Overview

overview

7

Static

static

7

HFxRoom.exe

windows7-x64

7

HFxRoom.exe

windows10-2004-x64

7

SFmpq.dll

windows7-x64

1

SFmpq.dll

windows10-2004-x64

1

SW3GLib.dll

windows7-x64

1

SW3GLib.dll

windows10-2004-x64

1

UpData.exe

windows7-x64

7

UpData.exe

windows10-2004-x64

7

VSxRoom.exe

windows7-x64

7

VSxRoom.exe

windows10-2004-x64

7

WarHelper.exe

windows7-x64

3

WarHelper.exe

windows10-2004-x64

3

WarMapHelper.exe

windows7-x64

7

WarMapHelper.exe

windows10-2004-x64

7

WarMpqPlug.exe

windows7-x64

7

WarMpqPlug.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    ce282e10539094d964b392a274c9979c

  • Size

    649KB

  • MD5

    ce282e10539094d964b392a274c9979c

  • SHA1

    7b5848718802d9544fcb6b29a2297ebf8bf5f5ca

  • SHA256

    30cc64888b0a0e39ff7452b40e5396233cd870dd57bb53e22111a14bcab6a5c5

  • SHA512

    a6f1896f61468128a075aa329907edf42c4ec4592e59b7c9b736e84773aa395462e368c2eae8d76a0641b89b80e3494f446edc1f69586d9a5e407f477f13f741

  • SSDEEP

    12288:JLHusRj2oPX9EViQ/vzX4bJsAP9ebDczs6xAIb32S+5AIzP/JvOPVu7V4/:NO5oP9vuvzGJPVsAzziIb3OXzXJa4y

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 5 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

