culturalshift_1_3_1_bfcbd[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

culturalshift_1_3_1_bfcbd.zip
Size

722KB
MD5

3441afb18ea810901b2334890dc36b9b
SHA1

187387ee8de4931616f1a0eaf28784f752e5d63e
SHA256

bb089cc5bc2393b0cdf58cbe9d5686d1008cedee3ac93997e03bfc68a85f031b
SHA512

7195a0adfabc01ad04acfa507f43e82d16e1f5d6b029cc9f689c466ed1d4936fc1fba70bd88c3566992dd2c3b2a72280f05254dc31e1f7541c2c801ea0f45df9
SSDEEP

12288:QZjiY0yzPvIq5AonsgPB6Ud/47ocNQ90uOS69S+wZM114Vuyw7P16ZCU9I7L:2j5RPj5Aonsgp14sc8zL0S+wa114DwbV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Assemblies/Assembly-CSharp.dll

Files

culturalshift_1_3_1_bfcbd.zip
.zip
Assemblies/Assembly-CSharp.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Code/Main.cs
Code/Patches.cs
LICENSE
Locales/ch.json
Locales/cz.json
Locales/en.json
Locales/he.json
README.md
default_config.json
icon.png
.png
mod.json