Static task
static1
Behavioral task
behavioral1
Sample
Patching/patch.bat
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Patching/patch.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Patching/patch_delta
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Patching/patch_delta
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Patching/xdelta3-3.1.0-x86_64.exe
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
Patching/xdelta3-3.1.0-x86_64.exe
Resource
win10v2004-20240802-en
General
-
Target
SoapCats_FaceTrackingDLC_v1.zip
-
Size
11.9MB
-
MD5
49192fcf2919bd9dd653e504f60e10b7
-
SHA1
5a1b16448411e94d9aeaf9f2816b0bda14ea521b
-
SHA256
3a8ff9548b453fdb676d2f917221f05d02e626c01b835f6ffaddf17b4c46593d
-
SHA512
7b50aed6ad944d2bb267e649f00fbba5f83ffc5dc2c96de426e55f0ee03ae31f9f280bfbab8196173c6db41604f476e31eaafe28eaa06339f1be495a0aac170a
-
SSDEEP
196608:c+80igTncWFqThxLuJDrxAwYpHnniCZw8oQPrrbjPUotMpJ:c+jn5SADrxAxpHiCZ1oYrHAotMj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Patching/xdelta3-3.1.0-x86_64.exe
Files
-
SoapCats_FaceTrackingDLC_v1.zip.zip
-
License.txt
-
Patching/patch.bat
-
Patching/patch_delta
-
Patching/xdelta3-3.1.0-x86_64.exe.exe windows:4 windows x64 arch:x64
1a7952da73c98b9ff5260c1df912f8d9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
CloseHandle
CreateFileA
DeleteCriticalSection
EnterCriticalSection
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileSizeEx
GetFileType
GetLastError
GetLocalTime
GetStartupInfoA
GetStdHandle
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
ReadFile
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetFilePointerEx
SetUnhandledExceptionFilter
Sleep
SystemTimeToFileTime
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WriteFile
msvcrt
__C_specific_handler
__dllonexit
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_errno
_fmode
_initterm
_lock
_onexit
_snprintf
_stat64
_unlock
_vsnprintf
abort
calloc
exit
fclose
fflush
fopen
fprintf
fread
free
fwrite
getenv
islower
isspace
isupper
malloc
memcmp
memcpy
memmove
memset
setvbuf
signal
strchr
strcmp
strcpy
strerror
strlen
strncmp
strncpy
strrchr
strtol
system
vfprintf
_unlink
_getpid
Sections
.text Size: 262KB - Virtual size: 261KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 704B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 46KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/19 Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/31 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/45 Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/57 Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/70 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/81 Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/92 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
SoapCats_FaceTracking-DLC_v1.unitypackage.gz
-
archtemp.tar.tar
-
07a83bba70462214d9faabe772bb8892/asset
-
