Static task
static1
Behavioral task
behavioral1
Sample
Bypass.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Bypass.dll
Resource
win10v2004-20240910-en
Behavioral task
behavioral3
Sample
Xenoceal/sunec.jar
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Xenoceal/sunec.jar
Resource
win10v2004-20240910-en
General
-
Target
Violence.rar
-
Size
8.5MB
-
MD5
41ac9e970336c309e66b94b97e65fa58
-
SHA1
801eda850abe01673602aa01baa682edecca3298
-
SHA256
d07bc85e8cec2c4711b7a22b4870b4263e5bfe5e8f7a78f5b0053f74c2d6484e
-
SHA512
70e58f5d17c8b587e5cb289c7535e2d0a2964300b32a0ff7ad6026aef4791a6d49e93605dbf2070225626417e21a6487662ce93099610752f93870d7d25e4eac
-
SSDEEP
196608:D3KYjG92/aCBGeOmK0vuoAV0y4/15jio3t1/KCMBrZ4Zv4R7nFTGq:e8FOn0ySPdtBKtrZ4ZgRTFTGq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Bypass.dll
Files
-
Violence.rar.rar
-
Bypass.dll.dll windows:6 windows x64 arch:x64
b9681f00f1ed33f6057977c9165bc7c1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
kernel32
GetCurrentProcess
GetVersion
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
MessageBoxA
CharUpperBuffW
Sections
.text Size: - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.@]b Size: - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.|K\ Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Q|Z Size: 5.8MB - Virtual size: 5.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 196B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 233B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Xenoceal/bypass.jar.zip
-
CFqLfXn.class
-
CKOrWVR.class
-
CqpEFVG.class
-
DJnMeKM.class
-
DRkNkOK.class
-
EETXrnK.class
-
FVNliUg.class
-
LlgMxxN.class
-
McZdvNS.class
-
MdzJSOi.class
-
MlTHnhW.class
-
OJrFnrT.class
-
OWdUxPa.class
-
OgxmPRB.class
-
RAVPpIW.class
-
SPqgoau.class
-
UqixCbB.class
-
VxkcoZM.class
-
WIjmeAs.class
-
YPBbJTU.class
-
bnyImRm.class
-
cdfauDD.class
-
com/xenoceal/cristalix/PacketManager.class
-
dev/xdark/clientapi/entity/Entity.class
-
dev/xdark/clientapi/entity/EntityLivingBase.class
-
dev/xdark/clientapi/event/Cancellable.class
-
dev/xdark/clientapi/event/Event.class
-
dev/xdark/clientapi/event/network/PacketSend.class
-
dev/xdark/clientapi/game/PlayerController.class
-
dev/xdark/clientapi/gui/IngameUI.class
-
dev/xdark/clientapi/gui/Screen.class
-
dev/xdark/clientapi/gui/UIComponent.class
-
dev/xdark/clientapi/gui/ingame/ChatScreen.class
-
dev/xdark/clientapi/render/RenderItem.class
-
dev/xdark/clientapi/renderer/entity/Render.class
-
fckkOFO.class
-
nFcZvGU.class
-
ntYCzAm.class
-
rScyYOB.class
-
rXANzLg.class
-
sIjCrpT.class
-
uMwKRwY.class
-
vHFAuQP.class
-
vYsTjFL.class
-
Xenoceal/mods/violence.jar.zip
-
.OBFUSCATED WITH BOZAR
-
AA.class
-
AB.class
-
AC.class
-
AD.class
-
AE.class
-
AF.class
-
AG.class
-
AH.class
-
AI.class
-
AJ.class
-
AK.class
-
AL.class
-
AM.class
-
AN.class
-
AO.class
-
AP.class
-
AQ.class
-
AR.class
