General

  • Target

    Cockatrice-Rings.of.the.Wild-2.9.0-Win7+-64bit.exe

  • Size

    43.4MB

  • MD5

    5120ec283e83e4b71c55072b10c419e1

  • SHA1

    11e34da9b158dc041707cfd3451e8732eb790cf3

  • SHA256

    ad053960df48f51c3ebb09a452462cb7ee766f4e6f5d498d675ebd36e5e9f1f1

  • SHA512

    13d9ddfb8a77c221658d57bb0895f56c036dcc58ba875ce57d1a1a7e8224358ed69b2d7cc3b1743c2a486cfe839f1447d0c9fdea02c4e429ecba33919fcba560

  • SSDEEP

    786432:i/Ps5zPvQuP8FNlTtPOBlBvoiIO7zMElOxs5DMAxcnsoI6Xh3tJ:i/PAzXvGNtolu67zMEESMAxClFXhv

Score
3/10

Malware Config

Signatures

  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

Files

  • Cockatrice-Rings.of.the.Wild-2.9.0-Win7+-64bit.exe
    .exe windows:4 windows x86 arch:x86

    56a78d55f3f7af51443e58e0ce2fb5f6


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    5e62e8e248e7364886b604bd1fcf4c13


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • LIBPQ.dll
    .dll windows:6 windows x64 arch:x64

    dfa7590ef54ae078f2a7a7fd1eebc6f8


    Headers

    Imports

    Exports

    Sections

  • Plugins/audio/qtaudio_wasapi.dll
    .dll windows:6 windows x64 arch:x64

    97893cf9ba330ec2980ec6da9403f43f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/audio/qtaudio_windows.dll
    .dll windows:6 windows x64 arch:x64

    1c5ff8da39b1af9d7b7a3c16edd04032


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/iconengines/qsvgicon.dll
    .dll windows:6 windows x64 arch:x64

    cb7bcafac90ccee76bfa5d1af9cbb951


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/imageformats/qgif.dll
    .dll windows:6 windows x64 arch:x64

    83ab23a3497602da865da8cb952268f4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/imageformats/qicns.dll
    .dll windows:6 windows x64 arch:x64

    68eb3d9bbb362d72fd269c31936761fe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/imageformats/qico.dll
    .dll windows:6 windows x64 arch:x64

    35e88ae047c52cbe14244b0b041c3d03


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/imageformats/qjpeg.dll
    .dll windows:6 windows x64 arch:x64

    bb20e83974c98263f528b6a929a02bdf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/imageformats/qsvg.dll
    .dll windows:6 windows x64 arch:x64

    2cf21fe757a0a84f5b8a5594668ca036


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/imageformats/qtga.dll
    .dll windows:6 windows x64 arch:x64

    870b9d72e7052f0dd8d119bd2bf4aa05


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/imageformats/qtiff.dll
    .dll windows:6 windows x64 arch:x64

    9fe4e69f865bd693d0a0abfdb4d03dc3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/imageformats/qwbmp.dll
    .dll windows:6 windows x64 arch:x64

    305f5f129c922b027d0dae792141dfe6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/imageformats/qwebp.dll
    .dll windows:6 windows x64 arch:x64

    75ef711dbfdc9de487f7cfea43217256


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/mediaservice/dsengine.dll
    .dll windows:6 windows x64 arch:x64

    889d8030c65f580ddd002fbfacbe74a4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/mediaservice/wmfengine.dll
    .dll windows:6 windows x64 arch:x64

    52a5b8315ff73abbd15ef15794f718e8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/platforms/qdirect2d.dll
    .dll windows:6 windows x64 arch:x64

    1d2459a85bdefca8e70b327058cd02c4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/platforms/qminimal.dll
    .dll windows:6 windows x64 arch:x64

    39e38171acc6c093221924a7d99f83ff


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/platforms/qoffscreen.dll
    .dll windows:6 windows x64 arch:x64