07a83bba70462214d9faabe772bb8892/asset.meta
-
07a83bba70462214d9faabe772bb8892/pathname
-
084ea99121e71f645b29c299f282cb9a/asset
-
084ea99121e71f645b29c299f282cb9a/asset.meta
-
084ea99121e71f645b29c299f282cb9a/pathname
-
0a75c200bc5168347948977ab4003922/asset
-
0a75c200bc5168347948977ab4003922/asset.meta
-
0a75c200bc5168347948977ab4003922/pathname
-
0e3012b239610e244945c56814d19f45/asset
-
0e3012b239610e244945c56814d19f45/asset.meta
-
0e3012b239610e244945c56814d19f45/pathname
-
1410b3fa6269acd448a4932a95e03332/asset
-
1410b3fa6269acd448a4932a95e03332/asset.meta
-
1410b3fa6269acd448a4932a95e03332/pathname
-
17197e8162c2a434396b4d4a364db4db/asset
-
17197e8162c2a434396b4d4a364db4db/asset.meta
-
17197e8162c2a434396b4d4a364db4db/pathname
-
1a88a912b6be618489ea9f5a5561f8d4/asset
-
1a88a912b6be618489ea9f5a5561f8d4/asset.meta
-
1a88a912b6be618489ea9f5a5561f8d4/pathname
-
1e217a4a432ddfb4a8f9d7eee72d4cb8/asset
-
1e217a4a432ddfb4a8f9d7eee72d4cb8/asset.meta
-
1e217a4a432ddfb4a8f9d7eee72d4cb8/pathname
-
1e59850c38e4be349b4c9f7aa2b1fc57/asset
-
1e59850c38e4be349b4c9f7aa2b1fc57/asset.meta
-
1e59850c38e4be349b4c9f7aa2b1fc57/pathname
-
289d181936c0b73478b8e5009e003ae8/asset
-
289d181936c0b73478b8e5009e003ae8/asset.meta
-
289d181936c0b73478b8e5009e003ae8/pathname
-
2beb208231e60fe41bed761f853d2aef/asset.meta
-
2beb208231e60fe41bed761f853d2aef/pathname
-
3341e918ccfa6a34b92e4f8335fa4aa7/asset
-
3341e918ccfa6a34b92e4f8335fa4aa7/asset.meta
-
3341e918ccfa6a34b92e4f8335fa4aa7/pathname
-
35dc8d77e3f5bf346b91b2ce68160036/asset
-
35dc8d77e3f5bf346b91b2ce68160036/asset.meta
-
35dc8d77e3f5bf346b91b2ce68160036/pathname
-
37c7809cb10508a4eb0052eb45148651/asset
-
37c7809cb10508a4eb0052eb45148651/asset.meta
-
37c7809cb10508a4eb0052eb45148651/pathname
-
3f057034e7f79ae43a36a27accc2c17b/asset.meta
-
3f057034e7f79ae43a36a27accc2c17b/pathname
-
43904e4c938071c4f97b31465c2e5c9f/asset
-
43904e4c938071c4f97b31465c2e5c9f/asset.meta
-
43904e4c938071c4f97b31465c2e5c9f/pathname
-
5baa53e69a4031942af3952821d15195/asset
-
5baa53e69a4031942af3952821d15195/asset.meta
-
5baa53e69a4031942af3952821d15195/pathname
-
648922944f79b744faabf13dfab88f00/asset
-
648922944f79b744faabf13dfab88f00/asset.meta
-
648922944f79b744faabf13dfab88f00/pathname
-
73ef01b56843cd24b8afbdc1b5426f31/asset
-
73ef01b56843cd24b8afbdc1b5426f31/asset.meta
-
73ef01b56843cd24b8afbdc1b5426f31/pathname
-
75e6e54ebe146974383abcd1891a4de7/asset
-
75e6e54ebe146974383abcd1891a4de7/asset.meta
-
75e6e54ebe146974383abcd1891a4de7/pathname
-
79e340aaf767d0d4d8aabb4feeae4752/asset
-
79e340aaf767d0d4d8aabb4feeae4752/asset.meta
-
79e340aaf767d0d4d8aabb4feeae4752/pathname
-
880bb695bbd59df4a8b6232e0fcae92a/asset
-
880bb695bbd59df4a8b6232e0fcae92a/asset.meta
-
880bb695bbd59df4a8b6232e0fcae92a/pathname
-
8902902f1a2289b43987e75acdf4b4a6/asset
-
8902902f1a2289b43987e75acdf4b4a6/asset.meta
-
8902902f1a2289b43987e75acdf4b4a6/pathname
-
