Undertale[.]v1[.]08-SiMPLEX[.]rar

Sharing

Copy URL

Twitter E-mail

General

Target

Undertale.v1.08-SiMPLEX.rar
Size

118.4MB
MD5

58b800e26466d3de1e0e56e78208e85c
SHA1

a2d85654d25bf6d36e3d8771f3f4de41a31e2feb
SHA256

aa7737b58d30fee1f341b920dbf35d09e374cb79f1b1664b68100123942b878a
SHA512

579795960b7230f9c9d8717618a0230816278ebc86efddfc3de7977985984fdf9d743f9fbd271958c0237dedfe1fbcb9a93006ecfde37e2b853e974fd6bff919
SSDEEP

3145728:+sp4MF1RixTmMpI47CShe9Aqn11+SlUolRdZgfta5B5b:+shFMK4SAqn11RUotgftgh

Score

3^/10

Malware Config

Signatures

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Undertale.v1.08-SiMPLEX/SiMPLEX.exe
unpack001/Undertale.v1.08-SiMPLEX/bassmod.dll
unpack001/Undertale.v1.08-SiMPLEX/unarc.exe

Files

Undertale.v1.08-SiMPLEX.rar
.rar
Undertale.v1.08-SiMPLEX/IGG-GAMES.COM.url
.url
Undertale.v1.08-SiMPLEX/PCGAMESTORRENTS.COM.url
.url
Undertale.v1.08-SiMPLEX/README.txt
Undertale.v1.08-SiMPLEX/SiMPLEX.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Undertale.v1.08-SiMPLEX/SiMPLEX.ini
Undertale.v1.08-SiMPLEX/Simplex.bin
Undertale.v1.08-SiMPLEX/bassmod.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASSMOD_ErrorGetCode
BASSMOD_Free
BASSMOD_GetCPU
BASSMOD_GetDeviceDescription
BASSMOD_GetVersion
BASSMOD_GetVolume
BASSMOD_Init
BASSMOD_MusicDecode
BASSMOD_MusicFree
BASSMOD_MusicGetLength
BASSMOD_MusicGetName
BASSMOD_MusicGetPosition
BASSMOD_MusicGetVolume
BASSMOD_MusicIsActive
BASSMOD_MusicLoad
BASSMOD_MusicPause
BASSMOD_MusicPlay
BASSMOD_MusicPlayEx
BASSMOD_MusicRemoveSync
BASSMOD_MusicSetAmplify
BASSMOD_MusicSetPanSep
BASSMOD_MusicSetPosition
BASSMOD_MusicSetPositionScaler
BASSMOD_MusicSetSync
BASSMOD_MusicSetVolume
BASSMOD_MusicStop
BASSMOD_SetVolume

Sections

Size: 31KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Undertale.v1.08-SiMPLEX/simplex.nfo
Undertale.v1.08-SiMPLEX/unarc.exe
.exe windows:4 windows x86 arch:x86

90d9d707df05ee9dfd38b12bc913503a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegCloseKey
RegDeleteKeyW
RegEnumKeyExW
RegOpenKeyExW

kernel32

AddAtomA
CloseHandle
CreateEventW
CreateFileW
CreateProcessW
CreateSemaphoreA
CreateSemaphoreW
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineW
GetConsoleTitleW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetExitCodeProcess
GetFileAttributesW
GetLastError
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetProcessTimes
GetProcessWorkingSetSize
GetStartupInfoW
GetSystemInfo
GetTempPathW
GetThreadPriority
GetThreadTimes
GetTickCount
GlobalMemoryStatus
GlobalMemoryStatusEx
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
LoadLibraryW
QueryPerformanceCounter
QueryPerformanceFrequency
ReleaseSemaphore
ResetEvent
SetConsoleTitleW
SetEvent
SetFileAttributesW
SetFileTime
SetLastError
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SystemTimeToFileTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
WaitForSingleObject
lstrlenW

msvcrt

_close
_read
_stricmp
_write
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_beginthreadex
_cexit
_filelengthi64
_flsbuf
_iob
_isctype
_lrotr
_lseeki64
_onexit
_pctype
_setmode
_waccess
_wmkdir
_wopen
_wremove
_wrename
_wrmdir
abort
atexit
calloc
exit
fprintf
free
gets
gmtime
localtime
longjmp
malloc
memchr
memcpy
memmove
memset
printf
puts
qsort
realloc
signal
sprintf
sscanf
strcat
strchr
strcmp
strcpy
strftime
strlen
strncmp
strncpy
strstr
tolower
wcschr
wcscmp
wcscpy
wcslen
wcsrchr

ole32

CoInitializeEx

shell32

CommandLineToArgvW
SHGetFolderPathW
ShellExecuteExW

user32

CharToOemW
ExitWindowsEx
GetActiveWindow
GetCapture
GetCaretPos
GetClipboardOwner
GetClipboardViewer
GetCursorPos
GetDesktopWindow
GetFocus
GetInputState
GetMessagePos
GetMessageTime
GetOpenClipboardWindow
GetProcessWindowStation
OemToCharW

Sections

.text
Size: 183KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 741KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 132KB - Virtual size: 131KB

.rsrc Size: 7KB - Virtual size: 7KB

.reloc Size: 512B - Virtual size: 12B

Headers

File Characteristics

Exports

Exports

Sections

Size: 31KB - Virtual size: 68KB

Size: 2KB - Virtual size: 1KB

90d9d707df05ee9dfd38b12bc913503a

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

ole32

shell32

user32

Sections

.text Size: 183KB - Virtual size: 182KB

.data Size: 5KB - Virtual size: 5KB

.rdata Size: 15KB - Virtual size: 14KB

.bss Size: - Virtual size: 741KB

.idata Size: 4KB - Virtual size: 4KB

.text
Size: 132KB - Virtual size: 131KB

.rsrc
Size: 7KB - Virtual size: 7KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 183KB - Virtual size: 182KB

.data
Size: 5KB - Virtual size: 5KB

.rdata
Size: 15KB - Virtual size: 14KB

.bss
Size: - Virtual size: 741KB

.idata
Size: 4KB - Virtual size: 4KB