    18e31d7343627c27ddaa6810fdb0e219


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/platforms/qwindows.dll
    .dll windows:6 windows x64 arch:x64

    b8287a581b45f1f245f12be7c017f17f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/printsupport/windowsprintersupport.dll
    .dll windows:6 windows x64 arch:x64

    376306594a1824669e49904ce763dfe6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/sqldrivers/qsqlite.dll
    .dll windows:6 windows x64 arch:x64

    81126aba7f7a6189db40b88afea54148


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/sqldrivers/qsqlodbc.dll
    .dll windows:6 windows x64 arch:x64

    acfce55392947a30501ebe5acbe751c4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/sqldrivers/qsqlpsql.dll
    .dll windows:6 windows x64 arch:x64

    5dacbf05e8cc156bb50566cd20eecc08


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/styles/qwindowsvistastyle.dll
    .dll windows:6 windows x64 arch:x64

    3d3040efa646d84bc8bc2fb2d65abf99


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Core.dll
    .dll windows:6 windows x64 arch:x64

    6d44a16d5801e1cdb9b3ba4cb45314b0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Gui.dll
    .dll windows:6 windows x64 arch:x64

    ddcb78f3a4297344c620aa83af64ddfd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Multimedia.dll
    .dll windows:6 windows x64 arch:x64

    7600665a844daa64d88eb4f04005092e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Network.dll
    .dll windows:6 windows x64 arch:x64

    c0e2c58de25ce77b283ad911460cea11


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5PrintSupport.dll
    .dll windows:6 windows x64 arch:x64

    ad1c8bbd41a8772e591598332fe1342c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Sql.dll
    .dll windows:6 windows x64 arch:x64

    f5ad3dcde1acf335cee21a88fd9c22a4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Svg.dll
    .dll windows:6 windows x64 arch:x64

    6c684f5759e91250e01af7b49c78ca3f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5WebSockets.dll
    .dll windows:6 windows x64 arch:x64

    8293f00521f39ee8d36d02be4a182e21


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Widgets.dll
    .dll windows:6 windows x64 arch:x64

    8ac796c200bcdb47fab6297f47883022


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cockatrice.exe
    .exe windows:6 windows x64 arch:x64

    adfc655b86a427515d043f410d99f744


    Headers

    Imports

    Sections

  • dbconverter.exe
    .exe windows:6 windows x64 arch:x64

    637ec6561a8db8e52f7ce0f8eb71322c


    Headers

    Imports

    Sections

  • libcrypto-1_1-x64.dll
    .dll windows:6 windows x64 arch:x64

    c8242f351eb5bd18b406aed5e9b7c21c


    Headers

    Imports

    Exports

    Sections

  • libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    be8998f097fb76449be2b5db9405c2cc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • liblzma.dll
    .dll windows:6 windows x64 arch:x64

    813e2c3ce6f131809859991eb758203c


    Headers

    Imports

    Exports

    Sections

  • libprotobuf.dll
    .dll windows:6 windows x64 arch:x64

    df4a6f872610973916897d7fe27c9450


    Headers

    Imports

    Exports

    Sections

  • libssl-1_1-x64.dll
    .dll windows:6 windows x64 arch:x64

    000c7e2a1de2afa27afb4c093bc9cac0


    Headers

    Imports

    Exports

    Sections

  • libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    6f5ad8788601f62c7a3e511279f33281


