Debug[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Debug.zip
Size

35.7MB
MD5

f45e16a4b1fca1cf7a06994f94d20ddd
SHA1

ee9e9031638884b80d9e9606da8e60235e56e7b1
SHA256

cf05dfdc448951576ef6c85e76f53a192ac0b467d759dceaef0f5deb5f436a64
SHA512

ce4141748f8cf9da5be992384ce5a849711667cc9ae3a0d22400da319fc869f0f3cf8d8bf85c91752d7679b98ac3c997863faada844261e6f87f385ff07274c1
SSDEEP

786432:p2nMk51sRAsIjL08khwMqhx2fM5c2lH7pDv06fiW1AJN2xPIsZLL89qJWfGLghFm:p2nGUvkpqLm2lH77iW1AJNQIsZ5JWfHG

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Debug/MaterialSkin.dll
unpack001/Debug/acid.fun.exe

Files

Debug.zip
.zip
Debug/MaterialSkin.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\HWSolinftec\Documents\Other Code\MaterialSkin\MaterialSkin\obj\Release\MaterialSkin.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 6.3MB - Virtual size: 6.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Debug/Newtonsoft.Json.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20
Certificate

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Not Before

15/01/2021, 00:00

Not After

14/01/2046, 23:59

Subject

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73
Certificate

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Not Before

15/07/2021, 00:00

Not After

14/07/2031, 23:59

Subject

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Not Before

13/08/2021, 00:00

Not After

29/10/2024, 23:59

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

38:27:11:d0:35:02:fc:58:64:ae:1e:6c:cb:c5:eb:67:eb:5d:dc:c8:86:9e:e4:59:cc:0d:02:0e:5f:d1:fc:9b
Signer

