Overview

overview

7

Static

static

3

RPG Maker XP.rar

windows11-21h2-x64

3

RPG Maker ...ES.exe

windows11-21h2-x64

7

$PLUGINSDI...al.ini

windows11-21h2-x64

3

$PLUGINSDI...rd.bmp

windows11-21h2-x64

3

$PLUGINSDI...sh.bmp

windows11-21h2-x64

3

System/Dat...rxdata

windows11-21h2-x64

3

System/Dat...rxdata

windows11-21h2-x64

3

System/Dat...rxdata

windows11-21h2-x64

3

System/Dat...rxdata

windows11-21h2-x64

3

System/Dat...rxdata

windows11-21h2-x64

3

System/Dat...rxdata

windows11-21h2-x64

3

System/Dat...rxdata

windows11-21h2-x64

3

System/Dat...rxdata

windows11-21h2-x64

3

System/Dat...rxdata

windows11-21h2-x64

3

System/Dat...rxdata

windows11-21h2-x64

3

System/Dat...rxdata

windows11-21h2-x64

3

System/Dat...rxdata

windows11-21h2-x64

3

System/Dat...rxdata

windows11-21h2-x64

3

System/Dat...rxdata

windows11-21h2-x64

3

System/Dat...rxdata

windows11-21h2-x64

3

System/Dat...rxdata

windows11-21h2-x64

3

System/Game.exe

windows11-21h2-x64

3

uninst.exe

windows11-21h2-x64

7

RPG Maker ...2a.exe

windows11-21h2-x64

7

$PLUGINSDI...ns.dll

windows11-21h2-x64

3

$PLUGINSDI...al.ini

windows11-21h2-x64

3

$PLUGINSDI...rd.bmp

windows11-21h2-x64

3

$SYSDIR/RGSS102J.dll

windows11-21h2-x64

3

Audio/BGM/...01.mid

windows11-21h2-x64

1

Audio/BGM/...02.mid

windows11-21h2-x64

1

Desinstalar.exe

windows11-21h2-x64

7

Graphics.exe

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    RPG Maker XP.rar

  • Size

    20.5MB

  • MD5

    233e62b62bdbfa267ed2d0fd40cc5a75

  • SHA1

    fd412aded0715a1c8e4c048d7d4db67921b371a0

  • SHA256

    c75da13c31c4a839f5aeeeaaceb53d7a78a79ecc1e3bff0bfe74161d0a9ba7eb

  • SHA512

    a7963724c5274c499ba623c9b32d13d91905f4893b4aee9ff0b3d00b6765f17473be8a688fcb9399066043fda478cad495072ecd2a7019661105c7a8cf50483d

  • SSDEEP

    393216:9gh5RDX/sSraIFWp9RXLP5PlY+MPqAHc0cmxrQ32ydtsjv1uD8mKa:9aT/QdZNaqA8tmjKKL1uD1n

Score
3/10

Malware Config

Signatures

  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • RPG Maker XP.rar
    .rar
  • RPG Maker XP/RMXP_1.02a_ES.exe
    .exe windows:4 windows x86 arch:x86

    9c523d8653da5455667e3f82274f2f88


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Splash.dll
    .dll windows:4 windows x86 arch:x86

    dfca8f6698c93c9475bec373d99a1efd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/splash.bmp
  • $SYSDIR/RGSS102J.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • RGSS102J.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • RPGXP.chm
    .chm
  • RPGXP.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • SciLexer.dll
    .dll windows:4 windows x86 arch:x86

    e211815c6b4244399bb574a45090231f


    Headers

    Imports

    Exports

    Sections

  • System/Data/Actors.rxdata
  • System/Data/Animations.rxdata
  • System/Data/Armors.rxdata
  • System/Data/Classes.rxdata
  • System/Data/CommonEvents.rxdata
  • System/Data/Enemies.rxdata
  • System/Data/Items.rxdata
  • System/Data/Map001.rxdata
  • System/Data/MapInfos.rxdata
  • System/Data/Scripts.rxdata
  • System/Data/Skills.rxdata
  • System/Data/States.rxdata
  • System/Data/System.rxdata
  • System/Data/Tilesets.rxdata
  • System/Data/Troops.rxdata
  • System/Data/Weapons.rxdata
  • System/Game.exe
    .exe windows:4 windows x86 arch:x86

    eeb5410908c6b922c6a2b2251f08cd97


    Headers

    Imports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    9c523d8653da5455667e3f82274f2f88


