Static

static

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1153320512.zip

  • Size

    264KB

  • MD5

    f6c026a9b1b22c5fc7883df474cc3a4f

  • SHA1

    75ea34af894decb09b27c521289dc8a2f5715b4a

  • SHA256

    e4b58eee6224b08262678c1904e6522128e854987382fc0c334c9356dfa5399f

  • SHA512

    089bb8858de51bd2e39a44c6aae9cf83253dd881b5b496bf7c4dd40e2662635d652f20ed9303c3f9c99e7f1306f0b0fa7e8540d9d9e7101cf360f7f8b0668504

  • SSDEEP

    6144:AF77SquuKnY/b2b79fX2F88k9ZVLEyrwmkaON7iSRl2jr/B/:GkKb2bRfXx8AjjkPip7h

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 1153320512.zip
    .zip
  • install.exe
    .exe windows:4 windows x86 arch:x86

    9632e80596371cfa7f563f680f3c4498


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    3764e6c387ce3c76b39936a24d523dce


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $_3_/$_3_/UninstallModLoader.exe
    .exe windows:4 windows x86 arch:x86

    9632e80596371cfa7f563f680f3c4498


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    3764e6c387ce3c76b39936a24d523dce


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $_3_/ADDONS/CARS_REPLACE/SL65/ATTRIBUTES.MWPS
  • $_3_/ADDONS/CARS_REPLACE/SL65/CAR.INI
  • $_3_/ADDONS/CARS_REPLACE/SL65/FE.MWPS
  • $_3_/ADDONS/CARS_REPLACE/SL65/GEOMETRY.BIN
  • $_3_/ADDONS/CARS_REPLACE/SL65/SECONDARYLOGO.BIN
  • $_3_/ADDONS/CARS_REPLACE/SL65/TEXTURES.BIN
  • $_3_/ADDONS/FRONTEND/MANUFACTURERS/32-FERRARI.BIN
  • $_3_/d3d9.dll
    .dll windows:4 windows x86 arch:x86

    e1c4ea980bfd375519d2d88438dbd615


    Headers

    Imports

    Exports

    Sections

  • $_3_/modloader-readme.txt
  • $_3_/modloader.ini