Static

static

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    rusifikator-dlja-katawa-shoujo_1723811624_337101.rar

  • Size

    6.2MB

  • MD5

    4124f2b6087acc83ae30884eebe53ae5

  • SHA1

    fda965735bec17b673411b500c4898eda9ae8869

  • SHA256

    1161898a5a6b3823d4d7419d5f585f2b064f754bb66cde7d0ffecb0715d106e9

  • SHA512

    2343fc5a7494e0f86330a97c6c9eadcfcc52bb39c46063891d9d790fdafe99cf7dca4edb223fd0284cbc35ab8ab81e9be0061970e85354b488a68ca856d584a6

  • SSDEEP

    98304:wMAfZiQfVPOj/Kt3X0fDFaecfKkUl/xscuTIHRx/Q7S8X/NWyWBOhyxagXRKqr7+:wMeiQfR+viWJbUg2FX/Nz8X/XXvvAQ6

Score
3/10
pdflink

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink
  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • rusifikator-dlja-katawa-shoujo_1723811624_337101.rar
    .rar
  • [ns]_katawa_shoujo_russian_patch_3.01-lite-[windows].exe
    .exe windows:5 windows x86 arch:x86

    c32ba42c73a2bc24d2788f7750d87edb


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • Russian/Game Manual.pdf
    .pdf

    • http://irc.irchighway.net/#katawa-shoujohttp://renpy.org

    • http://katawa-shoujo.com

    • http://katawa-shoujo.com/

    • http://katawashoujo.blogspot.com

  • Russian/LICENSE.txt
  • Russian/Uninstall Katawa Shoujo Russian Patch.exe
    .exe windows:5 windows x86 arch:x86

    c32ba42c73a2bc24d2788f7750d87edb


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • game/font/playtime_cyr2.ttf
  • game/langinit/ru.lang
  • game/script-a1-friday_RU.rpyc
  • game/script-a1-monday_RU.rpyc
  • game/script-a1-saturday_RU.rpyc
  • game/script-a1-sunday_RU.rpyc
  • game/script-a1-thursday_RU.rpyc
  • game/script-a1-tuesday_RU.rpyc
  • game/script-a1-wednesday_RU.rpyc
  • game/script-a2-emi_RU.rpyc
  • game/script-a2-hanako_RU.rpyc
  • game/script-a2-lilly_RU.rpyc
  • game/script-a2-rin_RU.rpyc
  • game/script-a2-shizune_RU.rpyc
  • game/script-a3-emi_RU.rpyc
  • game/script-a3-hanako_RU.rpyc
  • game/script-a3-lilly_RU.rpyc
  • game/script-a3-rin_RU.rpyc
  • game/script-a3-shizune_RU.rpyc
  • game/script-a4-emi_RU.rpyc
  • game/script-a4-hanako_RU.rpyc
  • game/script-a4-lilly_RU.rpyc
  • game/script-a4-rin_RU.rpyc
  • game/script-a4-shizune_RU.rpyc
  • game/ui-names_hepb_RU.rpyc
  • game/ui-names_poli_RU.rpyc
  • game/ui-strings_ES.rpyc
  • game/ui-strings_FR.rpyc
  • game/ui-strings_JP.rpyc
  • game/ui-strings_RU.rpyc
  • game/ui_i18n_RU.rpyc