�����A���z���tma2{-<��$��Oz# pzd��˼�L�N�#[�cQ���;�l�UJ��;1rd^����D *��?���@�f�x�j^jV!��5��mlC�RҖ�+ ��W��Ֆ�:~_����ѝS~����Y����W��_*������Wj.P�)��{��/>V�db�ԣ ��ӜU���/���v���pj��"4��@6��|�ge�Nw ���������z���cz/�S��<'��Ac���8`��y|H�3��'\q*Hf�cӞ��ꦷhY{D)8����RFp�j���. �&���)6�Z�a�� إ�d���p9�(ͦ�Mr�x'0�Y�1h�x�l��h��)-H ^` 7�Td�FB��a������s|�j�$7V�%̤�4=EC=v'2��p�v+xj��ǂw���N��+�bu�[�2���M,�.}�(���a�a<��$�tҔ Sd�-ݥ�� ��(�;��<�}CN}҄;�\�0����u'�מo��� �wˤc����1�C4��uyb��O��sڬ��Gh����y�!�*�����¾d�t�{iB�ڰ#ox/�W�6����k����:Tn���(n!�Q��U5�s�w�َ���-�0�� ��Qq���oꁀ�wB�O���r��n�cSz$+W�B�}�ޅ�n��G!�3�c:��}�k&�p5�jtefj7�Y'��䔶ϵt�}�9�O�"R���=�2��;J���u�������)�C�ż���ή�W�I\���k�:�� <rL��������)eI�R.0 ;k��R_Sr��;֥pT�_6��K4Z���?/�~�}�O�]Dg�JA/�7Q(e���^ͺh�e;��Q�|�sd��xн��g)���>�d�Z�p��(wmG�J����0Ys"��)E@��ї���EO/M�* 庚{'YL��;,В�^4�u��L%��� ���w^���KqqP��}�\~z�5�����8�JZ7�uӌ�=�+_A�����W� ��B`�SvV����hg���VS�?�o�!�k:l��8���q�t�Q˵&�ƧG����2a�X��u�'�>na�SQ]�s���)�Q��c����B���w����+�Th�&��lF��P�m��<��F����Z��տ�\�� E_`e�X*:�&)�p��F�v���|p��p�'���p��l���'����C�!�^瓡#�m��2��[%Q(s$@m/ga�?ɁL�̥C�W����i@��������$�l�&��U���~G#��mvb���q�p�D � <�0Ti>�k��EY��� ~<���J7�2Cx���E�sk.Z�I36/{������d��0p[AK'3���V�����[��{L]v�Z�+�v�1�H��(�f.B�*�@�22^�Hb�.oH�A(9�#K�x������w�*X| 7jב�}��W86d�gMA���{Rtg ���B�S�p6�����E��t�9f0��o��Е�b2}Wsa1R���996�*��ATy#��/�O"��<�K�{| ���;V~_�;@Le�1y��O���1z�G �)�����%s@=c��� '�ۼ�H;��<�\���E$ � #��Yх�X$�� ��]{���^����v�l���Ī��\� (_��,u�#.Ё�����5*��pi�d���-8��%S8�^���$�Ƞ���'������8ec�G��3��R� |I5�@>m�H7�t�ۚ��;b1n�GA�_NJ;M��̠_�5eYi��l�'��-�4E�Ǜ�!���;X�ӰF�o�>�"�0r�j<����7b=EUyx]��.|B������]����JE��O�O3Cbk����?�+�oe^����W��ㇽ�uq�6���E��1��3dc%��6^���I�NZ�O ���}a��ܝh��]�\��[sC J� 01 [��]1������}L�xI���S ��Mw�±8��h��D�ãq���<iv�X�w��֔6q��JA�Oh����J?*�ݧH����~!�����2�կ��La0��K%�w�%T��U��12�X~H���b��>"r��z�����G�~r�*�aPSKzN�"����iN)O�hp�cAt���<�*i;��[ד�H�7),���S�Ű��Ѿ�h٪� H��܆D�t�P�}��Z���'j��Hi�mX�HA���w���] &8� ���M� }��&�iDžS=V�����MLT�.�`�V�`#]��y�B���ܦ����� ��K$6��]����L242�ð��J�˚4��r�L��k����ζ�oNe�r��S\D�]�O��)6$ٶ�yD�rMÂ���m�4X��]��ͱ�DlqY���` �z�0�@Ċ�@��|l���_-&�9��!��� ���d��R,�J��X-Ec�M.