Overview

overview

8

Static

static

3

GC.exe

windows10-1703-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    gc.rar

  • Size

    880KB

  • MD5

    833f5b125804959f9e85a672f8d1f418

  • SHA1

    f81ad2f4d26e74a4484db527bc45c214070fb524

  • SHA256

    20d5f42366bbfee5a80fb689b505c1a397b7d39d74b3c3e93b853fb60ed68497

  • SHA512

    cab2fcf1fcc2eb9c6be563e7a7bd12dfe25b1b247746fcce09c121365e83430dd1b76c70e175fa8e18847016eb49c9fe980727ab03d3e3d2b5ebc021ca76f854

  • SSDEEP

    24576:3HVVEeW5Jttj+vr4ThSc7GZcX39YSAvKw26TEe53:3wV5kjoSc7G6nRC1lH

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • gc.rar
    .rar
  • GC.exe
    .exe windows:6 windows x86 arch:x86

    36723152dcc89be0d0104bd374001ada


    Headers

    Imports

    Sections

  • GenshinCM.cpp
  • GenshinCM.h
  • ILPatternScanner.cpp
  • ILPatternScanner.h
  • Ruda-Bold.ttf
  • Ruda-ExtraBold.ttf
  • World.txt
  • akebi.ico
  • akebi.png
    .png
  • ascension_materials.json
  • assembly_checksum.json
  • cheat.cpp
  • cheat.h
  • debugger.cpp
  • debugger.h
  • events.cpp
  • events.h
  • icon_downloader.py
  • icon_resizer.py
  • injector.cpp
  • injector.h
  • injector.rc
  • injector.vcxproj
    .xml
  • injector.vcxproj.filters
  • load_map_data.py
  • main.cpp
  • map_api.txt
  • map_enkanomiya.json
  • map_golden_apple_archipelago.json
  • map_teyvat.json
  • map_undeground_mines.json
  • native.cpp
  • native.h
  • res.rc
  • resource.h
  • saved_offsets.json
  • saved_offsets_to_static.py
  • signatures.json
  • util.cpp
  • util.h