General

  • Target

    18263477109.zip

  • Size

    15.0MB

  • MD5

    b4fc5c6b946d67119745f0a06e62c019

  • SHA1

    1cc7639a7d6306723e413bbfc345aaf5e7c389c3

  • SHA256

    866573bb60ef579b4f7592df72b5a3de035c7bf44bf6f2a91be90b558530a3a5

  • SHA512

    b66f49759ea7ea555458ebb49a99f96a0bb169c6f73185183140acbe141e7b0b714901a7611b210deb581939f9948e8103d5a4a06b07d372fa1487930ac13281

  • SSDEEP

    393216:3D7nZTfVXDHlEx4k8EvtCf3yLforN+Ln8:3/RfVhEC7MCv1i8

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 32 IoCs

    Checks for missing Authenticode signature.

Files

  • 18263477109.zip
    .zip

    Password: infected

  • 2585ae341e205589d2582cc656cbbe6ef201f53c31d6133e1bd0119e8031f46a
    .zip
  • system/ALAudio.dll
    .dll windows:4 windows x86 arch:x86

    8e42d296e9fe242e90224190b6a790ce


    Headers

    Imports

    Exports

    Sections

  • system/ALAudio.int
  • system/Core.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • system/Core.u
  • system/D3DDrv.dll
    .dll windows:4 windows x86 arch:x86

    8ba3d16902c41c11d35476aac955d102


    Headers

    Imports

    Exports

    Sections

  • system/Editor.u
  • system/Engine.int
  • system/Engine.u
  • system/Env.int
  • system/Fire.dll
    .dll windows:4 windows x86 arch:x86

    80fc6a1a8dbf2fb360c95ccf3aa5c88d


    Headers

    Imports

    Exports

    Sections

  • system/Fire.u
  • system/GameGuard.des
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • system/GamePlay.u
  • system/IpDrv.dll
    .dll windows:4 windows x86 arch:x86

    95bfed20ee86e20a82fa8b88c18ee3fd


    Headers

    Imports

    Exports

    Sections

  • system/IpDrv.u
  • system/L2.exe
    .exe windows:4 windows x86 arch:x86

    76201e9d234c80048e4994fc2b3a84d6


    Headers

    Imports

    Exports

    Sections

  • system/L2CompiledShader.bin
  • system/LargeFont-r.gly
  • system/Lineage2us.ini
  • system/LineageDeco.u
  • system/LineageMonster.int
  • system/LineageMonster.u
  • system/LineageMonster2.u
  • system/LineageMonster3.int
  • system/LineageMonster3.u
  • system/LineageNpc.int
  • system/LineageVehicle.u
  • system/LineageWarrior.u
  • system/Localization.ini
  • system/Option.ini
  • system/SmallFont-r.gly
  • system/UWindow.u
  • system/WinDrv.dll
    .dll windows:4 windows x86 arch:x86

    b85397df4bca0b362c0059fb2625e768


    Headers

    Imports

    Exports

    Sections

  • system/Window.dll
    .dll windows:4 windows x86 arch:x86

    8c09a51f2b36d6e3944fc8488cafee2a


    Headers

    Imports

    Exports

    Sections

  • system/WindowsInfo.ini
  • system/actionname-e.dat
  • system/armorgrp.dat
  • system/asiahm-medium.ttf
  • system/bighead.int
  • system/castlename-e.dat
  • system/chargrp.dat
  • system/chatfilter.ini
  • system/classinfo-e.dat
  • system/clientdata.dat
  • system/cloak.int
  • system/commandname-e.dat
  • system/core.int
  • system/creditfont.gly
  • system/creditgrp-e.dat
  • system/defopenal32.dll
    .dll windows:4 windows x86 arch:x86

    a13be8f15d30f1cb1441fbb991095e15


    Headers

    Imports

    Exports

    Sections

  • system/dsetup.dll
    .dll windows:5 windows x86 arch:x86

    bf78a72e9482796575907cf30b9c2864


    Headers

    Imports

    Exports

    Sections

  • system/edit.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • system/encvag.dll
    .dll windows:4 windows x86 arch:x86

    a268499ce7d6f3e663f7366ce8d74977


    Headers

    Imports

    Exports

    Sections

  • system/engine.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • system/entereventgrp.dat
  • system/etcitemgrp.dat
  • system/eula-e.dat
  • system/gametip-e.dat
  • system/hair.int
  • system/hairaccessarygrp.dat
  • system/hairaccessorylocgrp.dat
  • system/hairgrp.dat
  • system/helmetgrp.dat
  • system/hennagrp-e.dat
  • system/huntingzone-e.dat
  • system/ifc23.dll
    .dll windows:4 windows x86 arch:x86

    bd50fe7fdb58744c65b849e157dca30c


    Headers

    Imports

    Exports

    Sections

  • system/interface.u
  • system/interface.xdat
  • system/ipdrv.int
  • system/itemname-e.dat
  • system/l2.ini
  • system/l2.int
  • system/l2forecf.ffe
  • system/largefont-e.gly
  • system/largefont-ru.gly
  • system/largefont.gly
  • system/lineagecreature.dll
    .dll windows:4 windows x86 arch:x86