�:��}����W�rܞ�>�d�VH������7�c�S������ϵì9��,�٪�!�T%����g� yNh��P�V�B�"�����8�PX~r��:��W4�&��c���a`�M�d� �����gv�T�,�� 4���~��@�X����:�z?*%v}/!%���h2��7�|vAk�u^������P[x�~Nv�����˼у~CR/½8�W�W�]p/�%S�\���^d��b�cu����T~��)��djsL,��4��*�q������JD���p� �z�l"Xk@�+����G��$����K/��W� ���"�G��ړ���kw���#�3�WH��&�yٌS\�����Nk����{�t#��� ��/���Z�K���0u�.��O1{�Ѳ�|�O��J �'�o�M�M�ZRXE�N�I������-��3�b;q�)xi�ҟ=J��- �Os�P�͔�����d1���(��P�8����AJpp�J����Lg���wX6��+��a�A�-�'j�9��������]�q��te����c� �a]�����8�`v��:zV-�{�Ҳ��)�6�p*�2�x�ו�iX���`�3�OL!�]�h�o��Q����,,�9�oQH�J�=�=+M�1���'5�1�HZI��y7��*;���#rvC[d� u!�n�O�lj<�6��2k�I)�Z�;��`)�5R��ꏂ7A Mk.�c�*�$�L���=�V�&�8)d8ҲB��" iB<�+�E�֡v��-oUR.�����'�-߯E=�vYuF@�����3��3�����m�|��~�����WxL#&Ǧ:�����w��M��i��;�����p ` E2Q����q�u�~�w):��&�Ekm�LB��d��t�m��L_P:����*�C{�V��J�!#�X|����p������.2��@à���Ip&�(D���j���^'_��v&o*µ�1��,����}�#-���5�8�m0Ng `�����x�59/��ߨ_E��G=L9R�,�%WZ��Q��b=��ܱX$��f`�wo��� ���-0rrz��B8`��&�)9-N�����͛�*K9]}��$6l���̰q��p�GOz�{�� ;ۗ4bϴ���!֬)jo�2$�;��om��n$U��������,��}���3=Ў�)N�VY/��u��Q�L��P6o���� !��z�Lm,~\�\���夛��tR�YHۨ����""�u�)Ѓs~@��
Static task
static1
Behavioral task
behavioral1
Sample
DigimonRPG.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
DigimonRPG.exe
Resource
win10v2004-20240802-en
General
-
Target
DigimonRPG.exe
-
Size
4.1MB
-
MD5
4064c991303ad9fbe26b5c867afc890a
-
SHA1
a6784460c570c716d11eb130854ff465b50ce30e
-
SHA256
dcd4a07af21c75683c0b53c48c09543c5bf36e5fdc590e4ca0da27219098df51
-
SHA512
98477bd77133c0a2eb7a3236dbe142de0484ed121554f8df8ad01f5d747e5ef2336217f28bc896955c19d01af258f962205ffd1e4dd0d965e560fa076ebf1098
-
SSDEEP
98304:8Ceab5aAoRAwHRbnkWRreKgpHC7oYhRVUf/HFy:nvb5/otRdRCKgpHWjhRVUHF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DigimonRPG.exe
Files
-
DigimonRPG.exe.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 1.6MB - Virtual size: 5.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 196KB - Virtual size: 636KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 54KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 189KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE