General

  • Target

    project64k-legacy.zip

  • Size

    32.7MB

  • MD5

    654b188f9014436374a0336cdbaba603

  • SHA1

    e5931ba52e76b64c164ac0e9990b37a842649394

  • SHA256

    1f8af397e46ca3a3af91872a4d6e49d21deff551be2b19f0fc085c646e4380e1

  • SHA512

    5495396380ea2e7846bbe1d1ef0ea19be9714d85977c637bbd290509d9acebc7804b390f20e284611dd0b2ff8d31d67a951e90679746b3ff103ae8648f8994d2

  • SSDEEP

    786432:S1g0zZXP27H78EsxW8Es9NEybLqfT8ttAdw32HihAB:SlZfiAEsFEs1bLq78ttA5C4

Malware Config

Signatures

  • ASPack v2.12-2.42 2 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 28 IoCs

    Checks for missing Authenticode signature.

Files

  • project64k-legacy.zip
    .zip

    Password: 1234

  • Cfg/cheats/bean.cht
  • Cfg/cheats/official.cht
  • Cfg/cheats/pizza.cht
  • Cfg/cheats/smasherx74.cht
  • Cfg/help.chm
    .chm
  • Cfg/locale.lng
  • Cfg/pj64.cht
  • Cfg/pj64.rdb
  • Cfg/pj64.rdn
  • Cfg/pj64.rdx
  • Cfg/tools.cfg
  • Net/cfg
  • Net/plugin.dll
    .dll windows:5 windows x86 arch:x86

    Password: 1234

    227d87aa952a55001ae6a71c3cd515c7


    Headers

    Imports

    Exports

    Sections

  • Plugin/GLideN64.custom.ini
  • Plugin/GLideN64.ini
  • Plugin/GLideN64_20.dll
    .dll windows:6 windows x86 arch:x86

    Password: 1234

    4c024b694875e08a2e4c26438f98cbb7


    Headers

    Imports

    Exports

    Sections

  • Plugin/GLideN64_20.ini
  • Plugin/Jabo_Direct3D8.dll
    .dll windows:4 windows x86 arch:x86

    Password: 1234


    Headers

    Exports

    Sections

  • Plugin/NRage.ini
  • Plugin/NRage_DInput8_161.dll
    .dll windows:4 windows x86 arch:x86

    Password: 1234


    Headers

    Exports

    Sections

  • Plugin/NRage_DInput8_V2_183.dll
    .dll windows:4 windows x86 arch:x86

    Password: 1234

    5f127a82a02ae96e5705c6629d236a24


    Headers

    Imports

    Exports

    Sections

  • Plugin/No_Sound.dll
    .dll windows:4 windows x86 arch:x86

    Password: 1234

    5ec0c0f82ce996b325edc56517d33144


    Headers

    Imports

    Exports

    Sections

  • Plugin/audio.dll
    .dll windows:4 windows x86 arch:x86

    Password: 1234


    Headers

    Exports

    Sections

  • Plugin/controller.dll
    .dll windows:5 windows x86 arch:x86

    Password: 1234

    c2ae47aecb6b9d3333320607f3082bf0


    Headers

    Imports

    Exports

    Sections

  • Plugin/defaults/AudioHLE.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugin/defaults/GLideN64_40.dll
    .dll windows:6 windows x86 arch:x86

    4ca83d62cfd2855608d56aa184ecc9c2


    Headers

    Imports

    Exports

    Sections

  • Plugin/defaults/NRage_Input_V2_23c.dll
    .dll windows:5 windows x86 arch:x86

    c2ae47aecb6b9d3333320607f3082bf0


    Headers

    Imports

    Exports

    Sections

  • Plugin/extra/AudioHLE_2nd_Tick.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugin/extra/AudioHLE_3rd_Tick.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugin/extra/AudioHLE_4th_Tick.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugin/extra/AudioHLE_5th_Tick.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugin/extra/AudioHLE_Original.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugin/gliden64_de.qm
  • Plugin/gliden64_es.qm
  • Plugin/gliden64_fr.qm
  • Plugin/gliden64_it.qm
  • Plugin/gliden64_ja.qm
  • Plugin/gliden64_pl.qm
  • Plugin/gliden64_pt_BR.qm
  • Plugin/graphics.dll
    .dll windows:6 windows x86 arch:x86

