exports

    Sections

  • system/nwindow.dll.bak
    .dll windows:4 windows x86 arch:x86

    7ed58c66da0e35d0c281d0afe132b553


    Headers

    Imports

    Exports

    Sections

  • system/nwindow.u
  • system/obscene-e.dat
  • system/ogg.dll
    .dll windows:4 windows x86 arch:x86

    ae8296446b2dd8fef8a9215f21142275


    Headers

    Imports

    Exports

    Sections

  • system/openal32.dll
    .dll windows:4 windows x86 arch:x86

    bc81b622121c4235a8858ecacac0371b


    Headers

    Imports

    Exports

    Sections

  • system/optiondata_client-e.dat
  • system/questname-e.dat
  • system/raiddata-e.dat
  • system/recipe-c.dat
  • system/servername-e.dat
  • system/skillgrp.dat
  • system/skillname-e.dat
  • system/skillsoundgrp.dat
  • system/smallfont-e.gly
  • system/smallfont.gly
  • system/soulshot.int
  • system/staticobject-e.dat
  • system/symbolname-e.dat
  • system/sysstring-e.dat