General

  • Target

    Diablo4Companion_v3.9.0.4 (1).zip

  • Size

    133.0MB

  • MD5

    2a5f2a3b7f1e67e22823be3ce13edd43

  • SHA1

    ff7baff57f3f684ddfd05a90ea7e74366cd3349b

  • SHA256

    61b797906c693958d7b192bbdd838b07c7b81b99420808450c99cd5ac91c40e1

  • SHA512

    c01fa8fd305320e352aa093ebc460a1ec46019db4c3ae4b206d63c64b31aad7030912f3a44e196e5e8326a8a5f03a3db6601ca3bdeb7ab8cceced411ea1dbf34

  • SSDEEP

    3145728:oCPdhu8li2ooHpuVeQTzNLqRhxpTaf9ouOAE+XLc36V1ORid/HPCL:DVhu8lJRsVdBq9iomLco8W/vCL

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • Diablo4Companion_v3.9.0.4 (1).zip
    .zip

    Password: infected

  • Config/NLog-updater.config
    .xml
  • Config/NLog.config
    .xml
  • D3DCompiler_47_cor3.dll
    .dll windows:10 windows x64 arch:x64

    Password: infected

    8235041cfd6fffb926142c2c78013446


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • D4Companion.Updater.exe
    .exe windows:6 windows x64 arch:x64

    Password: infected

    6dbf27f4c70fe2c8ed3e0122ba75d641


    Headers

    Imports

    Sections

  • D4Companion.exe
    .exe windows:6 windows x64 arch:x64

    Password: infected

    bd570ded433309fe3759b368b0ec3e8c


    Headers

    Imports

    Exports

    Sections

  • Data/Affixes.Full.enUS.json
  • Data/Affixes.deDE.json
  • Data/Affixes.enUS.json
  • Data/Affixes.esES.json
  • Data/Affixes.esMX.json
  • Data/Affixes.frFR.json
  • Data/Affixes.itIT.json
  • Data/Affixes.jaJP.json
  • Data/Affixes.koKR.json
  • Data/Affixes.plPL.json
  • Data/Affixes.ptBR.json
  • Data/Affixes.ruRU.json
  • Data/Affixes.trTR.json
  • Data/Affixes.zhCN.json
  • Data/Affixes.zhTW.json
  • Data/Aspects.deDE.json
  • Data/Aspects.enUS.json
  • Data/Aspects.esES.json
  • Data/Aspects.esMX.json
  • Data/Aspects.frFR.json
  • Data/Aspects.itIT.json
  • Data/Aspects.jaJP.json
  • Data/Aspects.koKR.json
  • Data/Aspects.plPL.json
  • Data/Aspects.ptBR.json
  • Data/Aspects.ruRU.json
  • Data/Aspects.trTR.json
  • Data/Aspects.zhCN.json
  • Data/Aspects.zhTW.json
  • Data/ItemTypes.deDE.json
  • Data/ItemTypes.enUS.json
  • Data/ItemTypes.esES.json
  • Data/ItemTypes.esMX.json
  • Data/ItemTypes.frFR.json
  • Data/ItemTypes.itIT.json
  • Data/ItemTypes.jaJP.json
  • Data/ItemTypes.koKR.json
  • Data/ItemTypes.plPL.json
  • Data/ItemTypes.ptBR.json
  • Data/ItemTypes.ruRU.json
  • Data/ItemTypes.trTR.json
  • Data/ItemTypes.zhCN.json
  • Data/ItemTypes.zhTW.json
  • Data/Sigils.deDE.json
  • Data/Sigils.enUS.json
  • Data/Sigils.esES.json
  • Data/Sigils.esMX.json
  • Data/Sigils.frFR.json
  • Data/Sigils.itIT.json
  • Data/Sigils.jaJP.json
  • Data/Sigils.koKR.json
  • Data/Sigils.plPL.json
  • Data/Sigils.ptBR.json
  • Data/Sigils.ruRU.json
  • Data/Sigils.trTR.json
  • Data/Sigils.zhCN.json
  • Data/Sigils.zhTW.json
  • Data/Uniques.deDE.json
  • Data/Uniques.enUS.json
  • Data/Uniques.esES.json
  • Data/Uniques.esMX.json
  • Data/Uniques.frFR.json
  • Data/Uniques.itIT.json
  • Data/Uniques.jaJP.json
  • Data/Uniques.koKR.json
  • Data/Uniques.plPL.json
  • Data/Uniques.ptBR.json
  • Data/Uniques.ruRU.json
  • Data/Uniques.trTR.json
  • Data/Uniques.zhCN.json
  • Data/Uniques.zhTW.json
  • Images/Menu/icon_diablo.png
    .png

