ModsCache[.]7z

Sharing

Copy URL Twitter E-mail

General

Target

ModsCache.7z
Size

15.8MB
MD5

4aeedceec3e860052bd4ac90e99d7c78
SHA1

ca3ba353f281000fb951c72776694ab0fdcaeed7
SHA256

cfd104ddcfa6e66dee9b14cf804f7504c4ac360ba8c970ea73f2430f426f91e8
SHA512

0d09b946f247c28f2c35c0b546314f3241fb83c9a84f79a2a7df2484afd64a9fdf0d43cdc63d430d3f3fdf6b68e27969c5928f66ff0e18e1cdca6bca6ef3b686
SSDEEP

393216:ExXOih4BGARpJm+yAEYSh40IJ265u0xksj4Xpnty:KXHgOJOT5nJ4X9ty

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack007/nativePC/plugins/CutsceneSkip.dll

Files

ModsCache.7z
.7z
ModsCache/1 ZENNY SHOP-2310-1-8-1606532638.zip
.zip
nativePC/common/item/itemData.itm
ModsCache/All Monster Drops Increased-6556-1-1678941109.rar
.rar
nativePC/common/item/em001.itlot
nativePC/common/item/em001_01.itlot
nativePC/common/item/em001_02.itlot
nativePC/common/item/em002.itlot
nativePC/common/item/em002_01.itlot
nativePC/common/item/em002_02.itlot
nativePC/common/item/em007.itlot
nativePC/common/item/em007_01.itlot
nativePC/common/item/em011.itlot
nativePC/common/item/em011_01.itlot
nativePC/common/item/em013.itlot
nativePC/common/item/em018.itlot
nativePC/common/item/em018_05.itlot
nativePC/common/item/em023.itlot
nativePC/common/item/em023_05.itlot
nativePC/common/item/em024.itlot
nativePC/common/item/em026.itlot
nativePC/common/item/em027.itlot
nativePC/common/item/em032.itlot
nativePC/common/item/em032_01.itlot
nativePC/common/item/em036.itlot
nativePC/common/item/em037.itlot
nativePC/common/item/em042.itlot
nativePC/common/item/em042_05.itlot
nativePC/common/item/em043.itlot
nativePC/common/item/em043_05.itlot
nativePC/common/item/em044.itlot
nativePC/common/item/em045.itlot
nativePC/common/item/em050.itlot
nativePC/common/item/em057.itlot
nativePC/common/item/em057_01.itlot
nativePC/common/item/em063.itlot
nativePC/common/item/em063_05.itlot
nativePC/common/item/em080.itlot
nativePC/common/item/em080_01.itlot
nativePC/common/item/em100.itlot
nativePC/common/item/em100_01.itlot
nativePC/common/item/em101.itlot
nativePC/common/item/em102.itlot
nativePC/common/item/em102_01.itlot
nativePC/common/item/em103.itlot
nativePC/common/item/em103_05.itlot
nativePC/common/item/em104.itlot
nativePC/common/item/em105.itlot
nativePC/common/item/em106.itlot
nativePC/common/item/em107.itlot
nativePC/common/item/em108.itlot
nativePC/common/item/em109.itlot
nativePC/common/item/em109_01.itlot
nativePC/common/item/em110.itlot
nativePC/common/item/em110_01.itlot
nativePC/common/item/em111.itlot
nativePC/common/item/em111_05.itlot
nativePC/common/item/em112.itlot
nativePC/common/item/em113.itlot
nativePC/common/item/em113_01.itlot
nativePC/common/item/em114.itlot
nativePC/common/item/em115.itlot
nativePC/common/item/em115_05.itlot
nativePC/common/item/em116.itlot
nativePC/common/item/em117.itlot
nativePC/common/item/em118.itlot
nativePC/common/item/em118_05.itlot
nativePC/common/item/em120.itlot
nativePC/common/item/em121.itlot
nativePC/common/item/em122.itlot
nativePC/common/item/em123.itlot
nativePC/common/item/em124.itlot
nativePC/common/item/em125.itlot
nativePC/common/item/em126.itlot
nativePC/common/item/em127.itlot
nativePC/common/item/em127_01.itlot
nativePC/common/item/ems061.itlot
ModsCache/Bass Boost Sound Effect (requested)-2065-1-0-1579819225.7z
.7z
NativePC/sound/wwise/Windows/wp05_hue_epvsp.nbnk
ModsCache/Better Skill Descriptions-6749-Final-0-2-1717666569.rar
.rar
nativePC/common/text/vfont/skill_eng.gmd
nativePC/common/text/vfont/skill_pt_eng.gmd
ModsCache/Ciri's Warp Dash for All Dual Blades-2449-1-0-1581745269.zip
.zip
nativePC/vfx/efx/wp/wp02/wp02_001.efx
ModsCache/Cutscene Skip 1.0-5540-1-1-1628299424.zip
.zip
nativePC/plugins/CutsceneSkip.dll
.dll windows:6 windows x64 arch:x64

40cc331d45e542182af1557cd3b6d74e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\MoonBunnie\source\repos\CutsceneSkip\x64\Release\CutsceneSkip.pdb

