BS_Naked_Enemy_Ava[.]7z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BS_Naked_Enemy_Ava.7z
Size

45.2MB
MD5

3d483fafec4f322fdc8dec76d80f2717
SHA1

731d0bb7f49f38510a532d137daf1ea532e281aa
SHA256

f9e6b7c68a37a9b4db6021a1332b79d667135c3667af2a5763fe2d96b9bd43f5
SHA512

eecf1b97bc3030afb43fe770c63d9e7664b1795f5987b67ef8d5596c6fdff593450eabbb702302517c24b00f3d871adaadb61b3e87e6a789545465953fdc25ee
SSDEEP

786432:EUoc8Ck2XThEgFV8W7wxii7hgW09089nsbBfqxNLMODdQh93iyOKMoP+20L0UF:EUV8Ck2TbL7wxr7u9rVsxqvwODGhdfOv

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/CustomAvatarFramework/0Harmony.dll
unpack001/CustomAvatarFramework/CustomAvatarFramework.dll

Files

BS_Naked_Enemy_Ava.7z
.7z
+++ More mods on nudepatch.net +++.URL
Ava/.idea/.idea.Ava.dir/.idea/.gitignore
Ava/.idea/.idea.Ava.dir/.idea/encodings.xml
.xml
Ava/.idea/.idea.Ava.dir/.idea/indexLayout.xml
.xml
Ava/.idea/.idea.Ava.dir/.idea/projectSettingsUpdater.xml
.xml
Ava/.idea/.idea.Ava.dir/.idea/workspace.xml
.xml
Ava/Containers/Container_NPCAva.json
Ava/Creatures/Creature_Ava.json
Ava/Items/Item_Avatar_Ava.json
Ava/Items/Item_Wardrobe_ApparelAva.json
Ava/Waves/Wave_Avas1.json
Ava/Waves/Wave_Avas2.json
Ava/Waves/Wave_Avas3.json
Ava/ava_assets_all.bundle
Ava/catalog_2021.09.05.10.59.21.hash
Ava/catalog_2021.09.05.10.59.21.json
Ava/manifest.json
CustomAvatarFramework/0Harmony.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 749KB - Virtual size: 749KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CustomAvatarFramework/Bones.txt
CustomAvatarFramework/Containers/Container_NPCSample.txt
CustomAvatarFramework/Creatures/Creature_Sample.txt
CustomAvatarFramework/CustomAvatarFramework.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\nikon\RiderProjects\CustomAvatarFramework\CustomAvatarFramework\obj\Release\CustomAvatarFramework.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CustomAvatarFramework/Game.json
CustomAvatarFramework/Items/Item_Avatar_CustomAvatarReset.json
CustomAvatarFramework/Items/Item_Avatar_CustomAvatarTransparentItem.json
CustomAvatarFramework/Items/Item_Avatar_Sample.txt
CustomAvatarFramework/Items/Item_Wardrobe_ApparelSample.txt
CustomAvatarFramework/Level_CustomAvatarFramework.json
CustomAvatarFramework/build.json
CustomAvatarFramework/catalog_2021.08.29.22.38.04.hash
CustomAvatarFramework/catalog_2021.08.29.22.38.04.json
CustomAvatarFramework/customavatarframework_assets_all.bundle
CustomAvatarFramework/manifest.json
readme.txt