Overview

overview

7

Static

static

5

940fdd2810...7b.exe

windows7-x64

3

940fdd2810...7b.exe

windows10-2004-x64

3

SAMPUninstall.exe

windows7-x64

7

SAMPUninstall.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

bass.dll

windows7-x64

3

bass.dll

windows10-2004-x64

3

rcon.exe

windows7-x64

1

rcon.exe

windows10-2004-x64

3

samp.dll

windows7-x64

3

samp.dll

windows10-2004-x64

3

samp.exe

windows7-x64

5

samp.exe

windows10-2004-x64

5

samp_debug.exe

windows7-x64

3

samp_debug.exe

windows10-2004-x64

3

version.dll

windows7-x64

3

version.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    940fdd28105b00cffb2523787c93c21518bacd784c8c93606d58dc084549607b

  • Size

    14.5MB

  • MD5

    6f006e91dee3e1ff1b63032206a2794c

  • SHA1

    f40782821d123d542556ceeb1e7e1aee687804fa

  • SHA256

    940fdd28105b00cffb2523787c93c21518bacd784c8c93606d58dc084549607b

  • SHA512

    6f6536c2f8dbf58fe063f702d51c979c53fad43de9b5351dfc2083d2c6460449f8c7e662f8101c0f184d2113a9eddf81e5eeb8f946e25ebc47be193568a03e63

  • SSDEEP

    393216:A3CzmmflaNtY7G8MT4GLdFyBV9DVimtbA9yRbABehQtmuGuTwcU:ASaklUt3bvd2VvimtbeGbbhQt7U

Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 940fdd28105b00cffb2523787c93c21518bacd784c8c93606d58dc084549607b
    .exe windows:4 windows x86 arch:x86

    f4639a0b3116c2cfc71144b88a929cfd


    Headers

    Imports

    Sections

  • SAMP/SAMP.ide
  • SAMP/SAMP.img
  • SAMP/SAMP.ipl
  • SAMP/SAMPCOL.img
  • SAMP/blanktex.txd
  • SAMP/custom.img
  • SAMP/samaps.txd
  • SAMPUninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • bass.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • gtaweap3.ttf
  • mouse.png
    .png
  • rcon.exe
    .exe windows:4 windows x86 arch:x86

    a33688df8c13c8e8dbfd5cbea749b165


    Headers

    Imports

    Sections

  • samp-license.txt
  • samp.dll
    .dll windows:4 windows x86 arch:x86

    7a3750efd87d6c53d84d819664c4c527


    Headers

    Imports

    Sections

  • samp.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • samp.saa
  • samp_debug.exe
    .exe windows:4 windows x86 arch:x86

    1f46687026797bfcd822668bade80099


    Headers

    Imports

    Sections

  • sampaux3.ttf
  • sampgui.png
    .png
  • version.dll
    .dll windows:6 windows x86 arch:x86

    5dcbc94aee3164dd667656dc3bad7797


    Headers

    Imports

    Exports

    Sections