-
AS.class
-
AT.class
-
AU.class
-
AV.class
-
AW.class
-
AX.class
-
AY.class
-
AZ.class
-
Aa.class
-
Ab.class
-
Ac.class
-
Ad.class
-
Ae.class
-
Af.class
-
Ag.class
-
Ah.class
-
Ai.class
-
Aj.class
-
Ak.class
-
Al.class
-
Am.class
-
An.class
-
Ao.class
-
Ap.class
-
Aq.class
-
Ar.class
-
As.class
-
At.class
-
Au.class
-
Av.class
-
Aw.class
-
Ax.class
-
Ay.class
-
Az.class
-
BA.class
-
BB.class
-
BC.class
-
BD.class
-
BE.class
-
BF.class
-
BG.class
-
BH.class
-
BI.class
-
BJ.class
-
BK.class
-
BL.class
-
BM.class
-
BN.class
-
BO.class
-
BP.class
-
BQ.class
-
BR.class
-
BS.class
-
BT.class
-
BU.class
-
BV.class
-
BW.class
-
BX.class
-
BY.class
-
BZ.class
-
Ba.class
-
Bb.class
-
Bc.class
-
Bd.class
-
Be.class
-
Bf.class
-
Bg.class
-
Bh.class
-
Bi.class
-
Bj.class
-
Bk.class
-
Bl.class
-
Bm.class
-
Bn.class
-
Bo.class
-
Bp.class
-
Bq.class
-
Br.class
-
Bs.class
-
Bt.class
-
Bu.class
-
Bv.class
-
Bw.class
-
Bx.class
-
By.class
-
Bz.class
-
CA.class
-
CB.class
-
CC.class
-
CD.class
-
CE.class
-
CF.class
-
CG.class
-
CH.class
-
CI.class
-
CJ.class
-
CK.class
-
CL.class
-
CM.class
-
CN.class
-
CO.class
-
CP.class
-
CQ.class
-
CR.class
-
CS.class
-
CT.class
-
CU.class
-
CV.class
-
CW.class
-
CX.class
-
CY.class
-
CZ.class
-
Ca.class
-
Cb.class
-
Cc.class
-
Cd.class
-
Ce.class
-
Cf.class
-
Cg.class
-
Ch.class
-
Ci.class
-
Cj.class
-
Ck.class
-
Cl.class
-
Cm.class
-
Cn.class
-
Co.class
-
Cp.class
-
Cq.class
-
Cr.class
-
Cs.class
-
Ct.class
-
Cu.class
-
Cv.class
-
Cw.class
-
Cx.class
-
Cy.class
-
Cz.class
-
DA.class
-
DB.class
-
DC.class
-
DD.class
-
DE.class
-
DF.class
-
DG.class
-
DH.class
-
DI.class
-
DJ.class
-
DK.class
-
DL.class
-
DM.class
-
DN.class
-
DO.class
-
DP.class
-
DQ.class
-
DR.class
-
DS.class
-
DT.class
-
DU.class
-
DV.class
-
DW.class
-
DX.class
-
DY.class
-
DZ.class
-
Da.class
-
Db.class
-
Dc.class
-
Dd.class
-
De.class
-
Df.class
-
Dg.class
-
Dh.class
-
Di.class
-
Dj.class
-
Dk.class
-
Dl.class
-
Dm.class
-
Dn.class
-
Do.class
-
Dp.class
-
Dq.class
-
Dr.class
-
Ds.class
-
Dt.class
-
Du.class
-
Dv.class
-
Dw.class
-
Dx.class
-
Dy.class
-
Dz.class
-
EA.class
-
EB.class
-
EC.class
-
ED.class
-
EE.class
-
EF.class
-
EG.class
-
EH.class
-
EI.class
-
EJ.class
-
EK.class
-
EL.class
-
EM.class
-
EN.class
-
EO.class
-
EP.class
-
EQ.class
-
ER.class
-
ES.class
-
ET.class
-
EU.class
-
EV.class
-
EW.class
-
EX.class
-
EY.class
-
EZ.class
-
Ea.class
-
Eb.class
-
Ec.class
-
Ed.class
-
Ee.class
-
Ef.class
-
Eg.class
-
Eh.class
-
Ei.class
-
Ej.class
-
Ek.class
-
El.class
-
Em.class
-
En.class
-
Eo.class
-
Ep.class
-
Eq.class
-
Er.class
-
Es.class
-
Et.class
-
Eu.class
-
Ev.class
-
Ew.class
-
Ex.class
-
Ey.class
-
Ez.class
-
FA.class
-
FB.class
-
FC.class
-
FD.class
-
FE.class
-
FF.class
-
FG.class
-
FH.class
-
FI.class
-
FJ.class
-
FK.class
-
FL.class
-
FM.class
-
FN.class
-
FO.class
-
FP.class
-
FQ.class
-
FR.class
-
FS.class
