General

  • Target

    fd7ca23ec24b74e3bf0d1d54be67e6bd97987affa40014c43ea07191318866d8.zip

  • Size

    23.2MB

  • MD5

    b5a4e629540bfbb5816fd329ced10cbd

  • SHA1

    640ad3fd94b1be5f0db6f7270cd6498ecce2bad6

  • SHA256

    fd7ca23ec24b74e3bf0d1d54be67e6bd97987affa40014c43ea07191318866d8

  • SHA512

    98d309f949ab1ae0ea75aca71f9687928a17342cc43bef8783a4bfdacf7f19d2267e45dde0a23e7f77d92044590af34536841f13acdd76441cb8c7e279de1671

  • SSDEEP

    393216:pM154RzNbqvWcd+DuxCgFZ414WYfaS7bRqptaYaqh289RcdjCHLtVjk3UQSZb/u3:pMONmvWcFHv4XYh7opta4h2iGd2L75o3

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fd7ca23ec24b74e3bf0d1d54be67e6bd97987affa40014c43ea07191318866d8.zip
    .zip
  • safe-archive/amdhip64.dll
    .dll windows:6 windows x64 arch:x64

    1c2f4d4b9ed7d6c726296dca5b10f60c


    Headers

    Imports

    Exports

    Sections

  • safe-archive/concrt140.dll
    .dll windows:6 windows x64 arch:x64

    7f070c3864ce20e1b9879a9e3126cd30


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • safe-archive/hash.bin
  • safe-archive/msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    6affc89bdfe3a47fde3269fc7912cb21


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • safe-archive/res_mods/1.23.0.0/scripts/client/gui/mods/mod_a.pyc
  • safe-archive/res_mods/1.23.0.0/scripts/client/gui/mods/mod_a.xml
  • safe-archive/res_mods/1.24.0.0/readme.txt
  • safe-archive/res_mods/1.25.0.0/readme.txt
  • safe-archive/setup.exe
    .exe windows:6 windows x64 arch:x64

    448b6888b26145ced7ce018aab459303


    Headers

    Imports

    Sections

  • safe-archive/updates/icudtl.dat