244281fecab504010f7e1d3927e9b0f1f6230c442bd7f5c2cc075523cca17d40

Sharing

Copy URL Twitter E-mail

General

Target

244281fecab504010f7e1d3927e9b0f1f6230c442bd7f5c2cc075523cca17d40
Size

6.1MB
MD5

92731a6589c5a119a6159656b8ed8884
SHA1

1479de504dbace75a4fd452346a715ff7a49d5f2
SHA256

244281fecab504010f7e1d3927e9b0f1f6230c442bd7f5c2cc075523cca17d40
SHA512

c087bc94665f5778687454f03ec2cd0299b2efe99a82609ba86117c3c8481027955a6f04fbfdf77d087b76b1d4b00e21b7a2cdeb4bbf2cac1b25b6670e9a0184
SSDEEP

196608:1YONWzJDgvfTyVNHKkxI2zyTqzf/XT+cJYhg:1YOEzJcvbymR2yTqT/KcShg

Score

3^/10

Malware Config

Signatures

Unsigned PE 6 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/bin/Release/MOD_KWXZ8I.dll
unpack001/2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/dll/Assembly-CSharp.dll
unpack001/2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/obj/Debug/ModMain.dll
unpack001/2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/obj/Release/MOD_KWXZ8I.dll
unpack001/2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/obj/Release/ModMain.dll
unpack001/2827641660 _color=_red__功法升级与合成__color_/debug/Mod_KWXZ8I/ModCode/dll/MOD_KWXZ8I.dll

