Resubmissions

08/06/2024, 02:24

240608-cvn1aaff5x 8

08/06/2024, 02:06

240608-cjt26agd83 10

General

  • Target

    File_ver3.rar

  • Size

    7.1MB

  • MD5

    e00ce0fed5e235a7b637f1f99b40d03c

  • SHA1

    bbcc47fcd49c92e488eb049c34080d4ab83e5e6c

  • SHA256

    f5eb4c418e14eb104bfe49e49be961c903ed740279b97035d6d0ce6f8758f34e

  • SHA512

    29e837ee8bbaba998ce8f24492ee0e0e7c7393eea23ca03b8ba851d7edcda475e4fce98f225d232366ad9a70434b756d6141637c756f96daa25de733fb3b39c3

  • SSDEEP

    196608:bbd77/lAUOQxWJ9x8fuvv/VGC+G+Of2t2fZ:bbd7CJz+m/VVuq2AfZ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • File_ver3.rar
    .rar
  • Licenses.txt
  • concrt140.dll
    .dll windows:6 windows x64 arch:x64

    Password: 1234

    7f070c3864ce20e1b9879a9e3126cd30


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    Password: 1234

    6affc89bdfe3a47fde3269fc7912cb21


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • res_mods/1.23.0.0/scripts/client/gui/mods/mod_a.pyc
  • res_mods/1.23.0.0/scripts/client/gui/mods/mod_a.xml
  • res_mods/1.24.0.0/readme.txt
  • res_mods/1.25.0.0/readme.txt
  • setup.exe
    .exe windows:6 windows x64 arch:x64

    Password: 1234

    448b6888b26145ced7ce018aab459303


    Headers

    Imports

    Sections

  • updates/icudtl.dat