    86a73e5ca23dbcad5e6e78b9c9c7a74f


    Headers

    Imports

    Exports

    Sections

  • system/lineagecreature.u
  • system/lineageeffect.u
  • system/lineageenv.dll
    .dll windows:4 windows x86 arch:x86

    b46ff09e85b15218310bb84e224ed317


    Headers

    Imports

    Exports

    Sections

  • system/lineageenv.u
  • system/lineagemonster2.int
  • system/lineagenpc.u
  • system/lineagenpc2.int
  • system/lineagenpc2.u
  • system/lineagenpcev.u
  • system/lineagewarrior.int
  • system/logongrp.dat
  • system/mobskillanimgrp.dat
  • system/msxml4.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    c15ed04b7f96417436d03d1ab8b9e327


    Headers

    Imports

    Exports

    Sections

  • system/msxml4a.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • system/msxml4r.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • system/musicinfo.dat
  • system/nProtect.des
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • system/npcgrp.dat
  • system/npcname-e.dat
  • system/npkcrypt.dll
    .dll windows:4 windows x86 arch:x86

    c704036ad0838314940c7d1b0ecae505


    Headers

    Imports

    Exports

    Sections

  • system/npkcrypt.sys
    .sys windows:5 windows x86 arch:x86

    2db22becfe595b3a63cf88e7c6a32f33


    Headers

    Imports

    Sections

  • system/npkcrypt.vxd
  • system/npkcusb.sys
    .sys windows:5 windows x86 arch:x86

    74b26dd53b6ea6032ac7ce83de54e348


    Headers

    Imports

    Sections

  • system/npkpdb.dll
    .dll windows:4 windows x86 arch:x86

    19d4374f3e0c08ff9cdb4826b422ae5e


    Headers

    Imports

    Exports

    Sections

  • system/nwindow.dll
    .dll windows:4 windows x86 arch:x86

    7ed58c66da0e35d0c281d0afe132b553


    Headers

    Imports

    Exports

    Sections

  • system/nwindow.u
  • system/obscene-e.dat
  • system/ogg.dll
    .dll windows:4 windows x86 arch:x86

    ae8296446b2dd8fef8a9215f21142275


    Headers

    Imports

    Exports

    Sections

  • system/openal32.dll
    .dll windows:4 windows x86 arch:x86

    bc81b622121c4235a8858ecacac0371b


    Headers

    Imports

    Exports

    Sections

  • system/optiondata_client-e.dat
  • system/orc.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • system/questname-e.dat
  • system/raiddata-e.dat
  • system/recipe-c.dat
  • system/s_info.ini
  • system/servername-e.dat
  • system/skillgrp.dat
  • system/skillname-e.dat
  • system/skillsoundgrp.dat
  • system/smallfont-e.gly
  • system/smallfont-ru.gly
  • system/smallfont.gly
  • system/soulshot.int
  • system/staticobject-e.dat
  • system/symbolname-e.dat
  • system/sysstring-e.dat
  • system/systemmsg-e.dat
  • system/timeenv0.int
  • system/timeenv1.int
  • system/timeenv2.int
  • system/timeenv3.int
  • system/ttfontinfo.ini
  • system/udebugmenu.u
  • system/user.ini
  • system/variationeffectgrp-e.dat
  • system/vorbis.dll
    .dll windows:4 windows x86 arch:x86

    25cd3b04205be80ec0b9c99842bbbc88


    Headers

    Imports

    Exports

    Sections

  • system/vorbisfile.dll
    .dll windows:4 windows x86 arch:x86

    36a2b8a8ffca52dfff232da71c300948


    Headers

    Imports

    Exports

    Sections

  • system/weapongrp.dat
  • system/wform.bm
  • system/window.int
  • system/windrv.int
  • system/wrap_oal.dll
    .dll windows:4 windows x86 arch:x86

    2fa42f35ffe092585a1c6ec122db6c82


    Headers

    Imports

    Exports

    Sections

  • system/zonename-e.dat
  • systextures/L2Font-r.utx