General

  • Target

    eg1dns.rar

  • Size

    71.9MB

  • MD5

    efd9fb8e5d856a34b2a6bd1e665f81a9

  • SHA1

    e9b233187e5ddec6ca0fe348def69f251f68b3d9

  • SHA256

    21854fb685e8213837c4f7d2b44c768285e1b3bab3ff22f1de23d38790788c16

  • SHA512

    ca518b387f1daebbce78fe6011ade2ae3c1c84ec8a41a852f5c0cc619525699f14b6a2f61d03aeeec8a790ff2df5c96b01ee072e35a75048cbab266d1977a3b0

  • SSDEEP

    1572864:Do3W6L8h/YTeqbJ2GGmpOmCBuALChGXPQzEvORgKOzqF4bg6cEKM91Qrfg:wWlYyLmpOmpbYC+O/MhbgJM+Tg

Score
9/10

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • eg1dns.rar
    .rar
  • bin/NMI.exe
    .exe windows:6 windows x64 arch:x64

    9fda466565b65158f9bce14fb0542101


    Headers

    Imports

    Exports

    Sections

  • bin/assets/characters/data/Tails-player.json
  • bin/assets/characters/data/Tails.json
  • bin/assets/characters/data/inno.json
  • bin/assets/characters/data/innoFp.json
  • bin/assets/characters/data/innohead.json
  • bin/assets/characters/icons/beta-bf.png
    .png
  • bin/assets/characters/icons/bf.png
    .png
  • bin/assets/characters/icons/face.png
    .png
  • bin/assets/characters/icons/gf.png
    .png
  • bin/assets/characters/icons/how work.txt
  • bin/assets/characters/icons/nmi.png
    .png
  • bin/assets/characters/icons/tails.png
    .png
  • bin/assets/characters/images/RECOVER_RECOVER_negro2.png
    .png
  • bin/assets/characters/images/RECOVER_RECOVER_negro2.xml
  • bin/assets/characters/images/Tails.png
    .png
  • bin/assets/characters/images/Tails.xml
  • bin/assets/characters/images/no_more_innocence_fp.png
    .png
  • bin/assets/characters/images/no_more_innocence_fp.xml
  • bin/assets/characters/images/spirit.txt
  • bin/assets/data/characterList.txt
  • bin/assets/data/controls.txt
  • bin/assets/data/findmeBitch.txt
  • bin/assets/data/freeplaySonglist.txt
  • bin/assets/data/introText.txt
  • bin/assets/data/judgementOrder.txt
  • bin/assets/data/judgements.json
  • bin/assets/data/main-view.xml
  • bin/assets/data/noteModifiers.txt
  • bin/assets/data/specialThanks.txt
  • bin/assets/fonts/vcr.ttf
  • bin/assets/fonts/vcrOLD.ttf
  • bin/assets/images/DUCKS.mp4
  • bin/assets/images/NmiDialogue.png
    .png
  • bin/assets/images/NmiDialogue.xml
  • bin/assets/images/alphabet.png
    .png
  • bin/assets/images/alphabet.xml
  • bin/assets/images/andromedaLogo.png
    .png
  • bin/assets/images/andromedaLogoBumpin.png
    .png
  • bin/assets/images/andromedaLogoBumpin.xml
  • bin/assets/images/arrows.png
    .png
  • bin/assets/images/arrows.xml
  • bin/assets/images/barBackground.png
    .png
  • bin/assets/images/bg1.png
    .png
  • bin/assets/images/bg2.png
    .png
  • bin/assets/images/cardbordtoast.jpg
    .jpg
  • bin/assets/images/checkbox.png
    .png
  • bin/assets/images/checkbox.xml
  • bin/assets/images/creepyshit/creepy1.png
    .png
  • bin/assets/images/creepyshit/creepy2.png
    .png
  • bin/assets/images/creepyshit/creepy3.png
    .png
  • bin/assets/images/creepyshit/creepy4.png
    .png
  • bin/assets/images/creepyshit/creepy5.png
    .png
  • bin/assets/images/creepyshit/creepy6.png
    .png
  • bin/assets/images/creepyshit/creepy7.png
    .png
  • bin/assets/images/creepyshit/creepy8.png
    .png
  • bin/assets/images/iconGrid.png
    .png
  • bin/assets/images/intro/introsonic.png
    .png
  • bin/assets/images/intro/introsonic.xml
