General

  • Target

    t.zip

  • Size

    36.3MB

  • MD5

    931ce210b62bf7f59474ee71bb3f48f6

  • SHA1

    162ea899e36a1dcb3ee57feae49166aee97ab82f

  • SHA256

    933d639431a61770a14df82d51d2b921fcac74c0be0c1f4c6c2ce107a10412e6

  • SHA512

    ca0d7802da73d1cd4712def8df6ddb4d3d4e1d3c7d0b02a74fb9e4eaf3c4a4e3415b6242e59cc25268c5cc5ff44b8d2cda97ef0a4e007061f49456a4ab5db0c4

  • SSDEEP

    786432:v3RZTfwYQttYUi0+EZ9WxmRgHQAWPwUfr/0mGj464n6z:TxwtYsBDWPHQe0rcmGfb

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • t.zip
    .zip
  • 2.ico
  • PlantsVsZombies.exe
    .exe windows:4 windows x86 arch:x86

    caa73f3854faf99325bb3b7b5cb4c400


    Code Sign

    Headers

    Imports

    Sections

  • Steam.dll
    .dll windows:5 windows x86 arch:x86

    6d0f100b57111b65a5c81b1db6e157a6


    Headers

    Imports

    Exports

    Sections

  • Uninstall/unins000.dat
  • Uninstall/unins000.exe
    .exe windows:5 windows x86 arch:x86

    ab2499e0e72dfad09db9c131cd20670f


    Headers

    Imports

    Sections

  • bass.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • drm/common/drm.xml
  • drm/common/drm.xml.sig
  • drm/common/fonts/Arial10.txt
  • drm/common/fonts/Arial10Bold.txt
  • drm/common/fonts/Arial12Bold.txt
  • drm/common/fonts/Arial9.txt
  • drm/common/fonts/Arial9Bold.txt
  • drm/common/fonts/_Arial10.png
    .png
  • drm/common/fonts/_Arial10Bold.png
    .png
  • drm/common/fonts/_Arial12Bold.png
    .png
  • drm/common/fonts/_Arial9.png
    .png
  • drm/common/fonts/_Arial9Bold.png
    .png
  • drm/common/images/btn_buynow.gif
    .gif
  • drm/common/images/btn_buynow2.gif
    .gif
  • drm/common/images/btn_continue.gif
    .gif
  • drm/common/images/btn_continue2.gif
    .gif
  • drm/common/images/btn_finish.gif
    .gif
  • drm/common/images/btn_finish2.gif
    .gif
  • drm/common/images/btn_mask.gif
    .gif
  • drm/common/images/btn_play.gif
    .gif
  • drm/common/images/btn_play2.gif
    .gif
  • drm/common/images/btn_play3.gif
    .gif
  • drm/common/images/ecomm_wrapper_background.jpg
    .jpg
  • drm/common/images/ecomm_wrapper_background_centered.jpg
    .jpg
  • drm/common/images/ssframe.png
    .png
  • drm/common/scripts/Bullets.luc
  • drm/common/scripts/ClassLink.luc
  • drm/common/scripts/Common.luc
  • drm/common/scripts/Consts.luc
  • drm/common/scripts/DProps.luc
  • drm/common/scripts/DRMApp.luc
  • drm/common/scripts/Default.luc
  • drm/common/scripts/Game.luc
  • drm/common/scripts/Layout.luc
  • drm/common/scripts/LuaApp.luc
  • drm/common/scripts/LuaCommonWidgets.luc
  • drm/common/scripts/LuaWidget.luc
  • drm/common/scripts/Screen.luc
  • drm/common/scripts/main.luc
  • drm/custom/drm.xml
  • drm/custom/drm.xml.sig
  • drm/custom/images/bullet1.jpg
    .jpg
  • drm/custom/images/bullet1_.gif
    .gif
  • drm/custom/images/bullet2.jpg
    .jpg
  • drm/custom/images/bullet2_.gif
    .gif
  • drm/custom/images/bullet3.jpg
    .jpg
  • drm/custom/images/bullet3_.gif
    .gif
  • drm/game.jpg
    .jpg
  • drm/game_.gif
    .gif
  • drm/logo.jpg
    .jpg
  • drm/logo_.gif
    .gif
  • drmss.jpg
    .jpg
  • eula.rtf
    .rtf
  • local_save.txt
  • main.pak
  • properties/Layout.xml
    .xml
  • properties/default.xml
  • properties/partner.xml
  • properties/partner.xml.sig
  • properties/partner_logo.jpg
    .jpg
  • steam_api.dll
    .dll windows:6 windows x86 arch:x86

    58d5b2656e98df0af1ad29bb719c588e


    Headers

    Imports

    Exports

    Sections

  • steam_interfaces.txt