General

  • Target

    e1f9d0f864bb89a7084b8af4c959d04c

  • Size

    4.8MB

  • MD5

    e1f9d0f864bb89a7084b8af4c959d04c

  • SHA1

    9c62226f3fff8dc2837f8ca35cd971fdff1cd4ec

  • SHA256

    cf1df17c2105cf334c8e66dea374d34639ada4d4f51492a30901ab60591567ab

  • SHA512

    bff25cd9172201138745716c4d7576b6543825be8f50bd6fad21050ca2059cc0289b88f5374df0b3efc07ea78f1bffc61b604cb005c118a222a6a1183ac79805

  • SSDEEP

    98304:Ju4SN45NAQlMorMuMdt2W0bEJ4xDamohP4gsCUDkMkmLOMhO:G45Nd29/dt2WsEJnSClLmLOuO

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • e1f9d0f864bb89a7084b8af4c959d04c
    .rar
  • HA_MarioXP120_DYJ.exe
    .exe windows:4 windows x86 arch:x86

    5f65217e6605a4cda5d136ec8a66748c


    Headers

    Imports

    Sections

  • $PLUGINSDIR/AdvSplash.dll
    .dll windows:4 windows x86 arch:x86

    741b6bafe355b63a372d737b30543a95


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Splash_δ-1.bmp
  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7d85f9c30f9e87a65fff848de2c96ac1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/bgm_1.mid
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • CNCS32.DLL
    .dll windows:4 windows x86 arch:x86

    2927b6e02f5f1f8f55570102238e5a91


    Headers

    Imports

    Exports

    Sections

  • Editor/License.txt
  • Editor/MarioXPEdit.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Editor/Readme.txt
  • License.txt
  • MarioXP.cca
  • MarioXP.exe
    .exe windows:4 windows x86 arch:x86

    0faa7bad7dc69a9345dab39277a378e2


    Headers

    Imports

    Sections

  • Readme.txt
  • help.chm
    .chm
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    5f65217e6605a4cda5d136ec8a66748c


    Headers

    Imports

    Sections

  • 下载说明.htm
    .html .js polyglot