  • bin/assets/images/judgements.png
    .png
  • bin/assets/images/laugh.ani
  • bin/assets/images/loadingBG.png
    .png
  • bin/assets/images/logo.png
    .png
  • bin/assets/images/logoBumpin.png
    .png
  • bin/assets/images/logoBumpin.xml
  • bin/assets/images/menuBG.png
    .png
  • bin/assets/images/menushit/Selection.png
    .png
  • bin/assets/images/menushit/Selection.xml
    .xml
  • bin/assets/images/newgrounds_logo.png
    .png
  • bin/assets/images/nmi3.ani
  • bin/assets/images/num0.png
    .png
  • bin/assets/images/num1.png
    .png
  • bin/assets/images/num2.png
    .png
  • bin/assets/images/num3.png
    .png
  • bin/assets/images/num4.png
    .png
  • bin/assets/images/num5.png
    .png
  • bin/assets/images/num6.png
    .png
  • bin/assets/images/num7.png
    .png
  • bin/assets/images/num8.png
    .png
  • bin/assets/images/num9.png
    .png
  • bin/assets/images/numNegative.png
    .png
  • bin/assets/images/numbers.png
    .png
  • bin/assets/images/numpoint.png
    .png
  • bin/assets/images/pauseShit/menu.png
    .png
  • bin/assets/images/pauseShit/paused.png
    .png
  • bin/assets/images/personal space invaded.jpg
    .jpg
  • bin/assets/images/pixelUI/arrowEnds.png
    .png
  • bin/assets/images/pixelUI/arrows-pixels.png
    .png
  • bin/assets/images/pixelUI/bad-pixel.png
    .png
  • bin/assets/images/pixelUI/combo-pixel.png
    .png
  • bin/assets/images/pixelUI/date-pixel.png
    .png
  • bin/assets/images/pixelUI/dialogueBox-evil.png
    .png
  • bin/assets/images/pixelUI/dialogueBox-evil.xml
  • bin/assets/images/pixelUI/dialogueBox-pixel.png
    .png
  • bin/assets/images/pixelUI/dialogueBox-pixel.xml
  • bin/assets/images/pixelUI/dialogueBox-senpaiMad.png
    .png
  • bin/assets/images/pixelUI/dialogueBox-senpaiMad.xml
  • bin/assets/images/pixelUI/epic-pixel.png
    .png
  • bin/assets/images/pixelUI/good-pixel.png
    .png
  • bin/assets/images/pixelUI/hand_textbox.png
    .png
  • bin/assets/images/pixelUI/judgements.png
    .png
  • bin/assets/images/pixelUI/num0-pixel.png
    .png
  • bin/assets/images/pixelUI/num1-pixel.png
    .png
  • bin/assets/images/pixelUI/num2-pixel.png
    .png
  • bin/assets/images/pixelUI/num3-pixel.png
    .png
  • bin/assets/images/pixelUI/num4-pixel.png
    .png
  • bin/assets/images/pixelUI/num5-pixel.png
    .png
  • bin/assets/images/pixelUI/num6-pixel.png
    .png
  • bin/assets/images/pixelUI/num7-pixel.png
    .png
  • bin/assets/images/pixelUI/num8-pixel.png
    .png
  • bin/assets/images/pixelUI/num9-pixel.png
    .png
  • bin/assets/images/pixelUI/numNegative-pixel.png
    .png
  • bin/assets/images/pixelUI/numbers.png
    .png
  • bin/assets/images/pixelUI/numpoint-pixel.png
    .png
  • bin/assets/images/pixelUI/ready-pixel.png
    .png
  • bin/assets/images/pixelUI/set-pixel.png
    .png
  • bin/assets/images/pixelUI/shit-pixel.png
    .png
  • bin/assets/images/pixelUI/sick-pixel.png
    .png
  • bin/assets/images/sc/DUCKS.mp4
  • bin/assets/images/shrek.png
    .png
  • bin/assets/images/skins/default/base/AndroSplash.png
    .png
  • bin/assets/images/skins/default/base/AndroSplash.xml
  • bin/assets/images/skins/default/base/NOTE_assets.png
    .png
  • bin/assets/images/skins/default/base/NOTE_assets.xml
  • bin/assets/images/skins/default/base/behaviorData.json
  • bin/assets/images/skins/default/base/mine/MINES.png
    .png
