C:\Mods\KSRe\2\obj\Release\KSRe.pdb
Static task
static1
Behavioral task
behavioral1
Sample
BepInEx/plugins/KSRe/KSRe.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
BepInEx/plugins/KSRe/KSRe.dll
Resource
win10v2004-20240802-en
General
-
Target
KSRe_0_23_6.zip
-
Size
2.4MB
-
MD5
fd12e272709334db1a1536d54791a3da
-
SHA1
1e99e0ece9acd8e5a93de4e9672bc993559a4b10
-
SHA256
2b99d62712d58d723230671a824f7faf5a3457f97ba66d3fff7643f0d7560034
-
SHA512
ac77a7a0ed3ce00199e19362ffaa8ad3af89252e4c5e523350e6cb46525e0dd47c340638350651de7d713b70ce80274b0596c0aaf1458c061ce5c6e869af8471
-
SSDEEP
49152:XVn7HxTcKukdqrpsUrbcLV5AdeRvMoxHLNp+/A9velHUpGRpw6QkE:XzQOdqrpfrb8V5pRvMd/+YFQkE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/BepInEx/plugins/KSRe/KSRe.dll
Files
-
KSRe_0_23_6.zip.zip
Password: infected
-
BepInEx/plugins/KSRe/KSRe.dll.dll windows:4 windows x86 arch:x86
Password: infected
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
BepInEx/plugins/KSRe/assets/images/0.png.png
Password: infected
-
BepInEx/plugins/KSRe/assets/images/1.png.png
Password: infected
-
BepInEx/plugins/KSRe/assets/images/10.png.png
Password: infected
-
BepInEx/plugins/KSRe/assets/images/11.png.png
Password: infected
-
BepInEx/plugins/KSRe/assets/images/12.png.png
Password: infected
-
BepInEx/plugins/KSRe/assets/images/13.png.png
Password: infected
-
BepInEx/plugins/KSRe/assets/images/14.png.png
Password: infected
-
BepInEx/plugins/KSRe/assets/images/15.png.png
-
BepInEx/plugins/KSRe/assets/images/16.png.png
-
BepInEx/plugins/KSRe/assets/images/2.png.png
-
BepInEx/plugins/KSRe/assets/images/3.png.png
-
BepInEx/plugins/KSRe/assets/images/4.png.png
-
BepInEx/plugins/KSRe/assets/images/5.png.png
-
BepInEx/plugins/KSRe/assets/images/6.png.png
-
BepInEx/plugins/KSRe/assets/images/7.png.png
-
BepInEx/plugins/KSRe/assets/images/8.png.png
-
BepInEx/plugins/KSRe/assets/images/9.png.png
-
BepInEx/plugins/KSRe/assets/images/btnActive.png.png
-
BepInEx/plugins/KSRe/assets/images/btnHover.png.png
-
BepInEx/plugins/KSRe/assets/images/btnNorm.png.png
-
BepInEx/plugins/KSRe/assets/images/btnXActive.png.png
-
BepInEx/plugins/KSRe/assets/images/btnXHover.png.png
-
BepInEx/plugins/KSRe/assets/images/grade_A+.png.png
-
BepInEx/plugins/KSRe/assets/images/grade_A-.png.png
-
BepInEx/plugins/KSRe/assets/images/grade_A.png.png
-
BepInEx/plugins/KSRe/assets/images/grade_B+.png.png
-
BepInEx/plugins/KSRe/assets/images/grade_B-.png.png
-
BepInEx/plugins/KSRe/assets/images/grade_B.png.png
-
BepInEx/plugins/KSRe/assets/images/grade_C+.png.png
-
BepInEx/plugins/KSRe/assets/images/grade_C-.png.png
-
BepInEx/plugins/KSRe/assets/images/grade_C.png.png
-
BepInEx/plugins/KSRe/assets/images/grade_D+.png.png
-
BepInEx/plugins/KSRe/assets/images/grade_D-.png.png
-
BepInEx/plugins/KSRe/assets/images/grade_D.png.png
-
BepInEx/plugins/KSRe/assets/images/grade_F.png.png
-
BepInEx/plugins/KSRe/assets/images/icon.png.png
-
BepInEx/plugins/KSRe/assets/images/icon2.png.png
-
BepInEx/plugins/KSRe/assets/images/wf_aero.png.png
-
BepInEx/plugins/KSRe/assets/images/wf_communication.png.png
-
BepInEx/plugins/KSRe/assets/images/wf_coupling.png.png
-
BepInEx/plugins/KSRe/assets/images/wf_electrical.png.png
-
BepInEx/plugins/KSRe/assets/images/wf_engine.png.png
-
BepInEx/plugins/KSRe/assets/images/wf_eva.png.png
-
BepInEx/plugins/KSRe/assets/images/wf_fueltank.png.png
-
BepInEx/plugins/KSRe/assets/images/wf_ground.png.png
-
BepInEx/plugins/KSRe/assets/images/wf_iva.png.png
-
BepInEx/plugins/KSRe/assets/images/wf_payload.png.png
-
BepInEx/plugins/KSRe/assets/images/wf_pods.png.png
-
BepInEx/plugins/KSRe/assets/images/wf_science.png.png
-
BepInEx/plugins/KSRe/assets/images/wf_structural.png.png
-
BepInEx/plugins/KSRe/assets/images/wf_thermal.png.png
-
BepInEx/plugins/KSRe/assets/images/wf_utility.png.png
-
BepInEx/plugins/KSRe/assets/loading_screens/_cover.jpg.jpg
-
BepInEx/plugins/KSRe/assets/loading_screens/bp_mp_lf.jpg.jpg
-
BepInEx/plugins/KSRe/assets/loading_screens/bp_ox_cf.jpg.jpg
-
BepInEx/plugins/KSRe/assets/loading_screens/bp_ox_lf.jpg.jpg
-
BepInEx/plugins/KSRe/assets/loading_screens/fl_llrv.jpg.jpg
-
BepInEx/plugins/KSRe/assets/loading_screens/fl_test_stand.jpg.jpg
-
BepInEx/plugins/KSRe/localizations/loc.csv
-
BepInEx/plugins/KSRe/patches/experiments.patch
-
BepInEx/plugins/KSRe/patches/missions.patch
-
BepInEx/plugins/KSRe/patches/mods.patch
-
BepInEx/plugins/KSRe/patches/parts.patch
-
BepInEx/plugins/KSRe/patches/resources.patch
-
BepInEx/plugins/KSRe/patches/science.patch
-
BepInEx/plugins/KSRe/swinfo.json