Actual PE Digest

38:27:11:d0:35:02:fc:58:64:ae:1e:6c:cb:c5:eb:67:eb:5d:dc:c8:86:9e:e4:59:cc:0d:02:0e:5f:d1:fc:9b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 681KB - Virtual size: 680KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Debug/Newtonsoft.Json.xml
.xml
Debug/acid.fun.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Admin\source\repos\acid.fun\acid.fun\obj\Debug\acid.fun.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 587KB - Virtual size: 586KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Debug/acid.fun.exe.config
Debug/acid.fun.pdb
Debug/dependencies/NotoSansCJKjp-Regular.otf
Debug/dependencies/PC.zip
.zip
PlatformContent/pc/fonts/NotoSansCJKjp-Regular.otf
PlatformContent/pc/terrain/materials.json
PlatformContent/pc/terrain/materials2022.json
PlatformContent/pc/textures/aluminum/diffuse.dds
PlatformContent/pc/textures/aluminum/normal.dds
PlatformContent/pc/textures/aluminum/normaldetail.dds
PlatformContent/pc/textures/brdfLUT.dds
PlatformContent/pc/textures/brick/diffuse.dds
PlatformContent/pc/textures/brick/normal.dds
PlatformContent/pc/textures/brick/normaldetail.dds
PlatformContent/pc/textures/cobblestone/diffuse.dds
PlatformContent/pc/textures/cobblestone/normal.dds
PlatformContent/pc/textures/cobblestone/normaldetail.dds
PlatformContent/pc/textures/concrete/diffuse.dds
PlatformContent/pc/textures/concrete/normal.dds
PlatformContent/pc/textures/concrete/normaldetail.dds
PlatformContent/pc/textures/diamondplate/diffuse.dds
PlatformContent/pc/textures/diamondplate/normal.dds
PlatformContent/pc/textures/diamondplate/normaldetail.dds
PlatformContent/pc/textures/fabric/diffuse.dds
PlatformContent/pc/textures/fabric/normal.dds
PlatformContent/pc/textures/fabric/normaldetail.dds
PlatformContent/pc/textures/glass/diffuse.dds
PlatformContent/pc/textures/glass/normal.dds
PlatformContent/pc/textures/glass/normaldetail.dds
PlatformContent/pc/textures/granite/diffuse.dds
PlatformContent/pc/textures/granite/normal.dds
PlatformContent/pc/textures/granite/normaldetail.dds
PlatformContent/pc/textures/grass/diffuse.dds
PlatformContent/pc/textures/grass/normal.dds
PlatformContent/pc/textures/grass/normaldetail.dds
PlatformContent/pc/textures/ice/diffuse.dds
PlatformContent/pc/textures/ice/normal.dds
PlatformContent/pc/textures/ice/normaldetail.dds
PlatformContent/pc/textures/marble/diffuse.dds
PlatformContent/pc/textures/marble/normal.dds
PlatformContent/pc/textures/marble/normaldetail.dds
PlatformContent/pc/textures/metal/diffuse.dds
PlatformContent/pc/textures/metal/normal.dds
PlatformContent/pc/textures/metal/normaldetail.dds
PlatformContent/pc/textures/pebble/diffuse.dds
PlatformContent/pc/textures/pebble/normal.dds
PlatformContent/pc/textures/pebble/normaldetail.dds
PlatformContent/pc/textures/plastic/diffuse.dds
PlatformContent/pc/textures/plastic/normal.dds
PlatformContent/pc/textures/plastic/normaldetail.dds
PlatformContent/pc/textures/rust/diffuse.dds
PlatformContent/pc/textures/rust/normal.dds
PlatformContent/pc/textures/rust/normaldetail.dds
PlatformContent/pc/textures/sand/diffuse.dds
PlatformContent/pc/textures/sand/normal.dds
PlatformContent/pc/textures/sand/normaldetail.dds
PlatformContent/pc/textures/sky/Emo.png
.png
PlatformContent/pc/textures/sky/Overcast.png
.png
PlatformContent/pc/textures/sky/diffuse.dds
PlatformContent/pc/textures/sky/indoor512_bk.tex
.png
PlatformContent/pc/textures/sky/indoor512_dn.tex
.png
PlatformContent/pc/textures/sky/indoor512_ft.tex
.png
PlatformContent/pc/textures/sky/indoor512_lf.tex
.png
PlatformContent/pc/textures/sky/indoor512_rt.tex
.png
PlatformContent/pc/textures/sky/indoor512_up.tex
.png
PlatformContent/pc/textures/sky/sky512_bk.tex
.png
PlatformContent/pc/textures/sky/sky512_dn.tex
.png
PlatformContent/pc/textures/sky/sky512_ft.tex
.png
PlatformContent/pc/textures/sky/sky512_lf.tex
.png
PlatformContent/pc/textures/sky/sky512_rt.tex
.png
PlatformContent/pc/textures/sky/sky512_up.tex
.png
PlatformContent/pc/textures/slate/diffuse.dds
PlatformContent/pc/textures/slate/normal.dds
PlatformContent/pc/textures/slate/normaldetail.dds
PlatformContent/pc/textures/studs.dds
PlatformContent/pc/textures/wangIndex.dds
PlatformContent/pc/textures/water/normal_01.dds
PlatformContent/pc/textures/water/normal_02.dds
PlatformContent/pc/textures/water/normal_03.dds
PlatformContent/pc/textures/water/normal_04.dds
PlatformContent/pc/textures/water/normal_05.dds
PlatformContent/pc/textures/water/normal_06.dds
PlatformContent/pc/textures/water/normal_07.dds
PlatformContent/pc/textures/water/normal_08.dds
PlatformContent/pc/textures/water/normal_09.dds
PlatformContent/pc/textures/water/normal_10.dds
PlatformContent/pc/textures/water/normal_11.dds
PlatformContent/pc/textures/water/normal_12.dds
PlatformContent/pc/textures/water/normal_13.dds
PlatformContent/pc/textures/water/normal_14.dds
PlatformContent/pc/textures/water/normal_15.dds
PlatformContent/pc/textures/water/normal_16.dds
PlatformContent/pc/textures/water/normal_17.dds
PlatformContent/pc/textures/water/normal_18.dds
PlatformContent/pc/textures/water/normal_19.dds
PlatformContent/pc/textures/water/normal_20.dds
PlatformContent/pc/textures/water/normal_21.dds
PlatformContent/pc/textures/water/normal_22.dds
PlatformContent/pc/textures/water/normal_23.dds
PlatformContent/pc/textures/water/normal_24.dds
PlatformContent/pc/textures/water/normal_25.dds
PlatformContent/pc/textures/wood/diffuse.dds
PlatformContent/pc/textures/wood/normal.dds
PlatformContent/pc/textures/wood/normaldetail.dds
PlatformContent/pc/textures/woodplanks/diffuse.dds
PlatformContent/pc/textures/woodplanks/normal.dds
PlatformContent/pc/textures/woodplanks/normaldetail.dds

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 6.3MB - Virtual size: 6.3MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20Certificate

Key Usages

0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73Certificate

Extended Key Usages

Key Usages

0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29Certificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

38:27:11:d0:35:02:fc:58:64:ae:1e:6c:cb:c5:eb:67:eb:5d:dc:c8:86:9e:e4:59:cc:0d:02:0e:5f:d1:fc:9bSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 681KB - Virtual size: 680KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 587KB - Virtual size: 586KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

.text
Size: 6.3MB - Virtual size: 6.3MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20
Certificate

0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73
Certificate

0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

38:27:11:d0:35:02:fc:58:64:ae:1e:6c:cb:c5:eb:67:eb:5d:dc:c8:86:9e:e4:59:cc:0d:02:0e:5f:d1:fc:9b
Signer

.text
Size: 681KB - Virtual size: 680KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 587KB - Virtual size: 586KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B