89cbdf4c991398a4e90d86189dea32ce/asset
-
89cbdf4c991398a4e90d86189dea32ce/asset.meta
-
89cbdf4c991398a4e90d86189dea32ce/pathname
-
9c571a996fb97e74baebe86e053e4d68/asset.meta
-
9c571a996fb97e74baebe86e053e4d68/pathname
-
ac9c897c782dcfb4086f2f64704d3b70/asset
-
ac9c897c782dcfb4086f2f64704d3b70/asset.meta
-
ac9c897c782dcfb4086f2f64704d3b70/pathname
-
acc88694258ef0747a02a8eed198affb/asset
-
acc88694258ef0747a02a8eed198affb/asset.meta
-
acc88694258ef0747a02a8eed198affb/pathname
-
b3082d45eb330ef42af4a36132995d2b/asset
-
b3082d45eb330ef42af4a36132995d2b/asset.meta
-
b3082d45eb330ef42af4a36132995d2b/pathname
-
b36edb3287b6f36418f479b9effc302d/asset
-
b36edb3287b6f36418f479b9effc302d/asset.meta
-
b36edb3287b6f36418f479b9effc302d/pathname
-
b8f3cce5d6ca5994ead59dc23f0d5472/asset
-
b8f3cce5d6ca5994ead59dc23f0d5472/asset.meta
-
b8f3cce5d6ca5994ead59dc23f0d5472/pathname
-
bd3d6fb2ab6b9d346ad87519ff74ffcd/asset
-
bd3d6fb2ab6b9d346ad87519ff74ffcd/asset.meta
-
bd3d6fb2ab6b9d346ad87519ff74ffcd/pathname
-
bdfbc1a8743c5c14e9578db2bde89fae/asset
-
bdfbc1a8743c5c14e9578db2bde89fae/asset.meta
-
bdfbc1a8743c5c14e9578db2bde89fae/pathname
-
beaa4087912341340a7b7d32f659d335/asset
-
beaa4087912341340a7b7d32f659d335/asset.meta
-
beaa4087912341340a7b7d32f659d335/pathname
-
c5cf7042e4bfb574a851f36d8a17cd41/asset
-
c5cf7042e4bfb574a851f36d8a17cd41/asset.meta
-
c5cf7042e4bfb574a851f36d8a17cd41/pathname
-
c6b03a8565676e246ad3e88990e0aac1/asset
-
c6b03a8565676e246ad3e88990e0aac1/asset.meta
-
c6b03a8565676e246ad3e88990e0aac1/pathname
-
cab526a8386efdf4cb2c229f0db1314c/asset
-
cab526a8386efdf4cb2c229f0db1314c/asset.meta
-
cab526a8386efdf4cb2c229f0db1314c/pathname
-
ceb89d69d80a694458bd5ef76192dbeb/asset
-
ceb89d69d80a694458bd5ef76192dbeb/asset.meta
-
ceb89d69d80a694458bd5ef76192dbeb/pathname
-
d170ba683b7e799409591ce63dd90c37/asset
-
d170ba683b7e799409591ce63dd90c37/asset.meta
-
d170ba683b7e799409591ce63dd90c37/pathname
-
d8633382bf52749498234a40ef1d948c/asset
-
d8633382bf52749498234a40ef1d948c/asset.meta
-
d8633382bf52749498234a40ef1d948c/pathname
-
dc2d1637169454740a6d49b1ade91ab0/asset.meta
-
dc2d1637169454740a6d49b1ade91ab0/pathname
-
df711c1f6236c5f45bcc7245629989e2/asset
-
df711c1f6236c5f45bcc7245629989e2/asset.meta
-
df711c1f6236c5f45bcc7245629989e2/pathname
-
e436af486c85b8f46951e5d4288499f5/asset
-
e436af486c85b8f46951e5d4288499f5/asset.meta
-
e436af486c85b8f46951e5d4288499f5/pathname
-
e6f2385378a65414889fcda1113ea9c2/asset.meta
-
e6f2385378a65414889fcda1113ea9c2/pathname
-
e9f26a355cbe7124f89a4d779e03fe42/asset
-
e9f26a355cbe7124f89a4d779e03fe42/asset.meta
-
e9f26a355cbe7124f89a4d779e03fe42/pathname
-
f806d884948ff134a8273f0720f0a9bc/asset
-
f806d884948ff134a8273f0720f0a9bc/asset.meta
-
f806d884948ff134a8273f0720f0a9bc/pathname
-
fac7fce13ce4fe24492122ff2657b267/asset
-
fac7fce13ce4fe24492122ff2657b267/asset.meta
-
fac7fce13ce4fe24492122ff2657b267/pathname