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • oracle.exe
    .exe windows:6 windows x64 arch:x64

    dae7746c0833a46af99f95ef75e461a8


    Headers

    Imports

    Sections

  • qt.conf
  • servatrice.exe
    .exe windows:6 windows x64 arch:x64

    65b3290f21576a540660dcea5339b2d8


    Headers

    Imports

    Sections

  • servatrice.ini.example
  • servatrice.sql
  • sounds/Default/attack_step.wav
  • sounds/Default/buddy_join.wav
  • sounds/Default/buddy_leave.wav
  • sounds/Default/end_step.wav
  • sounds/Default/player_join.wav
  • sounds/Default/start_combat.wav
  • sounds/Default/tap_card.wav
  • sounds/Legacy/all_mention.wav
  • sounds/Legacy/chat_mention.wav
  • sounds/Legacy/draw_step.wav
  • sounds/Legacy/play_card.wav
  • sounds/Legacy/player_join.wav
  • sounds/Legacy/private_message.wav
  • sounds/Legacy/shuffle.wav
  • sounds/Legacy/tap_card.wav
  • sounds/Legacy/untap_card.wav
  • themes/Fabric/zones/handzone.png
    .png
  • themes/Fabric/zones/playerzone.png
    .png
  • themes/Fabric/zones/stackzone.png
    .png
  • themes/Fabric/zones/tablezone.png
    .png
  • themes/Leather/zones/handzone.png
    .png
  • themes/Leather/zones/playerzone.png
    .png
  • themes/Leather/zones/stackzone.png
    .png
  • themes/Leather/zones/tablezone.png
    .png
  • themes/Plasma/zones/handzone.png
    .png
  • themes/Plasma/zones/playerzone.png
    .png
  • themes/Plasma/zones/stackzone.png
    .png
  • themes/Plasma/zones/tablezone.png
    .png
  • themes/VelvetMarble/zones/handzone.jpg
    .jpg
  • themes/VelvetMarble/zones/playerzone.jpg
    .jpg
  • themes/VelvetMarble/zones/stackzone.jpg
    .jpg
  • themes/VelvetMarble/zones/tablezone.jpg
    .jpg
  • translations/cockatrice_cs.qm
  • translations/cockatrice_de.qm
  • translations/cockatrice_el.qm
  • translations/[email protected]
  • translations/cockatrice_en_US.qm
  • translations/cockatrice_es.qm
  • translations/cockatrice_et.qm
  • translations/cockatrice_fi.qm
  • translations/cockatrice_fr.qm
  • translations/cockatrice_hu.qm
  • translations/cockatrice_it.qm
  • translations/cockatrice_ja.qm
  • translations/cockatrice_ko.qm
  • translations/cockatrice_nb.qm
  • translations/cockatrice_nl.qm
  • translations/cockatrice_pl.qm
  • translations/cockatrice_pt.qm
  • translations/cockatrice_pt_BR.qm
  • translations/cockatrice_ru.qm
  • translations/cockatrice_sr.qm
  • translations/cockatrice_sv.qm
  • translations/cockatrice_tr.qm
  • translations/cockatrice_zh-Hans.qm
  • translations/oracle_cs.qm
  • translations/oracle_de.qm
  • translations/oracle_el.qm
  • translations/[email protected]
  • translations/oracle_en_US.qm
  • translations/oracle_es.qm
  • translations/oracle_et.qm
  • translations/oracle_fi.qm
  • translations/oracle_fr.qm
  • translations/oracle_hu.qm
  • translations/oracle_it.qm
  • translations/oracle_ja.qm
  • translations/oracle_ko.qm
  • translations/oracle_nb.qm
  • translations/oracle_nl.qm
  • translations/oracle_pl.qm
  • translations/oracle_pt.qm
  • translations/oracle_pt_BR.qm
  • translations/oracle_ru.qm
  • translations/oracle_sr.qm
  • translations/oracle_sv.qm
  • translations/oracle_tr.qm
  • translations/oracle_zh-Hans.qm
  • vcredist_x64.exe
    .exe windows:5 windows x86 arch:x86

    1a5cdbf711fee14b077e599d13fddab2


    Code Sign

    Headers

    Imports

    Sections

  • zlib1.dll
    .dll windows:6 windows x64 arch:x64

    d879d2294039900ef484e0f01607f882


    Headers

    Imports

    Exports

    Sections