C:\Projects\!SaveEditor\FireEmblemThreeHouse\DataUnpacker\obj\Release\DataUnpacker.pdb
Overview
overview
3Static
static
3����...ATA.js
windows7-x64
����...ATA.js
windows10-2004-x64
����...ive.js
windows7-x64
����...ive.js
windows10-2004-x64
����...ase.js
windows7-x64
����...ase.js
windows10-2004-x64
����...RNG.js
windows7-x64
����...RNG.js
windows10-2004-x64
����...er.vbs
windows7-x64
����...er.vbs
windows10-2004-x64
����...es.vbs
windows7-x64
����...es.vbs
windows10-2004-x64
����...er.vbs
windows7-x64
����...er.vbs
windows10-2004-x64
����...gs.vbs
windows7-x64
����...gs.vbs
windows10-2004-x64
����...yDB.js
windows7-x64
����...yDB.js
windows10-2004-x64
����...ump.js
windows7-x64
����...ump.js
windows10-2004-x64
����...ive.js
windows7-x64
����...ive.js
windows10-2004-x64
����...ave.js
windows7-x64
����...ave.js
windows10-2004-x64
����...ave.js
windows7-x64
����...ave.js
windows10-2004-x64
����...til.js
windows7-x64
����...til.js
windows10-2004-x64
����...ain.js
windows7-x64
����...ain.js
windows10-2004-x64
����...in.vbs
windows7-x64
����...in.vbs
windows10-2004-x64
Static task
static1
Behavioral task
behavioral1
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/DataUnpacker/DATA.js
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/DataUnpacker/DATA.js
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/DataUnpacker/MiniArchive.js
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/DataUnpacker/MiniArchive.js
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Database.js
Resource
win7-20240611-en
Behavioral task
behavioral6
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Database.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/PRNG.js
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/PRNG.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Properties/Resources.Designer.vbs
Resource
win7-20240611-en
Behavioral task
behavioral10
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Properties/Resources.Designer.vbs
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Properties/Resources.vbs
Resource
win7-20240220-en
Behavioral task
behavioral12
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Properties/Resources.vbs
Resource
win10v2004-20240611-en
Behavioral task
behavioral13
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Strings.Designer.vbs
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Strings.Designer.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Strings.vbs
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Strings.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Structs/BinaryDB.js
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Structs/BinaryDB.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Structs/MemoryDump.js
Resource
win7-20240611-en
Behavioral task
behavioral20
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Structs/MemoryDump.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Structs/MiniArchive.js
Resource
win7-20240220-en
Behavioral task
behavioral22
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Structs/MiniArchive.js
Resource
win10v2004-20240611-en
Behavioral task
behavioral23
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Structs/Save.js
Resource
win7-20240508-en
Behavioral task
behavioral24
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Structs/Save.js
Resource
win10v2004-20240611-en
Behavioral task
behavioral25
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Structs/SystemSave.js
Resource
win7-20231129-en
Behavioral task
behavioral26
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Structs/SystemSave.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Util.js
Resource
win7-20240508-en
Behavioral task
behavioral28
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Util.js
Resource
win10v2004-20240611-en
Behavioral task
behavioral29
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/frmMain.js
Resource
win7-20240508-en
Behavioral task
behavioral30
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/frmMain.js
Resource
win10v2004-20240611-en
Behavioral task
behavioral31
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/frmMain.vbs
Resource
win7-20240611-en
Behavioral task
behavioral32
Sample
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/frmMain.vbs
Resource
win10v2004-20240508-en
General
-
Target
dcbe79e2e336b95d2d5a4128969282e4334601dca87fc0591821d6018b16f18c
-
Size
5.9MB
-
MD5
df93af0826b2dc0f703f606752e5f9db
-
SHA1
734035a10801898ac0e01d01bc79909a83c27356
-
SHA256
dcbe79e2e336b95d2d5a4128969282e4334601dca87fc0591821d6018b16f18c
-
SHA512
3e4c6f90df9fd9666f02993924dbd74687b364cfb1c54edee6007e12298d13d1b96421846688a0f3f49910ebc7efd5d489f8c4d8ada65bccdbbaa8546af74802
-
SSDEEP
98304:6IWVvFy199ewZMoV3oRObhCkf/JZTo0NU4OAW4yRhnkj5GQuH2bMWVj826NRJrDO:65899/ZMoV3oRWBfH1TG1vH2bfVj826I
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/bin/DataUnpacker.exe unpack001/����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/bin/FETH_SaveEditor.exe
Files
-
dcbe79e2e336b95d2d5a4128969282e4334601dca87fc0591821d6018b16f18c.zip
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/DataUnpacker/App.config
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/DataUnpacker/DATA.cs.js
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/DataUnpacker/DataUnpacker.csproj
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/DataUnpacker/MiniArchive.cs.js
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/DataUnpacker/Program.cs
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/DataUnpacker/Properties/AssemblyInfo.cs
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/DataUnpacker/Util.cs
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/FireEmblemThreeHouse.sln
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/FireEmblemThreeHouse.sln.DotSettings.user
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/App.config
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Database.cs.js
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Enums.cs
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/FETH.ico
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/MemoryHelper.cs
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/PRNG.cs.js
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Program.cs
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Properties/AssemblyInfo.cs
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Properties/Resources.Designer.cs.vbs
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Properties/Resources.resx.vbs
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Properties/Settings.Designer.cs
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Properties/Settings.settings
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Resources/fixed_classdata.bin.gz.gz
-
fixed_classdata.bin
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Resources/fixed_data.bin.gz.gz
-
fixed_data.bin
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Resources/fixed_persondata.bin.gz.gz
-
fixed_persondata.bin
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Resources/msgdata.bin.gz.gz
-
msgdata.bin
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/SaveEditor.csproj
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Strings.Designer.cs.vbs
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Strings.resx.vbs
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Structs/Activities.cs
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Structs/Battalion.cs
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Structs/BinaryDB.cs.js
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Structs/Character.cs
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Structs/Item.cs
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Structs/MemoryDump.cs.js
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Structs/MiniArchive.cs.js
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Structs/NPC.cs
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Structs/Player.cs
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Structs/Save.cs.js
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Structs/StringDB.cs
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Structs/SystemSave.cs.js
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/Util.cs.js
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/frmMain.Designer.cs
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/frmMain.cs.js
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/frmMain.resx.vbs
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/frmSystemEditor.Designer.cs
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/frmSystemEditor.cs.js
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/SaveEditor/frmSystemEditor.resx.vbs
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/bin/DataUnpacker.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/bin/DataUnpacker.exe.config
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/bin/DataUnpacker.pdb
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/bin/FETH_SaveEditor.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Projects\!SaveEditor\FireEmblemThreeHouse\SaveEditor\obj\Release\FETH_SaveEditor.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/bin/FETH_SaveEditor.exe.config
-
����֮���·绨ѩ��V1.2.0�浵����/FireEmblemThreeHouse_SaveEditor_v1.2.0_Beta1/bin/FETH_SaveEditor.pdb
-
����֮���·绨ѩ��V1.2.0�浵����/Ѱ����Դ����������.png.png