Resubmissions

25/07/2024, 10:57

240725-m2g6esvcnq 3

General

  • Target

    Geometry.Dash.v2.206a.zip

  • Size

    9.9MB

  • MD5

    6d06ded03da03b75f7651592d9a3ebdd

  • SHA1

    ad76b8ad062b2f956aa7d39290c577dbebb46195

  • SHA256

    599e07a9e462980c9e5b6d53324d03ba7ea246d15416c377ac6a23e3531a7ad7

  • SHA512

    17af43570b24d5155c1df9cb9028db2eee592c96b07f3b0c2a42176a7d9845a1d2d281ddae586b6b44d540b5449bdf902bf04875ef47b1f3975c2b23430e785a

  • SSDEEP

    196608:4EjJGyY36VtdQkDWQZPZWL6sdMlCBBNrh+M6BC39ZEFPm0WRrb+6ypd:xjkrYQkDLI6ZCBrhCAZE4Trb+Td

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 21 IoCs

    Checks for missing Authenticode signature.

Files

  • Geometry.Dash.v2.206a.zip
    .zip
  • GeometryDash.exe
    .exe windows:6 windows x64 arch:x64

    8e02958a199095b141f5f3e406256ede


    Headers

    Imports

    Sections

  • fmod.dll
    .dll windows:6 windows x64 arch:x64

    b25068591722008477a8d2c4baddc009


    Headers

    Imports

    Exports

    Sections

  • glew32.dll
    .dll windows:6 windows x64 arch:x64

    828597a3d20489b3c53681d933c325ee


    Headers

    Imports

    Exports

    Sections

  • jpeg62.dll
    .dll windows:6 windows x64 arch:x64

    ace1f17200bff56b39dc10f5a3de2b61


    Headers

    Imports

    Exports

    Sections

  • legacy.dll
    .dll windows:6 windows x64 arch:x64

    26b7c8e8e41aa0701073c98afa44cea1


    Headers

    Imports

    Exports

    Sections

  • libExtensions.dll
    .dll windows:6 windows x64 arch:x64

    d9fc725857a9d8d0b95e498fb4a5d0a3


    Headers

    Imports

    Exports

    Sections

  • libcocos2d.dll
    .dll windows:6 windows x64 arch:x64

    4cef713ccf92f211cc98c556299bf05b


    Headers

    Imports

    Exports

    Sections

  • libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • libcurl.dll
    .dll windows:6 windows x64 arch:x64

    27c45b3de2498d2adb3dd620312262d3


    Headers

    Imports

    Exports

    Sections

  • liblzma.dll
    .dll windows:6 windows x64 arch:x64

    813e2c3ce6f131809859991eb758203c


    Headers

    Imports

    Exports

    Sections

  • libpng16.dll
    .dll windows:6 windows x64 arch:x64

    04f5044f72a8042361e495e6b1741fa6


    Headers

    Imports

    Exports

    Sections

  • libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    2b512dd3642ba3619025f2fc713dea1c


    Headers

    Imports

    Exports

    Sections

  • pthreadVC3.dll
    .dll windows:6 windows x64 arch:x64

    71a1d263f4889718393b863c3fce7fde


    Headers

    Imports

    Exports

    Sections

  • pthreadVCE3.dll
    .dll windows:6 windows x64 arch:x64

    5699ee85ec80deb1fc23894c0ba236d0


    Headers

    Imports

    Exports

    Sections

  • pthreadVSE3.dll
    .dll windows:6 windows x64 arch:x64

    48840f2e58f868ce6aba659fa80207b3


    Headers

    Imports

    Exports

    Sections

  • sdkencryptedappticket64.dll
    .dll windows:6 windows x64 arch:x64

    e3ee85ca7aeaf6754b6a9430e1da90ad


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sqlite3.dll
    .dll windows:6 windows x64 arch:x64

    e609b83db587cfe1d5452ff2cbef7714


    Headers

    Imports

    Exports

    Sections

  • steam_api64.dll
    .dll windows:6 windows x64 arch:x64

    be0703d1827026f354bbe0ebb99aa151


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • steam_api64.dll.bak
    .dll windows:6 windows x64 arch:x64

    c69c22b5a3698527f0d3c9618c3affbd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tiff.dll
    .dll windows:6 windows x64 arch:x64

    8df63791740e8a8bfe00f9183c245788


    Headers

    Imports

    Exports

    Sections

  • turbojpeg.dll
    .dll windows:6 windows x64 arch:x64

    1d33cf8505ec2511b6cf42b067844152


    Headers

    Imports

    Exports

    Sections

  • uv.dll
    .dll windows:6 windows x64 arch:x64

    4789359ee711479ae6c7026ca08ab5a2


    Headers

    Imports

    Exports

    Sections

  • websockets.dll
    .dll windows:6 windows x64 arch:x64

    5b41804880d842cf6fcb12ff6e5df95b


    Headers

    Imports

    Exports

    Sections

  • zlib1.dll
    .dll windows:6 windows x64 arch:x64

    d879d2294039900ef484e0f01607f882


    Headers

    Imports

    Exports

    Sections