    Headers

    Imports

    Sections

  • RPG Maker XP/RTP_RMXP_1.02a.exe
    .exe windows:4 windows x86 arch:x86

    9c523d8653da5455667e3f82274f2f88


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/RGSS102J.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Audio/BGM/001-Battle01.mid
  • Audio/BGM/002-Battle02.mid
  • Audio/BGM/003-Battle03.mid
  • Audio/BGM/004-Battle04.mid
  • Audio/BGM/005-Boss01.mid
  • Audio/BGM/006-Boss02.mid
  • Audio/BGM/007-Boss03.mid
  • Audio/BGM/008-Boss04.mid
  • Audio/BGM/009-LastBoss01.mid
  • Audio/BGM/010-LastBoss02.mid
  • Audio/BGM/011-LastBoss03.mid
  • Audio/BGM/012-Theme01.mid
  • Audio/BGM/013-Theme02.mid
  • Audio/BGM/014-Theme03.mid
  • Audio/BGM/015-Theme04.mid
  • Audio/BGM/016-Theme05.mid
  • Audio/BGM/017-Theme06.mid
  • Audio/BGM/018-Field01.mid
  • Audio/BGM/019-Field02.mid
  • Audio/BGM/020-Field03.mid
  • Audio/BGM/021-Field04.mid
  • Audio/BGM/022-Field05.mid
  • Audio/BGM/023-Town01.mid
  • Audio/BGM/024-Town02.mid
  • Audio/BGM/025-Town03.mid
  • Audio/BGM/026-Town04.mid
  • Audio/BGM/027-Town05.mid
  • Audio/BGM/028-Town06.mid
  • Audio/BGM/029-Town07.mid
  • Audio/BGM/030-Town08.mid
  • Audio/BGM/031-Castle01.mid
  • Audio/BGM/032-Church01.mid
  • Audio/BGM/033-Ship01.mid
  • Audio/BGM/034-Heaven01.mid
  • Audio/BGM/035-Dungeon01.mid
  • Audio/BGM/036-Dungeon02.mid
  • Audio/BGM/037-Dungeon03.mid
  • Audio/BGM/038-Dungeon04.mid
  • Audio/BGM/039-Dungeon05.mid
  • Audio/BGM/040-Dungeon06.mid
  • Audio/BGM/041-Dungeon07.mid
  • Audio/BGM/042-Dungeon08.mid
  • Audio/BGM/043-Positive01.mid
  • Audio/BGM/044-Positive02.mid
  • Audio/BGM/045-Positive03.mid
  • Audio/BGM/046-Positive04.mid
  • Audio/BGM/047-Positive05.mid
  • Audio/BGM/048-Positive06.mid
  • Audio/BGM/049-Positive07.mid
  • Audio/BGM/050-Positive08.mid
  • Audio/BGM/051-Positive09.mid
  • Audio/BGM/052-Negative01.mid
  • Audio/BGM/053-Negative02.mid
  • Audio/BGM/054-Negative03.mid
  • Audio/BGM/055-Negative04.mid
  • Audio/BGM/056-Negative05.mid
  • Audio/BGM/057-Negative06.mid
  • Audio/BGM/058-Slow01.mid
  • Audio/BGM/059-Slow02.mid
  • Audio/BGM/060-Slow03.mid
  • Audio/BGM/061-Slow04.mid
  • Audio/BGM/062-Slow05.mid
  • Audio/BGM/063-Slow06.mid
  • Audio/BGM/064-Slow07.mid
  • Audio/BGS/001-Wind01.ogg
  • Audio/BGS/002-Wind02.ogg
  • Audio/BGS/003-Wind03.ogg
  • Audio/BGS/004-Wind04.ogg
  • Audio/BGS/005-Rain01.ogg
  • Audio/BGS/006-Rain02.ogg
  • Audio/BGS/007-Rain03.ogg
  • Audio/BGS/008-Wave01.ogg
  • Audio/BGS/009-Wave02.ogg
  • Audio/BGS/010-River01.ogg
  • Audio/BGS/011-Waterfall01.ogg
  • Audio/BGS/012-Waterfall02.ogg
  • Audio/BGS/013-Fire01.ogg
  • Audio/BGS/014-Fire02.ogg
  • Audio/BGS/015-Quake01.ogg
  • Audio/BGS/016-Drips01.ogg
  • Audio/BGS/017-Creature01.ogg
  • Audio/BGS/018-Darkness01.ogg
  • Audio/BGS/019-People01.ogg
  • Audio/BGS/020-People02.ogg
  • Audio/ME/001-Victory01.mid
  • Audio/ME/002-Victory02.mid
  • Audio/ME/003-Victory03.mid
  • Audio/ME/004-Victory04.mid
