General

  • Target

    c3ceba64f0c906fb0341e55f98869de9

  • Size

    4.8MB

  • MD5

    c3ceba64f0c906fb0341e55f98869de9

  • SHA1

    66d549ea439f38d5d7a0938faebdfb95a7005f7e

  • SHA256

    526ad7ec7665605064f488c6e8f8e7a3bde3bfdd6398a9797478483314ff8846

  • SHA512

    28c57c954988be516adb18f2597686b03558e46a8e77fd5e04e7b5ecc8bbc731e15c4b3178dd180bb24ecb9b9cdacf7a4cbc48102af1e555261b9c1afbab90d4

  • SSDEEP

    98304:okYu5n9S3IKAzIDSbISARIgjTaLZ/ZQB/cn448og8Uey6ogi//QaFpMooogi//Qh:UoSvrSTb/CBUnUog3Ya7vLYa7VG

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 2 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 22 IoCs

    Checks for missing Authenticode signature.

Files

  • c3ceba64f0c906fb0341e55f98869de9
    .rar
  • - Muserver99z Viciados/CS/CS.exe
    .exe windows:4 windows x86 arch:x86

    a131f3d4a21371069f46e7beb0db50b9


    Headers

    Imports

    Sections

  • - Muserver99z Viciados/CS/CS.log
  • - Muserver99z Viciados/CS/Leia-Me.txt
  • - Muserver99z Viciados/CS/common.ini
  • - Muserver99z Viciados/DataServer1/KIMDU.dll
    .dll windows:4 windows x86 arch:x86

    bdbf0f67d51de174ca0260db26d2c536


    Headers

    Imports

    Exports

    Sections

  • - Muserver99z Viciados/DataServer1/Leia-Me.txt
  • - Muserver99z Viciados/DataServer1/WZ_AutoUpdater.exe
    .exe windows:4 windows x86 arch:x86

    3688717528d22e50c7f3a178709df129


    Headers

    Imports

    Sections

  • - Muserver99z Viciados/DataServer1/WZ_UM.dll
    .dll windows:4 windows x86 arch:x86

    bdbf0f67d51de174ca0260db26d2c536


    Headers

    Imports

    Exports

    Sections

  • - Muserver99z Viciados/DataServer1/dataserver.exe
    .exe windows:4 windows x86 arch:x86

    ca3aaf6a4db19973d911b130f4501569


    Headers

    Imports

    Sections

  • - Muserver99z Viciados/DataServer1/wz_filelist.dat
  • - Muserver99z Viciados/DataServer1/wz_update.ini
  • - Muserver99z Viciados/DataServer2/KIMDU.dll
    .dll windows:4 windows x86 arch:x86

    bdbf0f67d51de174ca0260db26d2c536


    Headers

    Imports

    Exports

    Sections

  • - Muserver99z Viciados/DataServer2/Leia-Me.txt
  • - Muserver99z Viciados/DataServer2/WZ_AutoUpdater.exe
    .exe windows:4 windows x86 arch:x86

    3688717528d22e50c7f3a178709df129


    Headers

    Imports

    Sections

  • - Muserver99z Viciados/DataServer2/WZ_UM.dll
    .dll windows:4 windows x86 arch:x86

    bdbf0f67d51de174ca0260db26d2c536


    Headers

    Imports

    Exports

    Sections

  • - Muserver99z Viciados/DataServer2/dataserver.exe
    .exe windows:4 windows x86 arch:x86

    ca3aaf6a4db19973d911b130f4501569


    Headers

    Imports

    Sections

  • - Muserver99z Viciados/DataServer2/wz_filelist.dat
  • - Muserver99z Viciados/DataServer2/wz_update.ini
  • - Muserver99z Viciados/ExDB/Exdb.exe
    .exe windows:4 windows x86 arch:x86

    6761cd01e2e6422055cd6f75aaaf6dc8


    Headers

    Imports

    Sections

  • - Muserver99z Viciados/ExDB/LEAME.txt
  • - Muserver99z Viciados/ExDB/Leia-Me.txt
  • - Muserver99z Viciados/ExDB/LogProc.dll
    .dll windows:4 windows x86 arch:x86

    c176c048630f4cc5ce3185d711b16eef


    Headers

    Imports

    Exports

    Sections

  • - Muserver99z Viciados/ExDB/WZSock.dll
    .dll windows:4 windows x86 arch:x86

    58e34ec70c13bb589e92e333cabfd80d


    Headers

    Imports

    Exports

    Sections

  • - Muserver99z Viciados/GameServer/CTGSSet.ini
  • - Muserver99z Viciados/GameServer/CTKey.KEY
  • - Muserver99z Viciados/GameServer/DropItem.txt
  • - Muserver99z Viciados/GameServer/GameServer.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • - Muserver99z Viciados/GameServer/GsEnc.Dat
  • - Muserver99z Viciados/GameServer/ItemMoney.txt
  • - Muserver99z Viciados/GameServer/Leia-Me.txt
  • - Muserver99z Viciados/GameServer/MyGSFun.BAK
    .dll windows:4 windows x86 arch:x86