    Password: infected

  • PenImc_cor3.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    Password: infected

    4093c03428ffebcedcb974ab93290ca8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PresentationNative_cor3.dll
    .dll windows:6 windows x64 arch:x64

    Password: infected

    a09c9abadde79aec9926dc99ee900a1a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • concrt140.dll
    .dll windows:6 windows x64 arch:x64

    Password: infected

    b53a9a2e86c058cbcd81f6f4285ec2fc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cvextern.dll
    .dll windows:6 windows x64 arch:x64

    Password: infected

    d2cab5f9b745569ae1c45899dee4bab1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libHarfBuzzSharp.dll
    .dll windows:6 windows x64 arch:x64

    164178bd1f2a5f6973ff302292cd2ebc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libSkiaSharp.dll
    .dll windows:6 windows x64 arch:x64

    ffe661c0b06e35c1f2a6559c922e2926


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libusb-1.0.dll
    .dll windows:6 windows x64 arch:x64

    d8d3578fdcab87fa0a617b7e4d2f207c


    Headers

    Imports

    Exports

    Sections

  • msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    118dde577a38119350ab495f68a0326f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140_1.dll
    .dll windows:6 windows x64 arch:x64

    20717227ccb65afbaea7feeb74196ea2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140_2.dll
    .dll windows:6 windows x64 arch:x64

    888e6d55400991a8c64e77ff0ef6377b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140_atomic_wait.dll
    .dll windows:6 windows x64 arch:x64

    bced65fa8a1a54f039081b1993833c8f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140_codecvt_ids.dll
    .dll windows:6 windows x64 arch:x64

    8e3190ca5b1dfe3662e83fefed12f437


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • opencv_videoio_ffmpeg490_64.dll
    .dll windows:4 windows x64 arch:x64

    e4d00c955bbef72b9e6d22e33ed39ef2


    Headers

    Imports

    Exports

    Sections

  • selenium-manager/windows/selenium-manager.exe
    .exe windows:6 windows x86 arch:x86

    0d810a140d6340ff3fd9949ead21d363


    Headers

    Imports

    Sections

  • tessdata/chi_sim.traineddata
  • tessdata/chi_tra.traineddata
  • tessdata/deu.traineddata
  • tessdata/eng.traineddata
  • tessdata/fra.traineddata
  • tessdata/ita.traineddata
  • tessdata/jpn.traineddata
  • tessdata/kor.traineddata
  • tessdata/pol.traineddata
  • tessdata/por.traineddata
  • tessdata/rus.traineddata
  • tessdata/spa.traineddata
  • tessdata/tur.traineddata
  • vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    7f07fd94e5bb907093556781cc464017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    72707e942878aac770fcc118ce3ec1c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140_cor3.dll
    .dll windows:6 windows x64 arch:x64

    7f07fd94e5bb907093556781cc464017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • wpfgfx_cor3.dll
    .dll windows:6 windows x64 arch:x64

    ac3b0abeae626484285b3156c68cdebc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/leptonica-1.83.1.dll
    .dll windows:6 windows x64 arch:x64

    66404742b0d36500e64e6193938c413c


    Headers

    Imports

    Exports

    Sections

  • x64/tesseract53.dll
    .dll windows:6 windows x64 arch:x64

    de332cd6e6c9ed3dfe2eb62e4d74646f


    Headers

    Imports

    Exports

    Sections

  • x86/leptonica-1.83.1.dll
    .dll windows:6 windows x86 arch:x86

    ad1fa74838b88a8e4ca717ba5112d6ed


    Headers

    Imports

    Exports

    Sections

  • x86/tesseract53.dll
    .dll windows:6 windows x86 arch:x86

    01ac8ce34c4acabbb9896a7754b4ed3f


    Headers

    Imports

    Exports

    Sections