Static

static

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    TSB-GameClient-WIN.exe

  • Size

    196.9MB

  • MD5

    a9e78ff09cad076326e352c22b09bf55

  • SHA1

    1644151bb7f513ff1e695e95d8d01e30fd4bc15c

  • SHA256

    bcba2db3dd169e40d1ca38b2a8af632ee21490a54fed52c2fc409fcbc7b467d9

  • SHA512

    2a7b05b54d871ef1859531ceac424d0c78e9fd315c43dc1c48dbd24079e868f38021240f24c2db9fb94ef0b8920be9d2bac3fad14434b6a4fe66747057b89711

  • SSDEEP

    6291456:tf81EHxBlVyTaoy48z1pKhVUDvHf4+xoYmRMK9:NrxBudy48ppKcbHXxiME

Score
3/10

Malware Config

Signatures

  • Unsigned PE 22 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • TSB-GameClient-WIN.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123giifuuchduy

    3abe302b6d9a1256e6a915429af4ffd2


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/INetC.dll
    .dll windows:5 windows x86 arch:x86

    Password: 123giifuuchduy

    6d9e7c0072f1cd1f61999835776824b5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123giifuuchduy

    17fb6a8708b9c0bb2d5d8687870eb415


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123giifuuchduy

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123giifuuchduy

    5197e2b5d0b686a43ee5fcfc134f44d9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123giifuuchduy

    ebc2d915841be8afc8fa1ee9f6850960


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    Password: 123giifuuchduy

    a49b0342971aa199fc6349725b90146d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123giifuuchduy

    0f92772da9c737d2bac38919e9863980


    Headers

    Imports

    Exports

    Sections

  • GameAssembly.dll
    .dll windows:6 windows x64 arch:x64

    Password: 123giifuuchduy

    0e324af89a01a592e3d427f4440eae53


    Headers

    Imports

    Exports

    Sections

  • Sandbox Launcher.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • The Sandbox.exe
    .exe windows:6 windows x64 arch:x64

    5f74a5c747508e2822fdb9b687deaf42


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • The Sandbox_BurstDebugInformation_DoNotShip/Data/Plugins/x86_64/lib_burst_generated.txt
  • The Sandbox_Data/Plugins/x86_64/AVProVideo.dll
    .dll windows:6 windows x64 arch:x64

    de8cf53ff7257567b1496c1ad1862b06


    Headers

    Imports

    Exports

    Sections

  • The Sandbox_Data/Plugins/x86_64/AVProVideoWinRT.dll
    .dll windows:6 windows x64 arch:x64

    ca3f1c5fc2c9991d519087ecd5834456


    Headers

    Imports

    Exports

    Sections

  • The Sandbox_Data/Plugins/x86_64/Audio360.dll
    .dll windows:6 windows x64 arch:x64

    7bb7ca88d762151bd6f4d16f9eac0883


    Headers

    Imports

    Exports

    Sections

  • The Sandbox_Data/Plugins/x86_64/BacktraceCrashpadWindows.dll
    .dll windows:6 windows x64 arch:x64

    5440e21dac01e80dab40658580014a87


    Headers

    Imports

    Exports

    Sections

  • The Sandbox_Data/Plugins/x86_64/ChatCWrapper.dll
    .dll windows:6 windows x64 arch:x64

    c54a6104f844b1851c5d4e6019886bf7


    Headers

    Imports

    Exports

    Sections

  • The Sandbox_Data/Plugins/x86_64/CommonWrapper.dll
    .dll windows:6 windows x64 arch:x64

    2beea75cd855c2405634a0279fa3f951


    Headers

    Imports

    Exports

    Sections

  • The Sandbox_Data/Plugins/x86_64/PK-UnityPlugin.dll
    .dll windows:6 windows x64 arch:x64

    f6ff6124b82e1a54eaba6ea373346bde


    Headers

    Imports

    Exports

    Sections

  • The Sandbox_Data/Plugins/x86_64/SdkWrapper.dll
    .dll windows:6 windows x64 arch:x64

    6919e34841d26e3bc8b001b67b9b32ab


    Headers

    Imports

    Exports

    Sections

  • The Sandbox_Data/Plugins/x86_64/VivoxNative.dll
    .dll windows:6 windows x64 arch:x64

    c3904176a42c71b06fdad32e8b278128


    Headers

    Imports

    Exports

    Sections

  • The Sandbox_Data/Plugins/x86_64/crashpad_handler.dll
    .exe windows:6 windows x64 arch:x64

    e4ac116916bd2c1295f4815b2b7e13d3


    Headers

    Imports

    Sections

  • The Sandbox_Data/Plugins/x86_64/lib_burst_generated.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections

  • The Sandbox_Data/Plugins/x86_64/libwebp.dll
    .dll windows:6 windows x64 arch:x64

    ccfb792453bc23c3ad9ba2a054e247b1


    Headers

    Imports

    Exports

    Sections

  • The Sandbox_Data/Plugins/x86_64/libwebpdecoder.dll
    .dll windows:6 windows x64 arch:x64

    de302976c4758971a2fb83f3e8a1786e


    Headers

    Imports

    Exports

    Sections

  • The Sandbox_Data/Plugins/x86_64/libwebpdemux.dll
    .dll windows:6 windows x64 arch:x64

    762fed27f4321c91e9dbe1d0abcac5c2


    Headers

    Imports

    Exports

    Sections

  • The Sandbox_Data/Plugins/x86_64/msvcp140d.dll
    .dll windows:6 windows x64 arch:x64

    06b2baadf85a5065b26ff6a492d072fd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • The Sandbox_Data/Plugins/x86_64/ucrtbased.dll
    .dll windows:10 windows x64 arch:x64

    445e8f9632f174d817223ba976897c99


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • The Sandbox_Data/Plugins/x86_64/vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    7f07fd94e5bb907093556781cc464017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • The Sandbox_Data/Plugins/x86_64/vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    bf380ca954cbf10d1a4cef9ec18e46fd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • The Sandbox_Data/Plugins/x86_64/vcruntime140_1d.dll
    .dll windows:6 windows x64 arch:x64

    033b9f3a70e23334972a343090114f02


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • The Sandbox_Data/Plugins/x86_64/vcruntime140d.dll
    .dll windows:6 windows x64 arch:x64

    b20752ba74b5a1d39b65aae6ef07725d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • The Sandbox_Data/Plugins/x86_64/vivoxsdk.dll
    .dll windows:6 windows x64 arch:x64

