General

  • Target

    Hexaquest_Minidemo2_Windows.zip

  • Size

    264.5MB

  • MD5

    2f2e3a6dbd26c2ab09f527531dbfb57c

  • SHA1

    be66753209316356f34f77745cceb8011fd9f0d0

  • SHA256

    bfa5d4b1c9d726ee17d7f6cf600084df7b40b6ac8b1862c0680e75f661c21eba

  • SHA512

    1ea78cbcd33a8c787a97ee4671fa426dffcdbe31ccf7ee0cff25a73ae33c1246f0d30035f21ca45a67f8d8f12b537c58e56381490e207108b0d4a8bb3705e3a4

  • SSDEEP

    6291456:QFUKbKA0mSGzUdoJZfjbvIuogq4aUDC81eGjCd2m2lHkA6w+KZlNw6sm6y:Q2Kk5dobfjbrogq4aUDT22RTbZlNwrg

Score
10/10

Malware Config

Signatures

  • Privateloader family
  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • Hexaquest_Minidemo2_Windows.zip
    .zip
  • Hexaquest_Minidemo2_Windows/Engine/Binaries/ThirdParty/DbgHelp/dbghelp.dll
    .dll windows:10 windows x64 arch:x64

    a85654ad1c6f02f9037c7fb457c5ed50


    Headers

    Imports

    Exports

    Sections

  • Hexaquest_Minidemo2_Windows/Engine/Binaries/ThirdParty/MsQuic/v220/win64/msquic.dll
    .dll windows:6 windows x64 arch:x64

    8ed6b48c4ed6aedb3c082252b3ad5662


    Headers

    Imports

    Exports

    Sections

  • Hexaquest_Minidemo2_Windows/Engine/Binaries/ThirdParty/NVIDIA/NVaftermath/Win64/GFSDK_Aftermath_Lib.x64.dll
    .dll windows:6 windows x64 arch:x64

    f6444cd8b00f7b259ecc779ee4740ff5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Hexaquest_Minidemo2_Windows/Engine/Binaries/ThirdParty/Ogg/Win64/VS2015/libogg_64.dll
    .dll windows:6 windows x64 arch:x64

    3c3debc2ef7563148ac298f37a8145f3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Hexaquest_Minidemo2_Windows/Engine/Binaries/ThirdParty/Vorbis/Win64/VS2015/libvorbis_64.dll
    .dll windows:6 windows x64 arch:x64

    bb8beedbff4e95bc2364cca7408a6c49


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Hexaquest_Minidemo2_Windows/Engine/Binaries/ThirdParty/Vorbis/Win64/VS2015/libvorbisfile_64.dll
    .dll windows:6 windows x64 arch:x64

    b12af25010b95ce995fb040ce984ef7f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Hexaquest_Minidemo2_Windows/Engine/Binaries/ThirdParty/Windows/XAudio2_9/x64/xaudio2_9redist.dll
    .dll windows:6 windows x64 arch:x64

    f336e160482c81972d16c5670e93a480


    Headers

    Imports

    Exports

    Sections

  • Hexaquest_Minidemo2_Windows/Engine/Binaries/Win64/D3D12/D3D12Core.dll
    .dll windows:6 windows x64 arch:x64

    4928987102696a280994d367bd9459b4


    Headers

    Imports

    Exports

    Sections

  • Hexaquest_Minidemo2_Windows/Engine/Binaries/Win64/OpenImageDenoise.dll
    .dll windows:6 windows x64 arch:x64

    1eb48a03ab3ca5dae5498445347b5ccf


    Headers

    Imports

    Exports

    Sections

  • Hexaquest_Minidemo2_Windows/Engine/Binaries/Win64/UnrealGame-Win64-Shipping.exe
    .exe windows:6 windows x64 arch:x64

    43cf2b48c378aac34e96f898c48a101d


    Headers

    Imports

    Exports

    Sections

  • Hexaquest_Minidemo2_Windows/Engine/Binaries/Win64/tbb.dll
    .dll windows:6 windows x64 arch:x64

    2cff83950926a2b09ef82fe6504f7c60


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Hexaquest_Minidemo2_Windows/Engine/Binaries/Win64/tbb12.dll
    .dll windows:6 windows x64 arch:x64

    46c8e924ddd665228880dd7dd5aa7b91


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Hexaquest_Minidemo2_Windows/Engine/Binaries/Win64/tbbmalloc.dll
    .dll windows:6 windows x64 arch:x64

    81a5262e15e3bb078867e5b439d2a119


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Hexaquest_Minidemo2_Windows/Engine/Content/Slate/Cursor/invisible.cur
  • Hexaquest_Minidemo2_Windows/Engine/Extras/Redist/en-us/UEPrereqSetup_x64.exe
    .exe windows:5 windows x86 arch:x86

    67715e556e3a78ea78c756db800102a3


    Headers

    Imports

    Sections

  • Hexaquest_Minidemo2_Windows/Hexaquest.exe
    .exe windows:6 windows x64 arch:x64

    2e3e44ac6f091a23ef84e409c0ea9177


    Headers

    Imports

    Sections

  • Hexaquest_Minidemo2_Windows/Hexaquest/Content/Paks/Hexaquest-Windows.pak
  • Hexaquest_Minidemo2_Windows/Hexaquest/Content/Paks/Hexaquest-Windows.ucas
  • Hexaquest_Minidemo2_Windows/Hexaquest/Content/Paks/Hexaquest-Windows.utoc
  • Hexaquest_Minidemo2_Windows/Hexaquest/Content/Paks/global.ucas
  • Hexaquest_Minidemo2_Windows/Hexaquest/Content/Paks/global.utoc
  • Hexaquest_Minidemo2_Windows/Manifest_NonUFSFiles_Win64.txt
  • Hexaquest_Minidemo2_Windows/Manifest_UFSFiles_Win64.txt