Files

244281fecab504010f7e1d3927e9b0f1f6230c442bd7f5c2cc075523cca17d40
.zip
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModAssets/这个目录下的所有文件都会被一起导出（打开查看说明）.txt
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/.vs/ModMain/FileContentIndex/0004aeae-8fcf-4e68-a5cd-882d2cf43c45.vsidx
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/.vs/ModMain/FileContentIndex/24053051-aaaa-4045-bb34-9d6da845100b.vsidx
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/.vs/ModMain/FileContentIndex/277ea928-bce4-492d-829a-49a2c35c1d44.vsidx
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/.vs/ModMain/FileContentIndex/999b6bfd-eda5-4409-9d0d-92a1db7e541c.vsidx
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/ConsUtil.cs
.js
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/Example/Example.cs
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/Library/ScriptAssemblies/ModMain.xml
.xml
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/MartialDeal1.cs
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/MartialDealUtil.cs
.js
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/MartialOptionBase.cs
.js
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/MartialOptionCopy.cs
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/MartialOptionFuse.cs
.js
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/MartialOptionGradeUp.cs
.js
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/MartialOptionName.cs
.js
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/ModMain.cs
.js
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/ModMain.csproj
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/ModMain.csproj.user
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/ModMain.sln
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/OptionData.cs
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/Patch.cs
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/Properties/AssemblyInfo.cs
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/bin/Release/MOD_KWXZ8I.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\game\鬼谷八荒bak\mod\ModProject_KWXZ8I\ModProject\ModCode\ModMain\obj\Release\MOD_KWXZ8I.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/bin/Release/MOD_KWXZ8I.pdb
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/dao/CommonDAO.cs
.js
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/dll/Assembly-CSharp.dll
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 27.9MB - Virtual size: 27.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/martialdecompose/DecomposeService.cs
.js
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/martialfuse/MartialFuseService.cs
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/martialfuse/UnitSkillDataProps.cs
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/martialprefixsource/MainSkillPO.cs
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/martialprefixsource/PrefixsSourcePO.cs
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/martialprefixsource/PrefixsSourceService.cs
.js
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/martialsuit/MartialSuitService.cs
.js
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/obj/Debug/.NETFramework,Version=v4.7.2.AssemblyAttributes.cs
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/obj/Debug/DesignTimeResolveAssemblyReferences.cache
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/obj/Debug/ModMain.csproj.AssemblyReference.cache
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/obj/Debug/ModMain.csproj.CoreCompileInputs.cache
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/obj/Debug/ModMain.csproj.FileListAbsolute.txt
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/obj/Debug/ModMain.csprojAssemblyReference.cache
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/obj/Debug/ModMain.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\guigubahuang\guigubahuang\kaifaban\immortal_code\GameClient\Mod\modFQA\编写代码教程\ModMain\obj\Debug\ModMain.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/obj/Release/.NETFramework,Version=v4.7.2.AssemblyAttributes.cs
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/obj/Release/DesignTimeResolveAssemblyReferencesInput.cache
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/obj/Release/MOD_KWXZ8I.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\game\鬼谷八荒bak\mod\ModProject_KWXZ8I\ModProject\ModCode\ModMain\obj\Release\MOD_KWXZ8I.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/obj/Release/MOD_KWXZ8I.pdb
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/obj/Release/ModMain.csproj.AssemblyReference.cache
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/obj/Release/ModMain.csproj.CoreCompileInputs.cache
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/obj/Release/ModMain.csproj.FileListAbsolute.txt
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/obj/Release/ModMain.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\guigubahuang\guigubahuang\kaifaban\immortal_code\GameClient\Mod\modFQA\代码编写教程\ModMain\obj\Release\ModMain.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/ui/CreateUI.cs
.js
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/ui/HItemSelect.cs
.js
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModCode/ModMain/ui/HOneInputForm.cs
.js
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModData.cache
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModExcel/DramaDialogue.xlsx
.xlsx office2007
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModExcel/DramaOptions.xlsx
.xlsx office2007
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModExcel/FortuitousEvent.xlsx
.xlsx office2007
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModExcel/GameItemCost.xlsx
.xlsx office2007
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModProject.cache
2827641660 _color=_red__功法升级与合成__color_/ModProject/ModProjectPreview.png
.png
2827641660 _color=_red__功法升级与合成__color_/debug/Mod_KWXZ8I/ModAssets/这个目录下的所有文件都会被一起导出（打开查看说明）.txt
2827641660 _color=_red__功法升级与合成__color_/debug/Mod_KWXZ8I/ModCode/dll/MOD_KWXZ8I.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\game\鬼谷八荒bak\mod\ModProject_KWXZ8I\ModProject\ModCode\ModMain\obj\Release\MOD_KWXZ8I.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
2827641660 _color=_red__功法升级与合成__color_/debug/Mod_KWXZ8I/ModExcel/DramaDialogue.json
2827641660 _color=_red__功法升级与合成__color_/debug/Mod_KWXZ8I/ModExcel/DramaOptions.json
2827641660 _color=_red__功法升级与合成__color_/debug/Mod_KWXZ8I/ModExcel/FortuitousEvent.json
2827641660 _color=_red__功法升级与合成__color_/debug/Mod_KWXZ8I/ModExcel/GameItemCost.json
2827641660 _color=_red__功法升级与合成__color_/debug/Mod_KWXZ8I/ModExportData.cache
2827641660 _color=_red__功法升级与合成__color_/debug/Mod_KWXZ8I/ModProjectPreview.png

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 68KB - Virtual size: 68KB

.rsrc Size: 1024B - Virtual size: 888B

.reloc Size: 512B - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 27.9MB - Virtual size: 27.9MB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 2KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 872B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 68KB - Virtual size: 68KB

.rsrc Size: 1024B - Virtual size: 888B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 9KB - Virtual size: 8KB

.rsrc Size: 1024B - Virtual size: 872B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 68KB - Virtual size: 68KB

.rsrc Size: 1024B - Virtual size: 888B

.reloc Size: 512B - Virtual size: 12B

.text
Size: 68KB - Virtual size: 68KB

.rsrc
Size: 1024B - Virtual size: 888B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 27.9MB - Virtual size: 27.9MB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 872B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 68KB - Virtual size: 68KB

.rsrc
Size: 1024B - Virtual size: 888B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 9KB - Virtual size: 8KB

.rsrc
Size: 1024B - Virtual size: 872B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 68KB - Virtual size: 68KB

.rsrc
Size: 1024B - Virtual size: 888B

.reloc
Size: 512B - Virtual size: 12B