    60f6aeb41e8b2847543638cf1863f66b


    Headers

    Imports

    Exports

    Sections

  • - Muserver99z Viciados/GameServer/MyGSFun.dll
    .dll windows:4 windows x86 arch:x86

    60f6aeb41e8b2847543638cf1863f66b


    Headers

    Imports

    Exports

    Sections

  • - Muserver99z Viciados/GameServer/MyGSFun.ini
  • - Muserver99z Viciados/GameServer/MyGsFun.log
  • - Muserver99z Viciados/GameServer/SayFilter.txt
  • - Muserver99z Viciados/GameServer/WGDB.xml
    .xml
  • - Muserver99z Viciados/GameServer/mumsg.dll
    .dll windows:4 windows x86 arch:x86

    6bdd810e99dea218ea8ba34db49abd74


    Headers

    Imports

    Exports

    Sections

  • - Muserver99z Viciados/JoinServer/Data/ServerContro.dat
  • - Muserver99z Viciados/JoinServer/JoinServer.exe
    .exe windows:4 windows x86 arch:x86

    0968cbdd4742b30ee507031fe08aa22e


    Headers

    Imports

    Sections

  • - Muserver99z Viciados/JoinServer/Leia-Me.txt
  • - Muserver99z Viciados/JoinServer/message_chs.wtf
  • - Muserver99z Viciados/JoinServer/message_tai.wtf
  • - Muserver99z Viciados/JoinServer/vmatcontrols.dat
  • - Muserver99z Viciados/Leia-Me.txt
  • - Muserver99z Viciados/MU2003_EVENT_SERVER/DATA/svconfig.ini
  • - Muserver99z Viciados/MU2003_EVENT_SERVER/LOG_ERROR/MU2003_LOG_ERROR 2006-7-29.txt
  • - Muserver99z Viciados/MU2003_EVENT_SERVER/LOG_ERROR/MU2003_LOG_ERROR 2006-7-30.txt
  • - Muserver99z Viciados/MU2003_EVENT_SERVER/LOG_ERROR/MU2003_LOG_ERROR 2006-7-31.txt
  • - Muserver99z Viciados/MU2003_EVENT_SERVER/LOG_ERROR/MU2003_LOG_ERROR 2006-8-2.txt
  • - Muserver99z Viciados/MU2003_EVENT_SERVER/LOG_ERROR/MU2003_LOG_ERROR 2006-8-25.txt
  • - Muserver99z Viciados/MU2003_EVENT_SERVER/LOG_ERROR/MU2003_LOG_ERROR 2006-8-26.txt
  • - Muserver99z Viciados/MU2003_EVENT_SERVER/LOG_ERROR/MU2003_LOG_ERROR 2006-8-28.txt
  • - Muserver99z Viciados/MU2003_EVENT_SERVER/LOG_ERROR/MU2003_LOG_ERROR 2006-8-29.txt
  • - Muserver99z Viciados/MU2003_EVENT_SERVER/LOG_ERROR/MU2003_LOG_ERROR 2006-8-3.txt
  • - Muserver99z Viciados/MU2003_EVENT_SERVER/LOG_ERROR/MU2003_LOG_ERROR 2006-8-5.txt
  • - Muserver99z Viciados/MU2003_EVENT_SERVER/LOG_ERROR/MU2003_LOG_ERROR 2006-8-8.txt
  • - Muserver99z Viciados/MU2003_EVENT_SERVER/Leia-Me.txt
  • - Muserver99z Viciados/MU2003_EVENT_SERVER/WZ_MU2003_EVENT_SERVER.exe
    .exe windows:4 windows x86 arch:x86