-
FT.class
-
FU.class
-
FV.class
-
FW.class
-
FX.class
-
FY.class
-
FZ.class
-
Fa.class
-
Fb.class
-
Fc.class
-
Fd.class
-
Fe.class
-
Ff.class
-
Fg.class
-
Fh.class
-
Fi.class
-
Fj.class
-
Fk.class
-
Fl.class
-
Fm.class
-
Fn.class
-
Fo.class
-
Fp.class
-
Fq.class
-
Fr.class
-
Fs.class
-
Ft.class
-
Fu.class
-
Fv.class
-
Fw.class
-
Fx.class
-
Fy.class
-
Fz.class
-
GA.class
-
GB.class
-
GC.class
-
GD.class
-
GE.class
-
GF.class
-
GG.class
-
GH.class
-
GI.class
-
GJ.class
-
GK.class
-
GL.class
-
GM.class
-
GN.class
-
GO.class
-
GP.class
-
GQ.class
-
GR.class
-
GS.class
-
GT.class
-
GU.class
-
GV.class
-
GW.class
-
GX.class
-
GY.class
-
GZ.class
-
Ga.class
-
Gb.class
-
Gc.class
-
Gd.class
-
Ge.class
-
Gf.class
-
Gg.class
-
Gh.class
-
Gi.class
-
Gj.class
-
Gk.class
-
Gl.class
-
Gm.class
-
Gn.class
-
Go.class
-
Gp.class
-
Gq.class
-
Gr.class
-
Gs.class
-
Gt.class
-
Gu.class
-
Gv.class
-
Gw.class
-
Gx.class
-
Gy.class
-
Gz.class
-
HA.class
-
HB.class
-
HC.class
-
HD.class
-
HE.class
-
HF.class
-
HG.class
-
HH.class
-
HI.class
-
HJ.class
-
HK.class
-
HL.class
-
HM.class
-
HN.class
-
HO.class
-
HP.class
-
HQ.class
-
HR.class
-
HS.class
-
HT.class
-
HU.class
-
HV.class
-
HW.class
-
HX.class
-
HY.class
-
HZ.class
-
Ha.class
-
Hb.class
-
Hc.class
-
Hd.class
-
He.class
-
Hf.class
-
Hg.class
-
Hh.class
-
Hi.class
-
Hj.class
-
Hk.class
-
Hl.class
-
Hm.class
-
Hn.class
-
Ho.class
-
Hp.class
-
Hq.class
-
Hr.class
-
Hs.class
-
Ht.class
-
Hu.class
-
Hv.class
-
Hw.class
-
Hx.class
-
Hy.class
-
Hz.class
-
IA.class
-
IB.class
-
IC.class
-
ID.class
-
IE.class
-
IF.class
-
IG.class
-
IH.class
-
II.class
-
IJ.class
-
IK.class
-
IL.class
-
IM.class
-
IN.class
-
IO.class
-
IP.class
-
IQ.class
-
IR.class
-
IS.class
-
IT.class
-
IU.class
-
IV.class
-
IW.class
-
IX.class
-
fonts/Ico-Regular.ttf
-
fonts/comfort.ttf
-
fonts/gang.ttf
-
fonts/greycliff.ttf
-
fonts/icon.ttf
-
fonts/icons.ttf
-
fonts/minecraftrus.ttf
-
fonts/mntsb.ttf
-
fonts/mntsbM.ttf
-
fonts/rub.ttf
-
fonts/sfpro.ttf
-
images/gui/combat.png.png
-
images/gui/hud.png.png
-
images/gui/misc.png.png
-
images/gui/movement.png.png
-
images/gui/player.png.png
-
images/gui/visuals.png.png
-
images/meteor.png.png
-
images/notify/error.png.png
-
images/notify/info.png.png
-
images/notify/success.png.png
-
images/violence.png.png
-
images/window/icon32.png.png
-
images/window/icon64.png.png
-
mod.properties
-
shaders/Blur.glsl
-
shaders/KawaseDown.glsl
-
shaders/KawaseUp.glsl
-
shaders/bloom.frag
-
shaders/gaussian.frag
-
shaders/glow.frag
-
shaders/gradient.frag
-
shaders/gradientMask.frag
-
shaders/kawaseDown.frag
-
shaders/kawaseUp.frag
-
shaders/outline.frag
-
shaders/roundRectOutline.frag
-
shaders/roundRectTextured.frag
-
shaders/rounded_gradient.fsh
-
shaders/rounded_texture.fsh
-
shaders/shadow.fsh
-
shaders/vertex.glsl
-
shaders/vertex.vsh
-
shaders/white.frag
-
Xenoceal/sunec.jar.jar