Resubmissions

14/06/2024, 14:12

240614-rhyfhsxflm 7

21/03/2024, 22:18

240321-17z53sdg91 7

General

  • Target

    8cma7g.zip

  • Size

    114.8MB

  • MD5

    3949b26e1d0592995777af61c1c8180a

  • SHA1

    b3a9253292251e2da13ab3aa01aeaf8df3c20af8

  • SHA256

    3f93d92a04fb6cfc9e51bf4966a3b95108644eb86477959e1c54dec69fe00573

  • SHA512

    48aebe53b53d253e402dce2af116b1168dba63e0cbcec414368230b3667fc1e6d8136b5277b4e3756c623dc96355cf67beee6a5baf18e7234fde3d48775df2f5

  • SSDEEP

    3145728:qltVJhHDtzDvZZ/c75u8KOtQl/zwqamcDpY/kWO9eK:q/hHD19Z/hlcQhw7mmek8K

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • 8cma7g.zip
    .zip
  • app-64/ArenaWars.exe
    .exe windows:5 windows x64 arch:x64

    cf2e00be8791789115f4817e296ec9f5


    Headers

    Imports

    Exports

    Sections

  • app-64/LICENSE.electron.txt
  • app-64/LICENSES.chromium.html
  • app-64/chrome_100_percent.pak
  • app-64/chrome_200_percent.pak
  • app-64/d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    8235041cfd6fffb926142c2c78013446


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • app-64/ffmpeg.dll
    .dll windows:5 windows x64 arch:x64

    14338d2168d869b1b53d66354179e8c5


    Headers

    Imports

    Exports

    Sections

  • app-64/icudtl.dat
  • app-64/libEGL.dll
    .dll windows:5 windows x64 arch:x64

    592e6e55d4fe33d1bd84e3b3016fe3b2


    Headers

    Imports

    Exports

    Sections

  • app-64/libGLESv2.dll
    .dll windows:5 windows x64 arch:x64

    b3384e5182b61c941805b07b7dc28efe


    Headers

    Imports

    Exports

    Sections

  • app-64/locales/af.pak
    .ps1
  • app-64/locales/am.pak
  • app-64/locales/ar.pak
  • app-64/locales/bg.pak
  • app-64/locales/bn.pak
  • app-64/locales/ca.pak
  • app-64/locales/cs.pak
  • app-64/locales/da.pak
  • app-64/locales/de.pak
  • app-64/locales/el.pak
  • app-64/locales/en-GB.pak
  • app-64/locales/en-US.pak
  • app-64/locales/es-419.pak
  • app-64/locales/es.pak
  • app-64/locales/et.pak
  • app-64/locales/fa.pak
  • app-64/locales/fi.pak
  • app-64/locales/fil.pak
  • app-64/locales/fr.pak
  • app-64/locales/gu.pak
  • app-64/locales/he.pak
  • app-64/locales/hi.pak
  • app-64/locales/hr.pak
  • app-64/locales/hu.pak
  • app-64/locales/id.pak
  • app-64/locales/it.pak
  • app-64/locales/ja.pak
  • app-64/locales/kn.pak
  • app-64/locales/ko.pak
  • app-64/locales/lt.pak
  • app-64/locales/lv.pak
  • app-64/locales/ml.pak
  • app-64/locales/mr.pak
  • app-64/locales/ms.pak
  • app-64/locales/nb.pak
  • app-64/locales/nl.pak
  • app-64/locales/pl.pak
  • app-64/locales/pt-BR.pak
  • app-64/locales/pt-PT.pak
  • app-64/locales/ro.pak
  • app-64/locales/ru.pak
  • app-64/locales/sk.pak
  • app-64/locales/sl.pak
  • app-64/locales/sr.pak
  • app-64/locales/sv.pak
  • app-64/locales/sw.pak
  • app-64/locales/ta.pak
  • app-64/locales/te.pak
  • app-64/locales/th.pak
  • app-64/locales/tr.pak
  • app-64/locales/uk.pak
    .ps1
  • app-64/locales/ur.pak
  • app-64/locales/vi.pak
  • app-64/locales/zh-CN.pak
  • app-64/locales/zh-TW.pak
  • app-64/resources.pak
  • app-64/resources/app.asar
  • app-64/resources/elevate.exe
    .exe windows:6 windows x86 arch:x86

    c3afe98a750f2d4f1ed5d2ac323cb5e0


    Headers

    Imports

    Sections

  • app-64/snapshot_blob.bin
  • app-64/v8_context_snapshot.bin
  • app-64/vk_swiftshader.dll
    .dll windows:5 windows x64 arch:x64

    c6d5499631d983c25f3393a4b4b13399


    Headers

    Imports

    Exports

    Sections

  • app-64/vk_swiftshader_icd.json
  • app-64/vulkan-1.dll
    .dll windows:5 windows x64 arch:x64

    49ed29c3ff417b26c7cd92ecc9b7dcb3


    Headers

    Imports

    Exports

    Sections