Resubmissions

15-07-2024 11:21

240715-ngf83awgpd 3

General

  • Target

    gwater2 0.4b.zip

  • Size

    1.9MB

  • MD5

    a84bd73ba43f88531b3add513b35d2ff

  • SHA1

    54278d180b6a8a296c98046cc4cb20862996f329

  • SHA256

    c291f69fe2c0a95a9949ac15d06182344d646cf591752e0db27e2a09c90a97e6

  • SHA512

    1d7cf5c6dff56b31fdbea2272afb64858b599026fbe0ecc16841ca9eaee0816d59a18c2132663cb4bb6ed3c56e71ca83d926f8d542f8d22da7fdaa363357561f

  • SSDEEP

    49152:Njo6o5V8G8ohKFitriLrVy67Eex+1rb9tlUUntwaBZ:N+qGRVFivQ67EexgTBwaP

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • gwater2 0.4b.zip
    .zip
  • GFSDK_Aftermath_Lib.x64.dll
    .dll windows:6 windows x64 arch:x64

    11d2010ec90c8de0e46228e77331830d


    Headers

    Imports

    Exports

    Sections

  • GFSDK_Aftermath_Lib.x86.dll
    .dll windows:6 windows x86 arch:x86

    90e51886c3d6b1895d867d9abe225a1e


    Headers

    Imports

    Exports

    Sections

  • NvFlexExtReleaseD3D_x64.dll
    .dll windows:6 windows x64 arch:x64

    01c642daec0b3d54a62781921d9e414f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NvFlexExtReleaseD3D_x86.dll
    .dll windows:6 windows x86 arch:x86

    52da370fb408714c8d9137fda77e7344


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NvFlexReleaseD3D_x64.dll
    .dll windows:6 windows x64 arch:x64

    9b9dfad3362e669003da77ce608620e9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NvFlexReleaseD3D_x86.dll
    .dll windows:6 windows x86 arch:x86

    a2e60a5ec916d802825dfb1facbb5bd9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • amd_ags_x64.dll
    .dll windows:6 windows x64 arch:x64

    d038ad5b521e4868024fcd5da7483828


    Headers

    Imports

    Exports

    Sections

  • amd_ags_x86.dll
    .dll windows:6 windows x86 arch:x86

    6cb76594131d02161daf334010d75cf7


    Headers

    Imports

    Exports

    Sections

  • garrysmod/addons/gwater2/LICENSE.txt
  • garrysmod/addons/gwater2/lua/autorun/client/gwater_menu2.lua
    .js
  • garrysmod/addons/gwater2/lua/autorun/gwater2_init.lua
    .js
  • garrysmod/addons/gwater2/lua/autorun/gwater2_menufix.lua
  • garrysmod/addons/gwater2/lua/gwater2_patrons.lua
    .vbs
  • garrysmod/addons/gwater2/lua/gwater2_shaders.lua
  • garrysmod/addons/gwater2/lua/gwater2_swimming.lua
  • garrysmod/addons/gwater2/lua/starfall/libs_cl/gwater2module.lua
  • garrysmod/addons/gwater2/lua/weapons/weapon_gw2_watergun.lua
  • garrysmod/addons/gwater2/materials/gwater2/bubble.vmt
  • garrysmod/addons/gwater2/materials/gwater2/bubble.vtf
  • garrysmod/addons/gwater2/materials/gwater2/diffuse.vmt
  • garrysmod/addons/gwater2/materials/gwater2/finalpass.vmt
  • garrysmod/addons/gwater2/materials/gwater2/mist.vmt
  • garrysmod/addons/gwater2/materials/gwater2/normals.vmt
  • garrysmod/addons/gwater2/materials/gwater2/smooth.vmt
  • garrysmod/addons/gwater2/materials/gwater2/splash.vtf
  • garrysmod/addons/gwater2/materials/gwater2/volumetric.vmt
  • garrysmod/addons/gwater2/resource/fonts/SpaceMonoRegular.ttf
  • garrysmod/addons/gwater2/resource/fonts/TitilliumWeb-Regular.ttf
  • garrysmod/addons/gwater2/resource/fonts/coolvetica.ttf
  • garrysmod/lua/bin/gmcl_gwater2_main_win32.dll
    .dll windows:6 windows x86 arch:x86

    7cc8e605b85b65f7df94a30c71ae18ad


    Headers

    Imports

    Exports

    Sections

  • garrysmod/lua/bin/gmcl_gwater2_win32.dll
    .dll windows:6 windows x86 arch:x86

    a74507adb124ae16f7238717940ad587


    Headers

    Imports

    Exports

    Sections

  • garrysmod/lua/bin/gmcl_gwater2_win64.dll
    .dll windows:6 windows x64 arch:x64

    72d96d9d7bc4bc72d2924114b0114cb6


    Headers

    Imports

    Exports

    Sections

  • garrysmod/shaders/fxc/GWaterFinalpass_ps30.vcs
  • garrysmod/shaders/fxc/GWaterFinalpass_vs30.vcs
  • garrysmod/shaders/fxc/GWaterNormals_ps30.vcs
  • garrysmod/shaders/fxc/GWaterNormals_vs30.vcs
  • garrysmod/shaders/fxc/GWaterSmooth_ps30.vcs
  • garrysmod/shaders/fxc/GWaterVolumetric_ps30.vcs
  • garrysmod/shaders/fxc/GWaterVolumetric_vs30.vcs
  • nvToolsExt32_1.dll
    .dll windows:5 windows x86 arch:x86

    0ab9c21eda47621bfe1e43f2a754406a


    Headers

    Imports

    Exports

    Sections

  • nvToolsExt64_1.dll
    .dll windows:5 windows x64 arch:x64

    0a58f558339c5681aa34c9c02fc145aa


    Headers

    Imports

    Exports

    Sections