  • Audio/ME/005-Defeat01.mid
  • Audio/ME/006-Defeat02.mid
  • Audio/ME/007-Fanfare01.mid
  • Audio/ME/008-Fanfare02.mid
  • Audio/ME/009-Fanfare03.mid
  • Audio/ME/010-Item01.mid
  • Audio/ME/011-Item02.mid
  • Audio/ME/012-Gag01.mid
  • Audio/ME/013-Gag02.mid
  • Audio/ME/014-Inn01.mid
  • Audio/ME/015-Mystery01.mid
  • Audio/ME/016-Shock01.mid
  • Audio/SE/001-System01.ogg
  • Audio/SE/002-System02.ogg
  • Audio/SE/003-System03.ogg
  • Audio/SE/004-System04.ogg
  • Audio/SE/005-System05.ogg
  • Audio/SE/006-System06.ogg
  • Audio/SE/007-System07.ogg
  • Audio/SE/008-System08.ogg
  • Audio/SE/009-System09.ogg
  • Audio/SE/010-System10.ogg
  • Audio/SE/011-System11.ogg
  • Audio/SE/012-System12.ogg
  • Audio/SE/013-Move01.ogg
  • Audio/SE/014-Move02.ogg
  • Audio/SE/015-Jump01.ogg
  • Audio/SE/016-Jump02.ogg
  • Audio/SE/017-Jump03.ogg
  • Audio/SE/018-Teleport01.ogg
  • Audio/SE/019-Teleport02.ogg
  • Audio/SE/020-Teleport03.ogg
  • Audio/SE/021-Dive01.ogg
  • Audio/SE/022-Dive02.ogg
  • Audio/SE/023-Dive03.ogg
  • Audio/SE/024-Door01.ogg
  • Audio/SE/025-Door02.ogg
  • Audio/SE/026-Door03.ogg
  • Audio/SE/027-Door04.ogg
  • Audio/SE/028-Door05.ogg
  • Audio/SE/029-Door06.ogg
  • Audio/SE/030-Door07.ogg
  • Audio/SE/031-Door08.ogg
  • Audio/SE/032-Switch01.ogg
  • Audio/SE/033-Switch02.ogg
  • Audio/SE/034-Switch03.ogg
  • Audio/SE/035-Switch04.ogg
  • Audio/SE/036-Switch05.ogg
  • Audio/SE/037-Switch06.ogg
  • Audio/SE/038-Switch07.ogg
  • Audio/SE/039-Switch08.ogg
  • Audio/SE/040-Knock01.ogg
  • Audio/SE/041-Knock02.ogg
  • Audio/SE/042-Knock03.ogg
  • Audio/SE/043-Knock04.ogg
  • Audio/SE/044-Chest01.ogg
  • Audio/SE/045-Push01.ogg
  • Audio/SE/046-Book01.ogg
  • Audio/SE/047-Book02.ogg
  • Audio/SE/048-Explosion01.ogg
  • Audio/SE/049-Explosion02.ogg
  • Audio/SE/050-Explosion03.ogg
  • Audio/SE/051-Explosion04.ogg
  • Audio/SE/052-Cannon01.ogg
  • Audio/SE/053-Cannon02.ogg
  • Audio/SE/054-Cannon03.ogg
  • Audio/SE/055-Right01.ogg
  • Audio/SE/056-Right02.ogg
  • Audio/SE/057-Wrong01.ogg
  • Audio/SE/058-Wrong02.ogg
  • Audio/SE/059-Applause01.ogg
  • Audio/SE/060-Cheer01.ogg
  • Audio/SE/061-Thunderclap01.ogg
  • Audio/SE/062-Swing01.ogg
  • Audio/SE/063-Swing02.ogg
  • Audio/SE/064-Swing03.ogg
  • Audio/SE/065-Swing04.ogg
  • Audio/SE/066-Animal01.ogg
  • Audio/SE/067-Animal02.ogg
  • Audio/SE/068-Animal03.ogg
  • Audio/SE/069-Animal04.ogg
  • Audio/SE/070-Animal05.ogg
  • Audio/SE/071-Animal06.ogg
  • Audio/SE/072-Animal07.ogg
  • Audio/SE/073-Animal08.ogg
  • Audio/SE/074-Small01.ogg
  • Audio/SE/075-Small02.ogg
  • Audio/SE/076-Small03.ogg
  • Audio/SE/077-Small04.ogg
  • Audio/SE/078-Small05.ogg
  • Audio/SE/079-Monster01.ogg
  • Audio/SE/080-Monster02.ogg
  • Audio/SE/081-Monster03.ogg
  • Audio/SE/082-Monster04.ogg
  • Audio/SE/083-Monster05.ogg
  • Audio/SE/084-Monster06.ogg
  • Audio/SE/085-Monster07.ogg
  • Audio/SE/086-Action01.ogg
  • Audio/SE/087-Action02.ogg
  • Audio/SE/088-Action03.ogg
  • Audio/SE/089-Attack01.ogg
