General

  • Target

    ProximaCentauriB_Exploring_Unknown-12thMay.zip

  • Size

    250.0MB

  • MD5

    caa114258daaa4a0762bd0f7dcf40728

  • SHA1

    a5d270c9dccda6ec847ec0e4edb54e473c9aefa2

  • SHA256

    e112ab2d037c9482422821feae2ad5ba25614222c5ca0b82dc3f15768d4a3bac

  • SHA512

    dc1b63cf696544ace80562cadf7ca94cfc901646241192717535a88bfeec988d39ad6b18c868407d0e8e942d1a058bf8c26beff184a785276602428fba655855

  • SSDEEP

    6291456:wjwhnbStSoKNYJgWz4MyJBCrthx09nriyi1iRiXiWJLJiGbr:2whbaSLSuJBEthx09rilh

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 6 IoCs

    Detects file using ACProtect software.

  • UPX packed file 16 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 38 IoCs

    Checks for missing Authenticode signature.

Files

  • ProximaCentauriB_Exploring_Unknown-12thMay.zip
    .zip
  • ProximaCentauriB_Exploring_Unknown-12thMay/AdbPath64.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ProximaCentauriB_Exploring_Unknown-12thMay/Bunifu_UI_v1.43.apx
  • ProximaCentauriB_Exploring_Unknown-12thMay/Bunifu_UI_v1.44.apx
  • ProximaCentauriB_Exploring_Unknown-12thMay/Bunifu_UI_v1.45.apx
  • ProximaCentauriB_Exploring_Unknown-12thMay/Bunifu_UI_v1.49.apx
  • ProximaCentauriB_Exploring_Unknown-12thMay/CODMPathfinder.exe
    .exe windows:5 windows x86 arch:x86

    ead364a9564def7dbab3c2916879f461


    Headers

    Imports

    Exports

    Sections

  • ProximaCentauriB_Exploring_Unknown-12thMay/CODMPathfinder_Week.exe
    .exe windows:5 windows x86 arch:x86

    ead364a9564def7dbab3c2916879f461


    Headers

    Imports

    Exports

    Sections

  • ProximaCentauriB_Exploring_Unknown-12thMay/Fonts.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • ProximaCentauriB_Exploring_Unknown-12thMay/adb.exe
    .exe windows:4 windows x86 arch:x86

    caa032ebd77577ef7b19d90ec9abfca3


    Headers

    Imports

    Sections

  • ProximaCentauriB_Exploring_Unknown-12thMay/api-ms-win-core-checktime-l1-0-86.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ProximaCentauriB_Exploring_Unknown-12thMay/api-ms-win-core-digilocked-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ProximaCentauriB_Exploring_Unknown-12thMay/api-ms-win-core-errorhandler-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ProximaCentauriB_Exploring_Unknown-12thMay/api-ms-win-core-processcores-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ProximaCentauriB_Exploring_Unknown-12thMay/api-ms-win-core-sync-l1-2-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ProximaCentauriB_Exploring_Unknown-12thMay/cjzc_patch2.apx
  • ProximaCentauriB_Exploring_Unknown-12thMay/cjzc_patch4.apx
  • ProximaCentauriB_Exploring_Unknown-12thMay/english.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • ProximaCentauriB_Exploring_Unknown-12thMay/explore_unknown/ProximaCentauriB.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • ProximaCentauriB_Exploring_Unknown-12thMay/explore_unknown/Start.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • ProximaCentauriB_Exploring_Unknown-12thMay/french.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • ProximaCentauriB_Exploring_Unknown-12thMay/german.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • ProximaCentauriB_Exploring_Unknown-12thMay/helper.exe
    .exe windows:5 windows x86 arch:x86

    a2af670719a0f32546f25d33e9c436f7


    Headers

    Imports

    Exports

    Sections

  • ProximaCentauriB_Exploring_Unknown-12thMay/path.dll
    .dll .ps1 windows:5 windows x86 arch:x86 polyglot


    Headers

    Exports

    Sections

  • ProximaCentauriB_Exploring_Unknown-12thMay/path2.0.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ProximaCentauriB_Exploring_Unknown-12thMay/path3.0.dll
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections

  • ProximaCentauriB_Exploring_Unknown-12thMay/prompt1.exe
    .exe windows:4 windows x86 arch:x86

    768d2a1c9fec6851632cce17641ec571


    Headers

    Imports

    Sections

  • ProximaCentauriB_Exploring_Unknown-12thMay/prompt10.dll
    .7z
  • AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GameLoader.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • GameSuccess.exe
    .exe windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • adb.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • bypass.dat
  • conf.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • mosem32.dll
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections

  • mosem64.dll
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections

  • prom5.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • prom5a.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • prom5b.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • prom5bs.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • prom5s.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • prompt.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • prompt10.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • prompt11.dll
    .elf linux aarch64
  • prompt1132.dll
    .elf linux arm
  • prompt1132x.dll
    .elf linux arm
  • prompt15.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • prompt15b32.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections

  • prompt1632.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections

  • prompt17.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections

  • prompt1x.dll
    .elf linux arm
  • prompt20.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • prompt2x.dll
  • prompt3x.dll
  • prompt4x.dll
  • prompt932.dll
    .elf linux arm
  • prompt96.dat
  • prompt_patch4.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • prompt_patch5.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • pssuspend.exe
    .exe windows:5 windows x86 arch:x86

    6e9a261f58f47d82fb85893416a0d9b3


    Code Sign

    Headers

    Imports

    Sections

  • shpch.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • sqlite64.apx
  • unify1a.apx
  • unify2.apx
    .elf linux arm
  • unify2a.apx
  • unify3.apx
    .elf linux arm
  • unify3a.apx
  • unify5.apx
    .elf linux arm
  • unify6.apx
  • unify7.apx
  • unify8.apx
  • ProximaCentauriB_Exploring_Unknown-12thMay/prompt8.dll
    .exe windows:5 windows x86 arch:x86

    12e12319f1029ec4f8fcbed7e82df162


    Headers

    Imports

    Sections

  • ProximaCentauriB_Exploring_Unknown-12thMay/prompt9.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • ProximaCentauriB_Exploring_Unknown-12thMay/spanish.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • ProximaCentauriB_Exploring_Unknown-12thMay/sqlite64.apx