    515cf7c77331d675db9532c3559f67d7


    Headers

    Imports

    Sections

  • - Muserver99z Viciados/MuEditor 2.0/1.9-2.0.txt
  • - Muserver99z Viciados/MuEditor 2.0/CharactersList.txt
  • - Muserver99z Viciados/MuEditor 2.0/DefaultSkin.skn
  • - Muserver99z Viciados/MuEditor 2.0/Leia-Me.txt
  • - Muserver99z Viciados/MuEditor 2.0/MuEdit.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • - Muserver99z Viciados/MuEditor 2.0/MuEdit.ini
  • - Muserver99z Viciados/MuEditor 2.0/muitem.mdb
  • - Muserver99z Viciados/MuEditor 2.1/1.9-2.0.txt
  • - Muserver99z Viciados/MuEditor 2.1/CharactersList.txt
  • - Muserver99z Viciados/MuEditor 2.1/DefaultSkin.skn
  • - Muserver99z Viciados/MuEditor 2.1/Leia-Me.txt
  • - Muserver99z Viciados/MuEditor 2.1/MuEdit.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • - Muserver99z Viciados/MuEditor 2.1/MuEdit.ini
  • - Muserver99z Viciados/data/BloodCastle.dat
  • - Muserver99z Viciados/data/CheckFileList.dat
  • - Muserver99z Viciados/data/ConnectMember.txt
  • - Muserver99z Viciados/data/Dec1.dat
  • - Muserver99z Viciados/data/DevilSquare.dat
  • - Muserver99z Viciados/data/Enc2.dat
  • - Muserver99z Viciados/data/EncTerrain31.att
  • - Muserver99z Viciados/data/IpList.dat
  • - Muserver99z Viciados/data/Items.txt
  • - Muserver99z Viciados/data/Leia-Me.txt
  • - Muserver99z Viciados/data/MSVCP60.DLL
    .dll windows:4 windows x86 arch:x86

