Static

static

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    WinKawaks.full.zip

  • Size

    1.5MB

  • MD5

    fe7187156431787428fb54a76b1a432c

  • SHA1

    ce0747fab9a293e5c6259486adeee62371673eab

  • SHA256

    0ce6c33423a25435aa0c6ee5e35d5cedcd2aff636bc5a9518a9c3127e3789d3e

  • SHA512

    273440f719aff95f17f1f1aa46ad485da5dbfd2a8177d89a7cdc0da15c718068f65d2e561dcce65094bb9e0b561a4e661d0d8565a2d8a154d3bf3909fd67067f

  • SSDEEP

    24576:q1IxZdhbUvHYu3q3hl9cqgL1l5cGje++Wk1hCe4F/wFNNi0SrM:VHgfYkfqgLBDeZWk/34F/mMprM

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • WinKawaks.full.zip
    .zip .ps1 polyglot

    Password: 12345667

  • WinKawaks/DefaultWinKawaksINI.zip
    .zip

    Password: 12345667

  • WinKawaks.ini
  • WinKawaks/WinKawaks.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • WinKawaks/blend/ddsom.bld
  • WinKawaks/blend/ddtod.bld
  • WinKawaks/blend/sfa.bld
  • WinKawaks/defaultkeysCPS.ini
  • WinKawaks/defaultkeysMVS.ini
  • WinKawaks/eeprom/pzloop2.epm
  • WinKawaks/eeprom/pzloop2j.epm
  • WinKawaks/faq.txt
  • WinKawaks/kaillera/kaillerasrv.conf
  • WinKawaks/kaillera/kaillerasrv.exe
    .exe windows:4 windows x86 arch:x86

    Password: 12345667


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • WinKawaks/kaillera/kaillerasrv.txt
  • WinKawaks/kailleraclient.dll
    .dll windows:4 windows x86 arch:x86

    Password: 12345667


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • WinKawaks/lang/Arabic.lng
  • WinKawaks/lang/Brazilian Portuguese.lng
  • WinKawaks/lang/Bulgarian.lng
  • WinKawaks/lang/Catalan.lng
  • WinKawaks/lang/Charnego.lng
  • WinKawaks/lang/Chinese(Big5).lng
  • WinKawaks/lang/Chinese(Simp).lng
  • WinKawaks/lang/Czech.lng
  • WinKawaks/lang/Dutch.lng
  • WinKawaks/lang/English.lng
  • WinKawaks/lang/Finnish.lng
  • WinKawaks/lang/French.lng
  • WinKawaks/lang/German.lng
  • WinKawaks/lang/Greek.lng
  • WinKawaks/lang/Hebrew.lng
  • WinKawaks/lang/Italian.lng
  • WinKawaks/lang/Japanese.lng
  • WinKawaks/lang/Korean.lng
  • WinKawaks/lang/L33t.lng
  • WinKawaks/lang/Norwegian.lng
  • WinKawaks/lang/Polish.lng
  • WinKawaks/lang/Portuguese.lng
  • WinKawaks/lang/Russian.lng
  • WinKawaks/lang/Serbian.lng
  • WinKawaks/lang/Spanish.lng
  • WinKawaks/lang/Swedish.lng
  • WinKawaks/lang/Turkish.lng
  • WinKawaks/roms/neogeo/neogeo.zip
    .zip

    Password: 12345667

  • 000-lo.lo
  • asia-s3.rom
  • neo-epo.bin
  • neo-po.bin
  • neodebug.rom
  • sfix.sfix
  • sm1.sm1
  • sp-e.sp1
  • sp-j2.rom
  • sp-s.sp1
  • sp-s2.sp1
  • sp1.jipan.1024
  • uni-bios_1_0.rom
  • uni-bios_1_1.rom
  • uni-bios_1_2.rom
  • uni-bios_1_2o.rom
  • uni-bios_1_3.rom
  • uni-bios_2_0.rom
  • uni-bios_2_1.rom
  • uni-bios_2_2.rom
  • uni-bios_2_3.rom
  • uni-bios_2_3o.rom
  • usa_2slt.bin
  • vs-bios.rom
  • WinKawaks/sample_ini_files.zip
    .zip

    Password: 12345667

  • sfz3jr1.ini
  • xmcota.ini
  • xmvsf.ini
  • WinKawaks/tracklst/19xx.dat
  • WinKawaks/tracklst/avsp.dat
  • WinKawaks/tracklst/batcirj.dat
  • WinKawaks/tracklst/captcomm.dat
  • WinKawaks/tracklst/csclubj.dat
  • WinKawaks/tracklst/cybotsj.dat
  • WinKawaks/tracklst/ddtod.dat
  • WinKawaks/tracklst/dstlk.dat
  • WinKawaks/tracklst/ecofghtr.dat
  • WinKawaks/tracklst/ffight.dat
  • WinKawaks/tracklst/kof94.dat
  • WinKawaks/tracklst/kof95.dat
  • WinKawaks/tracklst/kof96.dat
  • WinKawaks/tracklst/kof97.dat
  • WinKawaks/tracklst/kof98.dat
  • WinKawaks/tracklst/kof99.dat
  • WinKawaks/tracklst/msh.dat
  • WinKawaks/tracklst/mshvsf.dat
  • WinKawaks/tracklst/mvsc.dat
  • WinKawaks/tracklst/pbobblen.dat
  • WinKawaks/tracklst/ringdest.dat
  • WinKawaks/tracklst/sf2.dat
  • WinKawaks/tracklst/sf2ce.dat
  • WinKawaks/tracklst/sfa.dat
  • WinKawaks/tracklst/sfa2.dat
  • WinKawaks/tracklst/sfa3.dat
  • WinKawaks/tracklst/sgemf.dat
  • WinKawaks/tracklst/spf2t.dat
  • WinKawaks/tracklst/ssf2.dat
  • WinKawaks/tracklst/vsav.dat
  • WinKawaks/tracklst/vsav2.dat
  • WinKawaks/tracklst/wakuwak7.dat
  • WinKawaks/tracklst/xmcota.dat
  • WinKawaks/tracklst/xmvsf.dat
  • WinKawaks/whatsnew.txt