Files

  • ce282e10539094d964b392a274c9979c
    .zip
  • Chat/DOTA.txt
  • Chat/κ3C.txt
  • Chat/Ц.txt
  • Chat/ؼ1.txt
  • Chat/ؼ2.txt
  • Chat/RPG.txt
  • Chat/ų.txt
  • Chat/.txt
  • Close.wav
  • HFxRoom.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • KeyDim/Dota/Dota ļ˵.txt
  • KeyDim/Dota/ĺɫ/ɳ - Crixalis.ini
  • KeyDim/Dota/ĺɫ/ʹ֮Դ - Atropos.ini
  • KeyDim/Dota/ĺɫ/Ѫħ - Strygwyr.ini
  • KeyDim/Dota/ĺɫ/Ӱħ - Nevermore.ini
  • KeyDim/Dota/ĺɫ/ϫ - Leviathan.ini
  • KeyDim/Dota/ĺɫ/Ѩ֯ - Anub`seran.ini
  • KeyDim/Dota/ĺɫ/ - Abaddon.ini
  • KeyDim/Dota/ĺɫ/ - Mogul Kahn.ini
  • KeyDim/Dota/ĺɫ/ѻ - Barathrum.ini
  • KeyDim/Dota/ĺɫ/鷨ʦ - Rotund`jere.ini
  • KeyDim/Dota/ĺɫ/ - Pudge.ini
  • KeyDim/Dota/ĺɫ/ʦ - Pugna.ini
  • KeyDim/Dota/ƻ/Ӱʦ - Dazzle.ini
  • KeyDim/Dota/ƻ/ʬ - Dirge.ini
  • KeyDim/Dota/ƻ/ - Keal.ini
  • KeyDim/Dota/ƻ/زʦ - Meepo.ini
  • KeyDim/Dota/ƻ/ڰ - Ish'kafel.ini
  • KeyDim/Dota/ƻ/׻ - Harbinger.ini
  • KeyDim/Dota/ƻ/Ԩ - Azgalor.ini
  • KeyDim/Dota/ƻ/ʿ - Demnok Lannik.ini
  • KeyDim/Dota/ƻ/ҽ - Vol'jin.ini
  • KeyDim/Dota/ƻ/Ĺ - Mercurial.ini
  • KeyDim/Dota//ʥô̿ - Lunaya.ini
  • KeyDim/Dota//˫ͷ - Jakiro.ini
  • KeyDim/Dota//籩֮ - Raijin Thunderkeg.ini
  • KeyDim/Dota//ʿ - Razzil Darkbrew.ini
  • KeyDim/Dota//ʿ - Huskar.ini
  • KeyDim/Dota// - Rexxar.ini
  • KeyDim/Dota//Ů - Puck.ini
  • KeyDim/Dota//֮Ů˾ - Mirana Nightshade.ini
  • KeyDim/Dota//ĩʹ - Lucifer.ini
  • KeyDim/Dota//ʳʬ - N`aix.ini
  • KeyDim/Dota//ʹŮ - Akasha.ini
  • KeyDim/Dota//ڤ - Viper.ini
  • KeyDim/Dota//ҹħ - Balanar.ini
  • KeyDim/Dota//Ѩ̿ - Anub`arak.ini
  • KeyDim/Dota//߷Ů - Medusa.ini
  • KeyDim/Dota//Ļ - Razor.ini
  • KeyDim/Dota//ռ - Darkterror.ini
  • KeyDim/Dota// - Slardar.ini
  • KeyDim/Dota// - Bone Clinkz.ini
  • KeyDim/Dota// - King Leoric.ini
  • KeyDim/Dota/峿/ˮŮ - Rylai Crestfall.ini
  • KeyDim/Dota/峿/徫 - Morphling.ini
  • KeyDim/Dota/峿/³ - Syllabear.ini
  • KeyDim/Dota/峿/֮ - Shandelzare Silkwood.ini
  • KeyDim/Dota/峿/ţ - Raigor Stonehoof.ini
  • KeyDim/Dota/峿/ʥ - Yurnero.ini
  • KeyDim/Dota/峿/˽ - Sven.ini
  • KeyDim/Dota/峿/Ⱥ - Slithice.ini
  • KeyDim/Dota/峿/㶺ħʦ - Lina Inverse.ini
  • KeyDim/Dota/峿/δ̿ - Rikimaru.ini
  • KeyDim/Dota/峿/֮ - Zeus.ini
  • KeyDim/Dota/峿/ȻħŮ - Aiushtha.ini
  • KeyDim/Dota//ȫʿ - Purist Thunderwrath.ini
  • KeyDim/Dota//˾ѻ - Kardel Sharpeye.ini
  • KeyDim/Dota//Ӱ - Rhasta.ini
  • KeyDim/Dota// - Bradwarden.ini
  • KeyDim/Dota//зʦ - Magina.ini
  • KeyDim/Dota//ձ - Rigwarl.ini
  • KeyDim/Dota//ڰ - Traxex.ini
  • KeyDim/Dota//ħս - Jah`rakal.ini
  • KeyDim/Dota//ʿ - Knight Davion.ini
  • KeyDim/Dota//ͽ - Gondar.ini
  • KeyDim/Dota//è - Mangix.ini
  • KeyDim/Dota//֮ʿ - Luna Moonfang.ini
  • KeyDim/Dota/ҹ/ - Magnus.ini
  • KeyDim/Dota/ҹ/ħʦ - Lion.ini
  • KeyDim/Dota/ҹ/Ӱ̿ - Mortred.ini
  • KeyDim/Dota/ҹ/ʿ - Nessaj.ini
  • KeyDim/Dota/ҹ/綾ʿ - Lesale Deathbringer.ini
  • KeyDim/Dota/ҹ/ - Banehallow.ini
  • KeyDim/Dota/ҹ/ - Terrorblade.ini
  • KeyDim/Dota/ҹ/ĥ - Leshrac the Malicious.ini
  • KeyDim/Dota/ҹ/ - Visage.ini
  • KeyDim/Dota/ҹ/֪ - Krobelus.ini
  • KeyDim/Dota/ҹ/ - Kel'Thuzad.ini
  • KeyDim/Dota/ҹ/ĸ֩ - Black Arachnia.ini
  • KeyDim/Dota//ɽ - Tiny.ini
  • KeyDim/Dota//ʥʿ - Chen.ini
  • KeyDim/Dota//ʳħħʦ - Aggron Stonebreaker.ini
  • KeyDim/Dota//Ĭʿ - Nortrom.ini
  • KeyDim/Dota//粼ֹʦ - Squee and Spleen.ini
  • KeyDim/Dota//֮ - Ezalor.ini
  • KeyDim/Dota//Ӱì - Azwraith.ini
  • KeyDim/Dota// - Darchrow.ini
  • KeyDim/Dota//ʿ - Rooftrellen.ini
  • KeyDim/Dota//֪ - Furion.ini
  • KeyDim/Dota//޲ - Boush.ini
  • KeyDim/Dota//սʿ - Ulfsaar.ini
  • KeyDim/ħͨ.ini
  • KeyDim/κ3C - ţͷ.ini
  • KeyDim/κ3C - .ini
  • KeyDim/ն.ini
  • KeyDim/ɷɱ.ini
  • KeyDim/ų֮Ұ.ini
  • KeyDim/3 - ŷ.ini
  • Open.wav
  • Restore.wav
  • SFmpq.dll
    .dll windows:4 windows x86 arch:x86

    09d0478591d4f788cb3e5ea416c25237


    Headers

    Imports

    Exports

    Sections

  • SW3GLib.dll
    .dll windows:5 windows x86 arch:x86

    348b62bb5cd5f75c2f868949522b56ec


    Headers

    Imports

    Exports

    Sections

  • UpData.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • VSxRoom.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • WH_Set.ini
  • WH_UpData.dat
  • WH_UpData/Updata_Info.txt
  • WarHelper.exe
    .exe windows:4 windows x86 arch:x86

    36bd5f16972cd12f917eef17e39decd2


    Headers

    Imports

    Sections

  • WarMapHelper.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • WarMpqPlug.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ʹñؿ˵.txt
  • ־.txt
  • ʹЭ.txt
  • Ϸؼ.txt