    1b1839992700df52b049b87961a724e3


    Headers

    Imports

    Exports

    Sections

  • - Muserver99z Viciados/data/Monster.txt
  • - Muserver99z Viciados/data/MonsterSetbase.txt
  • - Muserver99z Viciados/data/ServerInfo.dat
  • - Muserver99z Viciados/data/T31.att
  • - Muserver99z Viciados/data/T32.att
  • - Muserver99z Viciados/data/T7.att
  • - Muserver99z Viciados/data/Terrain1.att
  • - Muserver99z Viciados/data/Terrain10.att
  • - Muserver99z Viciados/data/Terrain11.att
  • - Muserver99z Viciados/data/Terrain12.att
  • - Muserver99z Viciados/data/Terrain18.att
  • - Muserver99z Viciados/data/Terrain19.att
  • - Muserver99z Viciados/data/Terrain2.att
  • - Muserver99z Viciados/data/Terrain20.att
  • - Muserver99z Viciados/data/Terrain25.att
  • - Muserver99z Viciados/data/Terrain26.att
  • - Muserver99z Viciados/data/Terrain3.att
  • - Muserver99z Viciados/data/Terrain31.att
  • - Muserver99z Viciados/data/Terrain31a.att
  • - Muserver99z Viciados/data/Terrain32.at
  • - Muserver99z Viciados/data/Terrain32.att
  • - Muserver99z Viciados/data/Terrain32a.att
  • - Muserver99z Viciados/data/Terrain32aa.att
  • - Muserver99z Viciados/data/Terrain34.att
  • - Muserver99z Viciados/data/Terrain34a.att
  • - Muserver99z Viciados/data/Terrain35.att
  • - Muserver99z Viciados/data/Terrain4.att
  • - Muserver99z Viciados/data/Terrain5.att
  • - Muserver99z Viciados/data/Terrain6.at
  • - Muserver99z Viciados/data/Terrain6.att
  • - Muserver99z Viciados/data/Terrain7.att
  • - Muserver99z Viciados/data/Terrain8.att
  • - Muserver99z Viciados/data/Terrain9.att
  • - Muserver99z Viciados/data/badsyntax.txt
  • - Muserver99z Viciados/data/commonserver.cfg
  • - Muserver99z Viciados/data/eventitembag.txt
  • - Muserver99z Viciados/data/eventitembag10.txt
  • - Muserver99z Viciados/data/eventitembag11.txt
  • - Muserver99z Viciados/data/eventitembag12.txt
  • - Muserver99z Viciados/data/eventitembag2.txt
  • - Muserver99z Viciados/data/eventitembag3.txt
  • - Muserver99z Viciados/data/eventitembag4.txt
  • - Muserver99z Viciados/data/eventitembag5.txt
  • - Muserver99z Viciados/data/eventitembag6.txt
  • - Muserver99z Viciados/data/eventitembag7.txt
  • - Muserver99z Viciados/data/eventitembag8.txt
  • - Muserver99z Viciados/data/eventitembag9.txt
  • - Muserver99z Viciados/data/gate.txt
  • - Muserver99z Viciados/data/lang/chs/CheckSum.dat
  • - Muserver99z Viciados/data/lang/chs/Cópia de Item(chs).txt
  • - Muserver99z Viciados/data/lang/chs/Item(chs).txt
  • - Muserver99z Viciados/data/lang/chs/Item(chs)/Item(chs).txt
  • - Muserver99z Viciados/data/lang/chs/Quest(chs).txt
  • - Muserver99z Viciados/data/lang/chs/Skill(chs).txt
  • - Muserver99z Viciados/data/lang/chs/TestClient_PatchInfo.txt
  • - Muserver99z Viciados/data/lang/chs/commonloc.cfg
  • - Muserver99z Viciados/data/lang/chs/message_chs.wtf
  • - Muserver99z Viciados/data/lang/chs/message_kor.wtf
  • - Muserver99z Viciados/data/lang/kor/CheckSum.dat
  • - Muserver99z Viciados/data/lang/kor/Item(kor)/item(Kor).txt
  • - Muserver99z Viciados/data/lang/kor/Quest(Kor).txt
  • - Muserver99z Viciados/data/lang/kor/commonloc.cfg
  • - Muserver99z Viciados/data/lang/kor/item(kor).txt
  • - Muserver99z Viciados/data/lang/kor/item(kor).txtx
  • - Muserver99z Viciados/data/lang/kor/itemaRR(kor).txt
  • - Muserver99z Viciados/data/lang/kor/message_kor.wtf
  • - Muserver99z Viciados/data/lang/kor/skill(Kor).txt
  • - Muserver99z Viciados/data/lang/kor/skill(Kor)_old.txt
  • - Muserver99z Viciados/data/lang/kor/skill.txt
  • - Muserver99z Viciados/data/lang/message_chs.wtf
  • - Muserver99z Viciados/data/lang/message_kor.wtf
  • - Muserver99z Viciados/data/lang/tai/094m/CheckSum.dat
  • - Muserver99z Viciados/data/lang/tai/094m/commonloc.cfg
  • - Muserver99z Viciados/data/lang/tai/094m/commonloc.cfg.bak
  • - Muserver99z Viciados/data/lang/tai/CheckSum.dat
  • - Muserver99z Viciados/data/lang/tai/CheckSumold.dat
  • - Muserver99z Viciados/data/lang/tai/Item(Tai).txt
  • - Muserver99z Viciados/data/lang/tai/Quest(Tai).txt
  • - Muserver99z Viciados/data/lang/tai/Skill(Tai).txt
  • - Muserver99z Viciados/data/lang/tai/TestClient_PatchInfo.txt
  • - Muserver99z Viciados/data/lang/tai/commonloc.cfg
  • - Muserver99z Viciados/data/lang/tai/commonloc.cfg.bak
  • - Muserver99z Viciados/data/mchset.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • - Muserver99z Viciados/data/message_chs.wtf
  • - Muserver99z Viciados/data/message_kor.wtf
  • - Muserver99z Viciados/data/message_tai.wtf
  • - Muserver99z Viciados/data/shop0.txt
  • - Muserver99z Viciados/data/shop1.txt
  • - Muserver99z Viciados/data/shop10.txt
  • - Muserver99z Viciados/data/shop11.txt
  • - Muserver99z Viciados/data/shop12.txt
  • - Muserver99z Viciados/data/shop13.txt
  • - Muserver99z Viciados/data/shop14.txt
  • - Muserver99z Viciados/data/shop15.txt
  • - Muserver99z Viciados/data/shop16.txt
  • - Muserver99z Viciados/data/shop2.txt
  • - Muserver99z Viciados/data/shop3.txt
  • - Muserver99z Viciados/data/shop4.txt
  • - Muserver99z Viciados/data/shop5.txt
  • - Muserver99z Viciados/data/shop6.txt
  • - Muserver99z Viciados/data/shop7.txt
  • - Muserver99z Viciados/data/shop8.txt
  • - Muserver99z Viciados/data/shop9.txt
  • - Muserver99z Viciados/db backs/Leia-Me.txt
  • - Muserver99z Viciados/db backs/MuOnline
  • - Muserver99z Viciados/db backs/Ranking
  • - Muserver99z Viciados/links/01.lnk
    .lnk
  • - Muserver99z Viciados/links/02.lnk
    .lnk
  • - Muserver99z Viciados/links/03.lnk
    .lnk
  • - Muserver99z Viciados/links/04.lnk
    .lnk
  • - Muserver99z Viciados/links/05.lnk
    .lnk
  • - Muserver99z Viciados/links/06.lnk
    .lnk
  • - Muserver99z Viciados/links/07.lnk
    .lnk
  • - Muserver99z Viciados/links/08.lnk
    .lnk
  • - Muserver99z Viciados/links/Leia-Me.txt
  • - Muserver99z Viciados/links/Subserver2.lnk
    .lnk
  • - Muserver99z Viciados/links/Subserver3.lnk
    .lnk
  • - Muserver99z Viciados/links/Subserver4.lnk
    .lnk
  • - Muserver99z Viciados/links/Subserver5.lnk
    .lnk