General

  • Target

    GrowtopiaInstaller.exe

  • Size

    206.9MB

  • MD5

    af9fe33cf188e6edef775ec2cd3f9c7b

  • SHA1

    2e396c5a04e20c0fcf6caa22b012086695465780

  • SHA256

    fe27122eb868601fd7eac31a55329d319ab3043adbb8d3cda7d969ce40ec5123

  • SHA512

    a667f45e9aab2145fc341ad460ba34ab55b497bff99522ec0f99a333647fd14e7fcbd5900bbba48297567e4ac27d5d7dc684d2a54b6bf42f0b48def84bc1f61f

  • SSDEEP

    6291456:QTkXdHHDNpbrmFz05D7ip7rip5YXMyCJOB:QWnDHbCyB6rS7jJOB

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • GrowtopiaInstaller.exe
    .exe windows:4 windows x86 arch:x86

    b78ecf47c0a3e24a6f4af114e2d1f5de


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    610235b90207a63ccf481f0d4375d329


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Growtopia.exe
    .exe windows:6 windows x64 arch:x64

    39c77b6c87d971c62a9768f0f4e62707


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MicrosoftEdgeWebview2Setup.exe
    .exe windows:5 windows x86 arch:x86

    ccc6e30409f96054ca558f4765d32e38


    Code Sign

    Headers

    Imports

    Sections

  • anzu.dll
    .dll windows:6 windows x64 arch:x64

    1054328810b3c31a1c138b627a283240


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • fmod64.dll
    .dll windows:6 windows x64 arch:x64

    c624923d4eb6c568c3717eb47cd26917


    Headers

    Imports

    Exports

    Sections

  • fmodex64.dll
    .dll windows:5 windows x64 arch:x64

    542b9a8453fd7dd6ff53cc2bea2003af


    Headers

    Imports

    Exports

    Sections

  • vc_redist.x64.exe
    .exe windows:5 windows x86 arch:x86

    8e2588a9cf43886de3449dfff03137b6


    Code Sign

    Headers

    Imports

    Sections

  • vc_redist.x86.exe
    .exe windows:5 windows x86 arch:x86

    8e2588a9cf43886de3449dfff03137b6


    Code Sign

    Headers

    Imports

    Sections