General

  • Target

    GrowtopiaInstaller.exe

  • Size

    230.6MB

  • MD5

    3a3fc09ccd9742f23dfcd213ea0cc4fa

  • SHA1

    e20b17bd6a625259b4f9b2c9f8439d761bc126e3

  • SHA256

    9ccb0bc19f24b694a4129cc387279457e57671f8109937550258ffc40173423b

  • SHA512

    cfc533d6c845692a94868d4df276b47276504cce838bfffea3ff41a33c6d384d70583bb9413fb6048ecea0cf1311ce38c3311fda2e712c2aef3625bb45016971

  • SSDEEP

    6291456:2TkXdHjFqVWTv3QXZ0ZDhip7rOCXqCS6N:2WmWtb6rOCaC/

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • GrowtopiaInstaller.exe
    .exe windows:4 windows x86 arch:x86

    b78ecf47c0a3e24a6f4af114e2d1f5de


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    610235b90207a63ccf481f0d4375d329


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Growtopia.exe
    .exe windows:6 windows x64 arch:x64

    857adc0c7299ad317b37f8e938f1816a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MicrosoftEdgeWebview2Setup.exe
    .exe windows:5 windows x86 arch:x86

    ccc6e30409f96054ca558f4765d32e38


    Code Sign

    Headers

    Imports

    Sections

  • SecureEngineSDK64.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Exports

    Sections

  • anzu.dll
    .dll windows:6 windows x64 arch:x64

    1054328810b3c31a1c138b627a283240


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sdkencryptedappticket64.dll
    .dll windows:6 windows x64 arch:x64

    e3ee85ca7aeaf6754b6a9430e1da90ad


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • steam_api64.dll
    .dll windows:6 windows x64 arch:x64

    c69c22b5a3698527f0d3c9618c3affbd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ubiservices.dll
    .dll windows:6 windows x64 arch:x64

    e89ec276be430c2ab3bfecf0d0f1eedf


    Headers

    Imports

    Exports

    Sections

  • vc_redist.x64.exe
    .exe windows:5 windows x86 arch:x86

    8e2588a9cf43886de3449dfff03137b6


    Code Sign

    Headers

    Imports

    Sections

  • vc_redist.x86.exe
    .exe windows:5 windows x86 arch:x86

    8e2588a9cf43886de3449dfff03137b6


    Code Sign

    Headers

    Imports

    Sections

  • zlibwapi.dll
    .dll windows:4 windows x64 arch:x64

    2ad53bea1f66fb1ef61d05c891663d87


    Headers

    Imports

    Exports

    Sections