General

  • Target

    gwater2.zip

  • Size

    1.8MB

  • MD5

    e61994cbad22172a799dea689da4bf0c

  • SHA1

    a9dd27a23dfc20afd7bfd91d3617f11b3f2a968f

  • SHA256

    d030dfa6f5399372ffa019be1375c29c96caeff116f4ab6244974cb2808a871a

  • SHA512

    9dac66c159e3e3d13e6863dd398604d8353da7be6fe7d9a1f8ea1a46a1dee8d9aa963e4acc3e0142415a5da19ff999a5809c8aedf5d00729940859e837b5af51

  • SSDEEP

    49152:swJuu1eX0BdUClqIz9en7eGN77hDUqGP8Pd:XbA0BOCAD7eqhYqGEPd

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • gwater2.zip
    .zip
  • GFSDK_Aftermath_Lib.x64.dll
    .dll windows:6 windows x64 arch:x64

    11d2010ec90c8de0e46228e77331830d


    Headers

    Imports

    Exports

    Sections

  • GFSDK_Aftermath_Lib.x86.dll
    .dll windows:6 windows x86 arch:x86

    90e51886c3d6b1895d867d9abe225a1e


    Headers

    Imports

    Exports

    Sections

  • NvFlexExtReleaseD3D_x64.dll
    .dll windows:6 windows x64 arch:x64

    01c642daec0b3d54a62781921d9e414f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NvFlexExtReleaseD3D_x86.dll
    .dll windows:6 windows x86 arch:x86

    52da370fb408714c8d9137fda77e7344


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NvFlexReleaseD3D_x64.dll
    .dll windows:6 windows x64 arch:x64

    9b9dfad3362e669003da77ce608620e9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NvFlexReleaseD3D_x86.dll
    .dll windows:6 windows x86 arch:x86

    a2e60a5ec916d802825dfb1facbb5bd9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • amd_ags_x64.dll
    .dll windows:6 windows x64 arch:x64

    d038ad5b521e4868024fcd5da7483828


    Headers

    Imports

    Exports

    Sections

  • amd_ags_x86.dll
    .dll windows:6 windows x86 arch:x86

    6cb76594131d02161daf334010d75cf7


    Headers

    Imports

    Exports

    Sections

  • garrysmod/addons/gwater2/LICENSE.txt
  • garrysmod/addons/gwater2/lua/autorun/client/gwater_menu2.lua
  • garrysmod/addons/gwater2/lua/autorun/gwater2_init.lua
    .js
  • garrysmod/addons/gwater2/lua/gwater2_shaders.lua
  • garrysmod/addons/gwater2/lua/starfall/libs_cl/gwater2module.lua
  • garrysmod/addons/gwater2/lua/weapons/weapon_gw2_watergun.lua
  • garrysmod/addons/gwater2/materials/gwater2/finalpass.vmt
  • garrysmod/addons/gwater2/materials/gwater2/normals.vmt
  • garrysmod/addons/gwater2/materials/gwater2/smooth.vmt
  • garrysmod/addons/gwater2/materials/gwater2/vol_model.vtf
  • garrysmod/addons/gwater2/materials/gwater2/volumetric.vmt
  • garrysmod/addons/gwater2/resource/fonts/SpaceMonoRegular.ttf
  • garrysmod/addons/gwater2/resource/fonts/TitilliumWeb-Regular.ttf
  • garrysmod/addons/gwater2/resource/fonts/coolvetica.ttf
  • garrysmod/lua/bin/gmcl_gwater2_main_win32.dll
    .dll windows:6 windows x86 arch:x86

    7de5f8cd9729918d4150dfffbb10f4df


    Headers

    Imports

    Exports

    Sections

  • garrysmod/lua/bin/gmcl_gwater2_win32.dll
    .dll windows:6 windows x86 arch:x86

    c56cad8604f06cfd24fe925ebf5286c3


    Headers

    Imports

    Exports

    Sections

  • garrysmod/lua/bin/gmcl_gwater2_win64.dll
    .dll windows:6 windows x64 arch:x64

    e240b2bdc8c29e59c9bb9cfc9c48f199


    Headers

    Imports

    Exports

    Sections

  • garrysmod/shaders/fxc/GWaterFinalpass_ps30.vcs
  • garrysmod/shaders/fxc/GWaterFinalpass_vs30.vcs
  • garrysmod/shaders/fxc/GWaterNormals_ps30.vcs
  • garrysmod/shaders/fxc/GWaterNormals_vs30.vcs
  • garrysmod/shaders/fxc/GWaterSmooth_ps30.vcs
  • garrysmod/shaders/fxc/GWaterVolumetric_ps30.vcs
  • garrysmod/shaders/fxc/GWaterVolumetric_vs30.vcs
  • nvToolsExt32_1.dll
    .dll windows:5 windows x86 arch:x86

    0ab9c21eda47621bfe1e43f2a754406a


    Headers

    Imports

    Exports

    Sections

  • nvToolsExt64_1.dll
    .dll windows:5 windows x64 arch:x64

    0a58f558339c5681aa34c9c02fc145aa


    Headers

    Imports

    Exports

    Sections

  • steam_appid.txt