  • Audio/SE/090-Attack02.ogg
  • Audio/SE/091-Attack03.ogg
  • Audio/SE/092-Attack04.ogg
  • Audio/SE/093-Attack05.ogg
  • Audio/SE/094-Attack06.ogg
  • Audio/SE/095-Attack07.ogg
  • Audio/SE/096-Attack08.ogg
  • Audio/SE/097-Attack09.ogg
  • Audio/SE/098-Attack10.ogg
  • Audio/SE/099-Attack11.ogg
  • Audio/SE/100-Attack12.ogg
  • Audio/SE/101-Attack13.ogg
  • Audio/SE/102-Attack14.ogg
  • Audio/SE/103-Attack15.ogg
  • Audio/SE/104-Attack16.ogg
  • Audio/SE/105-Heal01.ogg
  • Audio/SE/106-Heal02.ogg
  • Audio/SE/107-Heal03.ogg
  • Audio/SE/108-Heal04.ogg
  • Audio/SE/109-Heal05.ogg
  • Audio/SE/110-Heal06.ogg
  • Audio/SE/111-Heal07.ogg
  • Audio/SE/112-Heal08.ogg
  • Audio/SE/113-Remedy01.ogg
  • Audio/SE/114-Remedy02.ogg
  • Audio/SE/115-Raise01.ogg
  • Audio/SE/116-Raise02.ogg
  • Audio/SE/117-Fire01.ogg
  • Audio/SE/118-Fire02.ogg
  • Audio/SE/119-Fire03.ogg
  • Audio/SE/120-Ice01.ogg
  • Audio/SE/121-Ice02.ogg
  • Audio/SE/122-Ice03.ogg
  • Audio/SE/123-Thunder01.ogg
  • Audio/SE/124-Thunder02.ogg
  • Audio/SE/125-Thunder03.ogg
  • Audio/SE/126-Water01.ogg
  • Audio/SE/127-Water02.ogg
  • Audio/SE/128-Water03.ogg
  • Audio/SE/129-Earth01.ogg
  • Audio/SE/130-Earth02.ogg
  • Audio/SE/131-Earth03.ogg
  • Audio/SE/132-Wind01.ogg
  • Audio/SE/133-Wind02.ogg
  • Audio/SE/134-Wind03.ogg
  • Audio/SE/135-Light01.ogg
  • Audio/SE/136-Light02.ogg
  • Audio/SE/137-Light03.ogg
  • Audio/SE/138-Darkness01.ogg
  • Audio/SE/139-Darkness02.ogg
  • Audio/SE/140-Darkness03.ogg
  • Audio/SE/141-Burst01.ogg
  • Audio/SE/142-Burst02.ogg
  • Audio/SE/143-Support01.ogg
  • Audio/SE/144-Support02.ogg
  • Audio/SE/145-Support03.ogg
  • Audio/SE/146-Support04.ogg
  • Audio/SE/147-Support05.ogg
  • Audio/SE/148-Support06.ogg
  • Audio/SE/149-Support07.ogg
  • Audio/SE/150-Support08.ogg
  • Audio/SE/151-Support09.ogg
  • Audio/SE/152-Support10.ogg
  • Audio/SE/153-Support11.ogg
  • Audio/SE/154-Support12.ogg
  • Audio/SE/155-Support13.ogg
  • Audio/SE/156-Support14.ogg
  • Audio/SE/157-Skill01.ogg
  • Audio/SE/158-Skill02.ogg
  • Audio/SE/159-Skill03.ogg
  • Audio/SE/160-Skill04.ogg
  • Audio/SE/161-Skill05.ogg
  • Audio/SE/162-Skill06.ogg
  • Audio/SE/163-Skill07.ogg
  • Audio/SE/164-Skill08.ogg
  • Audio/SE/165-Skill09.ogg
  • Audio/SE/166-Skill10.ogg
  • Audio/SE/167-Skill11.ogg
  • Audio/SE/168-Skill12.ogg
  • Audio/SE/169-Skill13.ogg
  • Audio/SE/170-Skill14.ogg
  • Audio/SE/171-Skill15.ogg
  • Audio/SE/172-Skill16.ogg
  • Audio/SE/173-Skill17.ogg
  • Audio/SE/174-Skill18.ogg
  • Audio/SE/175-Skill19.ogg
  • Audio/SE/176-Skill20.ogg
  • Audio/SE/177-Skill21.ogg
  • Audio/SE/178-Skill22.ogg
  • Audio/SE/179-Skill23.ogg
  • Audio/SE/180-Skill24.ogg
  • Desinstalar.exe
    .exe windows:4 windows x86 arch:x86

    9c523d8653da5455667e3f82274f2f88


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Graphics.exe
    .exe windows:4 windows x86 arch:x86

    c10ef6fec0df17ff4fb9d68980e07497


    Headers

    Imports

    Sections