Imports

loader

??0LOG@loader@@QEAA@W4LogLevel@1@@Z
?MinLogLevel@loader@@3W4LogLevel@1@A
??1LOG@loader@@QEAA@XZ

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
VirtualProtect
GetCurrentProcess
VirtualAlloc
GetModuleHandleA
GetSystemInfo
K32GetModuleInformation
VirtualQuery
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
InitializeSListHead
TerminateProcess
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime

msvcp140

?_Xlength_error@std@@YAXPEBD@Z
?id@?$collate@D@std@@2V0locale@2@A
_Strcoll
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?tolower@?$ctype@D@std@@QEBADD@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
??Bid@locale@std@@QEAA_KXZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??1_Locinfo@std@@QEAA@XZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?uncaught_exceptions@std@@YAHXZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
_Strxfrm
?id@?$ctype@D@std@@2V0locale@2@A
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??0_Locinfo@std@@QEAA@PEBD@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_CxxThrowException
__C_specific_handler
__current_exception_context
__std_type_info_destroy_list
strchr
__std_terminate
__std_exception_copy
__std_exception_destroy
__current_exception
memmove
memcmp
memcpy
memset

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free
realloc

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_crt_atexit
_seh_filter_dll
terminate
_initialize_onexit_table
_initterm_e
_invalid_parameter_noinfo_noreturn
_initterm
_cexit
_configure_narrow_argv
_initialize_narrow_environment
_register_onexit_function

Exports

Exports

?onLoad@@YAXXZ

Sections

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ModsCache/Descriptive Food Skills (Iceborne) - English v1.2-3326-v1-2-1629471610.rar
.rar
nativePC/common/text/vfont/catSkill_eng.gmd
ModsCache/Endemic Quality (Iceborne Edition)-2137-1-4-1584235462.7z
.7z
Endemic Quality/nativePC/stage/st101/common/set/st101_ec.sobj
Endemic Quality/nativePC/stage/st102/common/set/st102_ec.sobj
Endemic Quality/nativePC/stage/st103/common/set/st103_ec.sobj
Endemic Quality/nativePC/stage/st104/common/set/st104_ec.sobj
Endemic Quality/nativePC/stage/st105/common/set/st105_ec.sobj
Endemic Quality/nativePC/stage/st108/common/set/st108_ec.sobj
Endemic Quality/nativePC/stage/st109/common/set/st109_ec.sobj
Endemic Quality/nativePC/stage/st409/common/set/st409_ec.sobj
ModsCache/Fatalis Patch-4333-1-4-1601540927.zip
.zip
ModsCache/God Tier Cheat Weapons-2122-7-0-1587832014.zip
.zip
ModsCache/Larger Eye Iris-5321-1-0-1619156520.zip
.zip
ModsCache/Layered Armor Unlocked and Free-6226-1-0-1-1657137396.rar
.rar
ModsCache/Layered Weapons UNlocked and Free-6230-1-0-0-1656008136.rar
.rar
ModsCache/Longer Ponytail (Post-IB) - Size 3-1927-1-0-1578842885.zip
.zip
ModsCache/Metal Pipe and Bonk-6978-1-1703117071.7z
.7z
ModsCache/Overhauled Deco Drop Rate-2162-1-0-1580157181.zip
.zip
ModsCache/Palico Helper only-6469-1-0-1674222886.zip
.zip
ModsCache/Player's Demoness Hair - Alternate Front Bangs (Short Length)-5297-10-1618489468.zip
.zip
ModsCache/Remove Monster Roar Blur-6777-1-0-1-1704995683.zip
.zip
ModsCache/Screen and Questboard-7013-1-00-1704117787.zip
.zip
ModsCache/Side-Swept Curly Twin-Tails - Size 6-2355-2-0-1583515829.zip
.zip
ModsCache/Sorted Shop (All Items) for Iceborne-504-3-0-1-1705848504.zip
.zip
ModsCache/Subtle Critical EFX - Red-6703-1-0-1688432709.zip
.zip
ModsCache/Tiny Fatalis-5838-1-0-1636743991.zip
.zip
ModsCache/Unlock all layered armors and layered armors 0 materials (Recommend)-5538-1-0-1628228171.rar
.rar
ModsCache/VFS beta-2018-0-9-1579548186.rar
.rar
ModsCache/Youthful Female Face (Post-IB) - Textures-1921-1-1-1582791821.zip
.zip
ModsCache/iceborneallitems-1962-1-1579470107.zip
.zip
ModsCache/x3 Minerals and Bones - Guiding Lands-5422-1-0-1623492501.7z
.7z

Sharing

General

Malware Config

Signatures

Files

40cc331d45e542182af1557cd3b6d74e

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

loader

kernel32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 62KB - Virtual size: 61KB

.rdata Size: 17KB - Virtual size: 17KB

.data Size: 1KB - Virtual size: 2KB

.pdata Size: 4KB - Virtual size: 3KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 276B

.text
Size: 62KB - Virtual size: 61KB

.rdata
Size: 17KB - Virtual size: 17KB

.data
Size: 1KB - Virtual size: 2KB

.pdata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 276B