    de97fa6d1a7e9ac6459da0425d63aee0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • The Sandbox_Data/Resources/unity default resources
  • The Sandbox_Data/Resources/unity_builtin_extra
  • The Sandbox_Data/RuntimeInitializeOnLoads.json
  • The Sandbox_Data/ScriptingAssemblies.json
  • The Sandbox_Data/StreamingAssets/Data/Tips.json
  • The Sandbox_Data/StreamingAssets/EntityScenes/1a6dbe1d4e54da94488f0d1e0f877478.0.entities
  • The Sandbox_Data/StreamingAssets/EntityScenes/1a6dbe1d4e54da94488f0d1e0f877478.entityheader
  • The Sandbox_Data/StreamingAssets/NodeTemplates/MoveActorLocalNode.json
  • The Sandbox_Data/StreamingAssets/NodeTemplates/WaitForAnyMessageNode.json
  • The Sandbox_Data/StreamingAssets/NodeTemplates/WaitForPlayerInteractNode.json
  • The Sandbox_Data/StreamingAssets/NodeTemplates/WaitSecondsNode.json
  • The Sandbox_Data/StreamingAssets/PerformanceTestRunInfo.json
  • The Sandbox_Data/StreamingAssets/StreamingAssetsManifest.json
  • The Sandbox_Data/StreamingAssets/UnityServicesProjectConfiguration.json
  • The Sandbox_Data/StreamingAssets/aa/AddressablesLink/link.xml
  • The Sandbox_Data/StreamingAssets/aa/StandaloneWindows64/58f0a475000e1d81b62bb08bfdc179a3_unitybuiltinshaders_df46df9b2714cd8dd028b6329a6a5876.bundle
  • The Sandbox_Data/StreamingAssets/aa/StandaloneWindows64/builder_assets_all_53130a4715efb455724c6cc6b15fb8b6.bundle
  • The Sandbox_Data/StreamingAssets/aa/StandaloneWindows64/flagsmith_assets_all_a996ddeaf1a78b9fcfcdc905209fa6e5.bundle
  • The Sandbox_Data/StreamingAssets/aa/StandaloneWindows64/fonts_assets_all_e00621a269a72098c0a94a115aea5e6b.bundle
  • The Sandbox_Data/StreamingAssets/aa/StandaloneWindows64/fsm_behaviordata_assets_all_f737c23cd3235ae74857caf8e6a95548.bundle
  • The Sandbox_Data/StreamingAssets/aa/StandaloneWindows64/fsm_messageargs_assets_all_ff52a9db038b7cd812a8d087f65fa4ca.bundle
  • The Sandbox_Data/StreamingAssets/aa/StandaloneWindows64/icons_assets_all_fb9a69f716da4a23a269b7cf28874045.bundle
  • The Sandbox_Data/StreamingAssets/aa/StandaloneWindows64/sandbox_engine_assets_all_fe094ec9f91a637919b65f9d9a60fa99.bundle
  • The Sandbox_Data/StreamingAssets/aa/StandaloneWindows64/socialbadges_assets_all_abb81b4fd095207204599badc88e5284.bundle
  • The Sandbox_Data/StreamingAssets/aa/StandaloneWindows64/socialstickers_assets_all_c60cebb99643671d2e11f0fdb7913081.bundle
  • The Sandbox_Data/StreamingAssets/aa/StandaloneWindows64/soundsdisplayname_assets_all_6fdd0f7fdb4c6aff67f82838195188d9.bundle
  • The Sandbox_Data/StreamingAssets/aa/StandaloneWindows64/soundsmetadata_assets_all_8d681b1b5fbfbe9dead31d5afcc73f95.bundle
  • The Sandbox_Data/StreamingAssets/aa/StandaloneWindows64/testassets_images_assets_all_d581f53cadc7de4e5097ace579b64c6e.bundle
  • The Sandbox_Data/StreamingAssets/aa/StandaloneWindows64/testings_assets_all_03aa74c3f5e51d128ba42f4118f477e7.bundle
  • The Sandbox_Data/StreamingAssets/aa/StandaloneWindows64/testings_scenes_all_14453819e0e8769f189ec732cdf378a5.bundle
  • The Sandbox_Data/StreamingAssets/aa/StandaloneWindows64/ui_assets_all_96ca4df696b48810d65a8f1bf7b088b5.bundle
  • The Sandbox_Data/StreamingAssets/aa/StandaloneWindows64/vfxdisplayname_assets_all_ab35a5d2fabe19a9fd14d28c75fc9373.bundle
  • The Sandbox_Data/StreamingAssets/aa/catalog.json
  • The Sandbox_Data/StreamingAssets/aa/settings.json
  • The Sandbox_Data/StreamingAssets/audio/DefaultAudioIcon.png
    .png
  • The Sandbox_Data/StreamingAssets/audio/Readme.txt
  • The Sandbox_Data/StreamingAssets/build_infos.txt
  • The Sandbox_Data/StreamingAssets/catalog.bin
  • The Sandbox_Data/StreamingAssets/forceAlias.json
  • The Sandbox_Data/app.info
  • The Sandbox_Data/boot.config
  • The Sandbox_Data/globalgamemanagers
  • The Sandbox_Data/globalgamemanagers.assets
  • The Sandbox_Data/globalgamemanagers.assets.resS
  • The Sandbox_Data/il2cpp_data/Metadata/global-metadata.dat
  • The Sandbox_Data/il2cpp_data/Resources/Microsoft.Extensions.Logging.Abstractions.dll-resources.dat
  • The Sandbox_Data/il2cpp_data/Resources/System.Data.dll-resources.dat
  • The Sandbox_Data/il2cpp_data/Resources/mscorlib.dll-resources.dat
  • The Sandbox_Data/level0
  • The Sandbox_Data/level1
  • The Sandbox_Data/level1.resS
  • The Sandbox_Data/level10
  • The Sandbox_Data/level10.resS
  • The Sandbox_Data/level2
  • The Sandbox_Data/level2.resS
  • The Sandbox_Data/level3
  • The Sandbox_Data/level3.resS
  • The Sandbox_Data/level4
  • The Sandbox_Data/level4.resS
  • The Sandbox_Data/level5
  • The Sandbox_Data/level5.resS
  • The Sandbox_Data/level6
  • The Sandbox_Data/level6.resS
  • The Sandbox_Data/level7
  • The Sandbox_Data/level7.resS
  • The Sandbox_Data/level8
  • The Sandbox_Data/level8.resS
  • The Sandbox_Data/level9
  • The Sandbox_Data/level9.resS
  • The Sandbox_Data/resources.assets
  • The Sandbox_Data/resources.assets.resS
  • The Sandbox_Data/resources.resource
  • The Sandbox_Data/sharedassets0.assets
  • The Sandbox_Data/sharedassets0.assets.resS
  • The Sandbox_Data/sharedassets1.assets
  • The Sandbox_Data/sharedassets1.assets.resS
  • The Sandbox_Data/sharedassets10.assets
  • The Sandbox_Data/sharedassets10.assets.resS
  • The Sandbox_Data/sharedassets2.assets
  • The Sandbox_Data/sharedassets2.assets.resS
  • The Sandbox_Data/sharedassets3.assets
  • The Sandbox_Data/sharedassets3.assets.resS
  • The Sandbox_Data/sharedassets4.assets
  • The Sandbox_Data/sharedassets5.assets
  • The Sandbox_Data/sharedassets5.assets.resS
  • The Sandbox_Data/sharedassets6.assets
  • The Sandbox_Data/sharedassets6.assets.resS
  • The Sandbox_Data/sharedassets7.assets
  • The Sandbox_Data/sharedassets8.assets
  • The Sandbox_Data/sharedassets9.assets
  • The Sandbox_Data/sharedassets9.assets.resS
  • Uninstall.exe.nsis
  • UnityCrashHandler64.exe
    .exe windows:6 windows x64 arch:x64

    5c64b8e3c52925909413e148f250e94c


    Code Sign

    Headers

    Imports

    Sections

  • UnityPlayer.dll
    .dll windows:6 windows x64 arch:x64

    eaca30713acd4359863defa968eb267e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • baselib.dll
    .dll windows:6 windows x64 arch:x64

    0cd66d5908e9ad864cdc5a032a7889e5


    Code Sign

    Headers

    Imports

    Exports

    Sections