SP.rar
- SHA256 d7dafb1954e6216b222a0a74a7b8f3d9ab12a4101699a93df8cdf8e7dfc348cb
Overview
overview
7Static
static
7SP.rar
windows7-x64
3SP.rar
windows10-2004-x64
7SP/Profile...ID.cfg
windows7-x64
3SP/Profile...ID.cfg
windows10-2004-x64
3SP/SteamConfig.ini
windows7-x64
1SP/SteamConfig.ini
windows10-2004-x64
1SP/UniteFxControl.dll
windows7-x64
1SP/UniteFxControl.dll
windows10-2004-x64
1SP/UniteFxUpdate.dll
windows7-x64
1SP/UniteFxUpdate.dll
windows10-2004-x64
1SP/Useful ...ad.exe
windows7-x64
7SP/Useful ...ad.exe
windows10-2004-x64
7SP/installscript.vdf
windows7-x64
3SP/installscript.vdf
windows10-2004-x64
3SP/languag...ion.mo
windows7-x64
3SP/languag...ion.mo
windows10-2004-x64
3SP/languag...ion.mo
windows7-x64
3SP/languag...ion.mo
windows10-2004-x64
3SP/languag...ion.mo
windows7-x64
3SP/languag...ion.mo
windows10-2004-x64
3SP/languag...ion.mo
windows7-x64
3SP/languag...ion.mo
windows10-2004-x64
3SP/languag...ion.mo
windows7-x64
3SP/languag...ion.mo
windows10-2004-x64
3SP/languag...ion.mo
windows7-x64
3SP/languag...ion.mo
windows10-2004-x64
3SP/languag...ion.mo
windows7-x64
3SP/languag...ion.mo
windows10-2004-x64
3SP/languag...ion.mo
windows7-x64
3SP/languag...ion.mo
windows10-2004-x64
3SP/languag...ion.mo
windows7-x64
3SP/languag...ion.mo
windows10-2004-x64
3Behavioral task
behavioral1
Sample
SP.rar
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
SP.rar
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
SP/Profile/CRACKED BY CodeAway/SteamUserID.cfg
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
SP/Profile/CRACKED BY CodeAway/SteamUserID.cfg
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
SP/SteamConfig.ini
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
SP/SteamConfig.ini
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
SP/UniteFxControl.dll
Resource
win7-20240215-en
Behavioral task
behavioral8
Sample
SP/UniteFxControl.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
SP/UniteFxUpdate.dll
Resource
win7-20240215-en
Behavioral task
behavioral10
Sample
SP/UniteFxUpdate.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
SP/Useful Soundpad.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
SP/Useful Soundpad.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
SP/installscript.vdf
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
SP/installscript.vdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
SP/languages/cs/translation.mo
Resource
win7-20240220-en
Behavioral task
behavioral16
Sample
SP/languages/cs/translation.mo
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
SP/languages/da/translation.mo
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
SP/languages/da/translation.mo
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
SP/languages/de/translation.mo
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
SP/languages/de/translation.mo
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
SP/languages/es_ES/translation.mo
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
SP/languages/es_ES/translation.mo
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
SP/languages/fi/translation.mo
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
SP/languages/fi/translation.mo
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
SP/languages/fr/translation.mo
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
SP/languages/fr/translation.mo
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
SP/languages/it/translation.mo
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
SP/languages/it/translation.mo
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
SP/languages/ja/translation.mo
Resource
win7-20240220-en
Behavioral task
behavioral30
Sample
SP/languages/ja/translation.mo
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
SP/languages/ko/translation.mo
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
SP/languages/ko/translation.mo
Resource
win10v2004-20240226-en
| resource | yara_rule |
|---|---|
| static1/unpack001/SP/steam_api64.dll | upx |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/SP/Useful Soundpad.exe |
| unpack001/SP/steam_api64.dll |
Jun 12, 2019
CN=Arthur Lepp,OU=IT,O=Arthur Lepp,POSTALCODE=50825,STREET=Iltisstr. 142,L=Köln,ST=NRW,C=DE,2.5.4.18=#13053530383235
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
count=18, id=259, version=26213,
count=190, id=261, version=26213,
count=2, id=199, version=41118,
count=11, id=259, version=26706,
count=35, id=260, version=26706,
count=1, id=260, productName=VS2017 v15.9.5 build 27026, version=27026,
count=2, id=262, version=26213,
count=28, id=260, version=26213,
count=21, id=257, version=26213,
count=240, id=1, productName=Unmarked objects,
count=122, id=261, version=26706,
count=1, id=263, version=26213,
count=60, id=265, version=27027,
count=1, id=256, productName=VS2017 v15.9.7 build 27027, version=27027,
count=1, id=255, productName=VS2017 v15.9.7 build 27027, version=27027,
count=1, id=151,
count=1, id=258, productName=VS2017 v15.9.7 build 27027, version=27027,
Jun 12, 2019
CN=Arthur Lepp,OU=IT,O=Arthur Lepp,POSTALCODE=50825,STREET=Iltisstr. 142,L=Köln,ST=NRW,C=DE,2.5.4.18=#13053530383235
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
count=11, id=259, version=26213,
count=169, id=261, version=26213,
count=9, id=259, version=26706,
count=34, id=260, version=26706,
count=1, id=262, version=26213,
count=21, id=260, version=26213,
count=9, id=257, version=26213,
count=196, id=1, productName=Unmarked objects,
count=122, id=261, version=26706,
count=3, id=263, version=26213,
count=12, id=265, version=27027,
count=1, id=256, productName=VS2017 v15.9.7 build 27027, version=27027,
count=1, id=255, productName=VS2017 v15.9.7 build 27027, version=27027,
count=1, id=151,
count=1, id=258, productName=VS2017 v15.9.7 build 27027, version=27027,
Unsigned PE
Checks for missing Authenticode signature.
count=21, id=259, version=26213,
count=222, id=261, version=26213,
count=3, id=199, version=41118,
count=13, id=259, version=26706,
count=133, id=261, version=26706,
count=39, id=260, version=26706,
count=311, id=261, productName=VS2017 v15.9.5 build 27026, version=27026,
count=2, id=257, productName=VS2017 v15.9.7 build 27027, version=27027,
count=69, id=260, productName=VS2017 v15.9.5 build 27026, version=27026,
count=40, id=260, version=26213,
count=3, id=262, version=26213,
count=2, id=221, productName=VS2013 UPD5 build 40629, version=40629,
count=51, id=257, version=26213,
count=776, id=1, productName=Unmarked objects,
count=172, id=265, version=27027,
count=1, id=255, productName=VS2017 v15.9.7 build 27027, version=27027,
count=1, id=151,
count=1, id=258, productName=VS2017 v15.9.7 build 27027, version=27027,
Unsigned PE
Checks for missing Authenticode signature.