Static task
static1
Behavioral task
behavioral1
Sample
unturned__0.32_14.02.2024.exe
Resource
win10v2004-20240802-en
General
-
Target
unturned__0.32_14.02.2024.exe
-
Size
32.2MB
-
MD5
8d1e0a3385d5c901bef806ad645314bc
-
SHA1
a62ad5967b7ac78ad91b23a4f4dc1ae7926b3cd8
-
SHA256
df2978856d75881f1bf0d36828898fdd00568792b76bd4408000fd29db6e9733
-
SHA512
ac7d4b8498190ac7bb67e66f41c3c36cecf10c3ba8a29356ba7121ac2089e161fdc81d45c56047d7659aad3155679afc0c91caa44a7a3e750af64947ca3e10c9
-
SSDEEP
393216:oZWRA4KjYu5aToMrBwD/565/H9cPebW6msMv1XL1LGkH4BF+43jo0Iv38SPx:ogWq0qK67cPebO97BGkuXYzx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unturned__0.32_14.02.2024.exe
Files
-
unturned__0.32_14.02.2024.exe.exe windows:6 windows x64 arch:x64
b49baaf1338fde00bab3881dea207986
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
CloseHandle
Sections
.text Size: - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 12.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gxfg Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.retplne Size: - Virtual size: 140B
_RDATA Size: - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_0 Size: - Virtual size: 13.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_1 Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_2 Size: 32.0MB - Virtual size: 32.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