General

  • Target
    GrowtopiaInstaller (4).exe
  • Size 281.4MB
  • Sample240514-rpl13aah65
  • SHA256 497896e8dd085860f7082b73e3f42bcf6b1bbf96efdca99ae322dc3f0fae5ff8
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

File Explorer

  • GrowtopiaInstaller (4).exe
    .exe 281.4MB
  • $PLUGINSDIR/InstallOptions.dll
    .dll 14KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/ioSpecial.ini
    211B
  • $PLUGINSDIR/modern-header.bmp
    25KB
  • $PLUGINSDIR/modern-wizard.bmp
    150KB
  • Growtopia.exe
    .exe 40.0MB
  • MicrosoftEdgeWebview2Setup.exe
    .exe 1.6MB
  • SecureEngineSDK64.dll
    .dll 28KB
  • anzu.dll
    .dll 3.6MB
  • sdkencryptedappticket64.dll
    .dll 1010KB
  • steam_api64.dll
    .dll 291KB
  • ubiservices.dll
    .dll 14.8MB
  • vc_redist.x64.exe
    .exe 13.9MB
  • vc_redist.x86.exe
    .exe 13.1MB
  • zlibwapi.dll
    .dll 87KB

GrowtopiaInstaller (4).exe

  • IMPHASH b78ecf47c0a3e24a6f4af114e2d1f5de
  • SHA256 497896e8dd085860f7082b73e3f42bcf6b1bbf96efdca99ae322dc3f0fae5ff8
  • MD5 SHA1 SHA512 SSDEEP
Digest
39:68:a6:4a:78:0c:e5:67:88:7a:1c:ae:e8:46:f5:14:ff:8e:f9:8e:cb:ed:c7:bf:63:e8:ba:8d:48:4e:49:14
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=UBISOFT ENTERTAINMENT INC.,O=UBISOFT ENTERTAINMENT INC.,L=Montreal,ST=Quebec,C=CA
Minor OS version
0
Major OS version
4
Entry point
12653
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths