Deadly Beta (password 2121).rar
- SHA256 3e0faf2368d158b927fe8ddf8cc45c18465fd663545652dcf11812db0e039429
Password
2121
Overview
overview
10Static
static
1Launcher.exe
windows7-x64
10Launcher.exe
windows10-2004-x64
10WebView2Loader.dll
windows7-x64
1WebView2Loader.dll
windows10-2004-x64
1res_mods/1..._a.pyc
windows7-x64
3res_mods/1..._a.pyc
windows10-2004-x64
3res_mods/1..._a.xml
windows7-x64
3res_mods/1..._a.xml
windows10-2004-x64
1res_mods/1...me.txt
windows7-x64
1res_mods/1...me.txt
windows10-2004-x64
1res_mods/1...me.txt
windows7-x64
1res_mods/1...me.txt
windows10-2004-x64
1updates/icudtl.dat
windows7-x64
3updates/icudtl.dat
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Launcher.exe
Resource
win7-20240704-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Launcher.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
WebView2Loader.dll
Resource
win7-20240704-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
WebView2Loader.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
res_mods/1.23.0.0/scripts/client/gui/mods/mod_a.pyc
Resource
win7-20240705-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral6
Sample
res_mods/1.23.0.0/scripts/client/gui/mods/mod_a.pyc
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
res_mods/1.23.0.0/scripts/client/gui/mods/mod_a.xml
Resource
win7-20240705-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral8
Sample
res_mods/1.23.0.0/scripts/client/gui/mods/mod_a.xml
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
res_mods/1.24.0.0/readme.txt
Resource
win7-20240729-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
res_mods/1.24.0.0/readme.txt
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral11
Sample
res_mods/1.25.0.0/readme.txt
Resource
win7-20240705-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral12
Sample
res_mods/1.25.0.0/readme.txt
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral13
Sample
updates/icudtl.dat
Resource
win7-20240708-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral14
Sample
updates/icudtl.dat
Resource
win10v2004-20240802-en
windows10-2004-x64
6 signatures
150 seconds
General
- Target Deadly Beta (password 2121).rar
- Size 4.1MB
- Sample240826-mdck2azfnn
- SHA256 3e0faf2368d158b927fe8ddf8cc45c18465fd663545652dcf11812db0e039429
- MD5 fd43928e9192b49c74be9e3228831088
- SHA1 a4f310330abf5988eef1e69e1c7280df5bcee923
- SHA512 33d181f02812d7179c1e0bdd995bb0ee38bb3b008a908cac91dd18356b025c051f19bb72fb41803d06135cf6fe92b6f1b8af0c934a06601aed9d930ab990f963
- SSDEEP 98304:f3eCSqzMGzAv3DraKk9rszstKgoGz0jDtVJRb98FPD:fukyvi99rszst7l8tVJRc
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
Deadly Beta (password 2121).rar.rar 4.1MB
-
Launcher.exe.exe 442KB
-
WebView2Loader.dll.dll 154KB
-
res_mods/1.23.0.0/scripts/client/gui/mods/mod_a.pyc114KB
-
res_mods/1.23.0.0/scripts/client/gui/mods/mod_a.xml1KB
-
res_mods/1.24.0.0/readme.txt53B
-
res_mods/1.25.0.0/readme.txt53B
-
updates/icudtl.dat9.8MB
Launcher.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 bb6ece8edf1cab4336f7178b9e158edf9e8fc0b966ceefd157dc1f5d119f309f
- MD5 32294ae4ad2063b44a4d31cad44ad9ff
- SHA1 24313fdc2cff34a0065b4643f40fe44ba4a2fbc1
- SHA512 e2449493a32a622b40bd06c05f709e065e1b3002ed0ff6b48c594eb226f4e807b9c65cc3bad4934bd984920001d02b52f357dd3d440b762ee63b44be10ece290
- SSDEEP 6144:1JidrNEDu9O0EfUJfnzAfe4JM4LG17vIxwzrv+job91QLNupN/REjITFpARZN4tQ:1odaaqU981gvQn0bMuCEFaR79swnhEO
- MD5 SHA1 SHA512 SSDEEP
Password
2121
PE Signature issue
Digest
0d:0d:c3:4e:f8:75:22:e5:e0:73:21:c3:2f:7d:b2:3d:bc:9f:14:5d:ff:d8:eb:a1:c8:cb:72:4b:ba:2b:fe:89
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=NVIDIA Corporation,OU=2-J,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US
Chains
Nov 2, 2023
CN=NVIDIA Corporation,OU=2-J,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=NVIDIA Corporation,OU=2-J,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US
Serial Number
09:97:c5:6c:aa:59:05:53:94:d9:a9:cd:b8:be:eb:56
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 13, 2023 - Jan 16, 2026
Subject
CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net
Serial Number
38:63:de:f8
Issuer
CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Dec 24, 1999 - Jul 24, 2029
Subject
CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Serial Number
58:da:13:ff:00:00:00:00:51:ce:0d:f7
Issuer
CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 22, 2015 - Jun 22, 2029
Subject
CN=Entrust Timestamp Authority - TSA1,O=Entrust\, Inc.,L=Ottawa,ST=Ontario,C=CA
Serial Number
56:ab:95:75:28:9c:a5:9f:0e:17:d4:0b:ea:05:c3:1f
Issuer
CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 4, 2022 - Jan 1, 2029
Minor OS version
0
Major OS version
4
Entry point
448030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
430KB
Virtual Size
429KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
WebView2Loader.dll
- IMPHASH dc9fbafd0b96c0a640df70f088bfd2b0
- SHA256 7127f20daa0a0a74e120ab7423dd1b30c45908f8ee929f0c6cd2312b41c5bddf
- MD5 577f05cd683ed0577f6c970ea57129e0
- SHA1 aedf54a8976f0f8ff5588447c344595e3c468925
- SHA512 2d1aea243938a6a1289cf4efcd541f28ab370a85ef05ed27b7b6d81ce43cea671e06a0959994807923b1dfec3b382ee95bd6f9489b74bba59239601756082047
- SSDEEP 3072:R8AhKsY0iHlDhvlUQN2gWNZ6hVThFEtqQbucPqAJwU:usY0+lNv6E2JYEtzbuuV
- MD5 SHA1 SHA512 SSDEEP
Password
2121
PE Signature issue
Digest
76:71:56:d4:2d:3a:a3:05:f2:00:0c:3b:ec:6a:46:13:86:82:9b:4a:88:b8:48:99:43:10:41:be:7c:a3:3d:27
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 22, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:d0:e7:eb:7c:2e:f6:ce:23:e1:00:00:00:00:02:d0
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 12, 2022 - May 11, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
2
Major OS version
5
Entry point
17504
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\e\src\out\Release_x64\WebView2Loader.dll.pdb
kernel32
CloseHandle
CreateEventW
CreateFileW
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwindEx
RtlVirtualUnwind
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile
CompareBrowserVersions
CreateCoreWebView2Environment
CreateCoreWebView2EnvironmentWithOptions
GetAvailableCoreWebView2BrowserVersionString
Name
.text
Size
80KB
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
44KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.00cfg
Size
512B
Virtual Size
40B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gxfg
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.retplne
Size
512B
Virtual Size
92B
Characteristics
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.voltbl
Size
512B
Virtual Size
68B
Characteristics
Name
_RDATA
Size
512B
Virtual Size
252B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
res_mods/1.23.0.0/scripts/client/gui/mods/mod_a.pyc
- SHA256 fc19237a4e9ae65829dbde384ce0de2c78b22d9577384dded9d4cde569a12742
- MD5 a2f3ded45da8870e93e5d2186dab27e8
- SHA1 3f8e0cddecc3827b33ec02cd78d192c18f1ddf82
- SHA512 438621491061c7f14f59c48d0d2fdd637a17c058df13417e21d660d81632dbb826a6144032f6f9192ab9bb0afb46b8f6cf3982879dc9942261c2538dbd17187c
- SSDEEP 3072:k6BVH7SBjeSCbupKVfG2yQJ23J+Svsy9k/TukuPMh:zrbKeWmDyQ+13kOPMh
- MD5 SHA1 SHA512 SSDEEP
res_mods/1.23.0.0/scripts/client/gui/mods/mod_a.xml
- SHA256 8e7d953780ef22d302a154cc504a0e13ff031b9177f9b20708bfd8ee9ddad7ed
- MD5 ff03ec17ee5f13070dd50717620ffbc0
- SHA1 3243099738c6b40d2fdcaae8b16fef280b5eb835
- SHA512 535f4c9f6911ebb0843d0d8c58b2613cbf5122281b50b056918e693e0db9d9daf54fb17b744ec14f95929673868fdb516f8d1f5330bf930a486c9d502fb7c2fd
- MD5 SHA1 SHA512
res_mods/1.24.0.0/readme.txt
- SHA256 83ab826c036bb841639276fa0e2b2d7dd07165cd2f17a039d0b3d0118d5c3f19
- MD5 1a4884dcdb1a8908bee1099dc846f896
- SHA1 ca6b6f8b0a5ee2116163c7c5026d65adebab61a6
- SHA512 e8cde35ffd67c94386faedb5caa70a1d6c2e076138ffe5d0c418e60efd2cc8ca53d2ca3b9268897ab4afd2c0328aa7383ef99ee59145ddc72f20007095ef3fa2
- MD5 SHA1 SHA512
res_mods/1.25.0.0/readme.txt
- SHA256 83ab826c036bb841639276fa0e2b2d7dd07165cd2f17a039d0b3d0118d5c3f19
- MD5 1a4884dcdb1a8908bee1099dc846f896
- SHA1 ca6b6f8b0a5ee2116163c7c5026d65adebab61a6
- SHA512 e8cde35ffd67c94386faedb5caa70a1d6c2e076138ffe5d0c418e60efd2cc8ca53d2ca3b9268897ab4afd2c0328aa7383ef99ee59145ddc72f20007095ef3fa2
- MD5 SHA1 SHA512
updates/icudtl.dat
- SHA256 33da1cdda18eaea52011d40ae9a610cac9f6466156e9803891ee77294607aee4
- MD5 65c6337820fbe9bf2498a9395e3b20f2
- SHA1 5cc62646e6c73b4be276d08719bc5e257af972bb
- SHA512 4800f03577a46a98a4bd786dc37a380f4169540e243fdb7835e3146fba0d0e1d07a7e3ec8cd23566feb00d204d582d678698ae61db156339fe56229de0b267c9
- SSDEEP 196608:g7UPty2ACLA2cliXUxR0jHz93Whl96p6VJQ:V12CLAZliXUxR0jHz93Whl96p6VJQ
- MD5 SHA1 SHA512 SSDEEP