    4ca83d62cfd2855608d56aa184ecc9c2


    Headers

    Imports

    Exports

    Sections

  • Plugin/pj64raphnetraw.dll
    .dll windows:4 windows x86 arch:x86

    7cf7f5a1df770c217148fc18f1c58b41


    Headers

    Imports

    Exports

    Sections

  • Plugin/pj64raphnetraw_net.dll
    .dll windows:4 windows x86 arch:x86

    7cf7f5a1df770c217148fc18f1c58b41


    Headers

    Imports

    Exports

    Sections

  • Plugin/rsp.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Project64KSE.exe
    .exe windows:4 windows x86 arch:x86

    e7fea604c4e2e8ec191f19e1f11b5636


    Headers

    Imports

    Sections

  • Project64KillerOP.exe
    .exe windows:5 windows x64 arch:x64

    b66b962f1654841b6655c9e59651771a


    Headers

    Imports

    Sections

  • Tools/7za.exe
    .exe windows:4 windows x86 arch:x86

    15847eb10d7d06dcd5980e8a9b786fd6


    Headers

    Imports

    Sections

  • Tools/autopunch.win64.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Tools/kse-launcher.exe
    .exe windows:5 windows x86 arch:x86

    153aa0db686aff28745c696da6ec7574


    Headers

    Imports

    Sections

  • Tools/package-updater.exe
    .exe windows:5 windows x86 arch:x86

    c6226f6a092dcec547d41454113dfb56


    Headers

    Imports

    Sections

  • Tools/stream-tool.exe
    .exe windows:5 windows x86 arch:x86

    662b6c83e785a39e56177737f36bd6d2


    Headers

    Imports

    Sections

  • Tools/stream-tool.ini
  • Tools/updater.cfg
  • Tools/updater/cfg/base/locale.lng
  • Tools/updater/cfg/base/pj64.cht
  • Tools/updater/cfg/base/pj64.rdb
  • Tools/updater/cfg/base/pj64.rdn
  • Tools/updater/cfg/base/pj64.rdx
  • Tools/updater/cfg/base/tools.cfg
  • Tools/updater/cfg/cheats/bean.cht
  • Tools/updater/cfg/cheats/gent.cht
  • Tools/updater/cfg/cheats/managed.cht
  • Tools/updater/cfg/cheats/pizza.cht
  • Tools/updater/cfg/cheats/smasherx74.cht
  • Tools/updater/cfg/cheats/template.cht
  • Tools/updater/cfg/cheats/unmanaged.cht
  • Tools/updater/cfg/locale-utf8/german.lng
  • Tools/updater/cfg/locale-utf8/spanish.lng
  • Tools/updater/cfg/locale-utf8/welsh.lng
  • Tools/updater/cfg/locale/english.lng
  • Tools/updater/cfg/locale/german.lng
  • Tools/updater/cfg/locale/spanish.lng
  • Tools/updater/cfg/locale/template.lng
  • Tools/updater/cfg/locale/welsh.lng
  • Tools/updater/cfg/rdb/hacks.rdb
  • Tools/updater/cfg/rdb/hacks_invalid.rdb
  • Tools/updater/cfg/rdb/non_smash.rdb
  • Tools/updater/cfg/rdb/official.rdb
  • Tools/updater/cfg/rdb/rom_browser.rdb
  • Tools/updater/cfg/rdb/rom_status.rdb
  • Tools/updater/net/base/kaillera_cfg
  • Tools/updater/net/kaillera/advertise_emulator
  • Tools/updater/net/kaillera/connection_setting
  • Tools/updater/plugin/base/GLideN64.ini
  • Tools/updater/plugin/base/GLideN64_20.ini
  • Tools/updater/plugin/base/NRage.ini
  • Tools/updater/plugin/gliden64/20_framebuffer.ini
  • Tools/updater/plugin/gliden64/latest_framebuffer.ini
  • Tools/updater/plugin/nrage/latest_rawdata.ini
  • libhidapi-0.dll
    .dll windows:4 windows x86 arch:x86

    ff010115d9542d054d3b7902e8d9a23e


    Headers

    Imports

    Exports

    Sections