General

  • Target

    Release.zip

  • Size

    31.4MB

  • MD5

    92c19cc17bfc274a0fd172ae6d635943

  • SHA1

    5f44b49184025a7f01cd0f8d7a084cd8ee3514c0

  • SHA256

    1d67f20e997ac23b8ec625ef5cb7514067d6db6e69923284e8b8cbbb9af48bcb

  • SHA512

    6d9d85a1ac5aaa273d466e0bfd3db47f6dbc1a46b3d8bb91e2cf12d99fe482f24dc8ad235df6a38808ac1393361a401aeeda3a1686186ff5503ceb5c43ddc42f

  • SSDEEP

    786432:W/3NkNlNeyedaSfIEaVRLDy3tNkkFnOG7JoZQP:QNk7vedMJVpgtNkEOAP

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • Release.zip
    .zip
  • Release/Foreman.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Release/Foreman.exe.config
  • Release/Foreman.pdb
  • Release/Google.OrTools.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Sections

  • Release/Google.OrTools.xml
    .xml
  • Release/Google.Protobuf.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Release/Google.Protobuf.pdb
  • Release/Google.Protobuf.xml
    .xml
  • Release/Graphics/BurnerGeneratorIcon.png
    .png
  • Release/Graphics/ElectricityIcon.png
    .png
  • Release/Graphics/ErrorIcon.png
    .png
  • Release/Graphics/ExtraGroupIcon.png
    .png
  • Release/Graphics/HeatIcon.png
    .png
  • Release/Graphics/PlayerAssembler.png
    .png
  • Release/Graphics/RocketAssembler.png
    .png
  • Release/Graphics/UnknownIcon.png
    .png
  • Release/Licences.txt
  • Release/Mods/foremanexport_1.0.0/data-final-fixes.lua
  • Release/Mods/foremanexport_1.0.0/info.json
  • Release/Mods/foremanexport_1.0.0/instrument-after-data.lua
  • Release/Mods/foremanexport_1.0.0/instrument-control - ee.lua
  • Release/Mods/foremanexport_1.0.0/instrument-control - en.lua
  • Release/Mods/foremanexport_1.0.0/instrument-control - ne.lua
  • Release/Mods/foremanexport_1.0.0/instrument-control - nn.lua
  • Release/Mods/foremansavereader_1.0.0/info.json
  • Release/Mods/foremansavereader_1.0.0/instrument-control.lua
  • Release/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release/Presets/Factorio 1.1 Vanilla.dat
  • Release/Presets/Factorio 1.1 Vanilla.pjson
  • Release/System.Buffers.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Release/System.IO.Compression.ZipFile.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Release/System.Memory.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Release/System.Numerics.Vectors.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Release/baseCustom.json
  • Release/google-ortools-native.dll
    .dll windows:6 windows x64 arch:x64

    b99e38730e8c2e638a66d9882f5737e8


    Headers

    Imports

    Exports

    Sections