  • bin/assets/images/skins/default/base/mine/MINES.xml
  • bin/assets/images/skins/default/base/mine/behaviorData.json
  • bin/assets/images/skins/default/base/old/NOTE_assets.png
    .png
  • bin/assets/images/skins/default/base/old/NOTE_assets.xml
  • bin/assets/images/skins/default/base/old/behaviorData.json
  • bin/assets/images/skins/default/metadata.json
  • bin/assets/images/skins/default/pixel/AndroSplash.png
    .png
  • bin/assets/images/skins/default/pixel/AndroSplash.xml
  • bin/assets/images/skins/default/pixel/arrows.png
    .png
  • bin/assets/images/skins/default/pixel/behaviorData.json
  • bin/assets/images/skins/default/pixel/rolls.png
    .png
  • bin/assets/images/skins/default/pixel/sustains.png
    .png
  • bin/assets/images/skins/etternaquants/base/NOTE_assets.png
    .png
  • bin/assets/images/skins/etternaquants/base/NOTE_assets.xml
  • bin/assets/images/skins/etternaquants/base/behaviorData.json
  • bin/assets/images/skins/etternaquants/base/receptors.png
    .png
  • bin/assets/images/skins/etternaquants/base/receptors.xml
  • bin/assets/images/skins/etternaquants/metadata.json
  • bin/assets/images/skins/etternaquants/pixel/arrows.png
    .png
  • bin/assets/images/skins/etternaquants/pixel/behaviorData.json
  • bin/assets/images/skins/etternaquants/pixel/receptors.png
    .png
  • bin/assets/images/skins/etternaquants/pixel/rolls.png
    .png
  • bin/assets/images/skins/etternaquants/pixel/sustains.png
    .png
  • bin/assets/images/skins/fallback/base/AndroSplash.png
    .png
  • bin/assets/images/skins/fallback/base/AndroSplash.xml
  • bin/assets/images/skins/fallback/base/NOTE_assets.png
    .png
  • bin/assets/images/skins/fallback/base/NOTE_assets.xml
  • bin/assets/images/skins/fallback/base/behaviorData.json
  • bin/assets/images/skins/fallback/base/mine/MINES.png
    .png
  • bin/assets/images/skins/fallback/base/mine/MINES.xml
  • bin/assets/images/skins/fallback/base/mine/behaviorData.json
  • bin/assets/images/skins/fallback/metadata.json
  • bin/assets/images/skins/fallback/pixel/AndroSplash.png
    .png
  • bin/assets/images/skins/fallback/pixel/AndroSplash.xml
  • bin/assets/images/skins/fallback/pixel/arrows.png
    .png
  • bin/assets/images/skins/fallback/pixel/behaviorData.json
  • bin/assets/images/skins/fallback/pixel/sustains.png
    .png
  • bin/assets/images/skins/noteskinOrder.txt
  • bin/assets/images/skins/quants/base/NOTE_assets.png
    .png
  • bin/assets/images/skins/quants/base/NOTE_assets.xml
  • bin/assets/images/skins/quants/base/behaviorData.json
  • bin/assets/images/skins/quants/base/receptors.png
    .png
  • bin/assets/images/skins/quants/base/receptors.xml
  • bin/assets/images/skins/quants/metadata.json
  • bin/assets/images/skins/quants/pixel/arrows.png
    .png
  • bin/assets/images/skins/quants/pixel/behaviorData.json
  • bin/assets/images/skins/quants/pixel/receptors.png
    .png
  • bin/assets/images/skins/quants/pixel/rolls.png
    .png
  • bin/assets/images/skins/quants/pixel/sustains.png
    .png
  • bin/assets/images/storymenu/week0.png
    .png
  • bin/assets/images/storymenu/week1.png
    .png
  • bin/assets/images/storymenu/week2.png
    .png
  • bin/assets/images/storymenu/week3.png
    .png
  • bin/assets/images/storymenu/week4.png
    .png
  • bin/assets/images/storymenu/week5.png
    .png
  • bin/assets/images/storymenu/week6.png
    .png
  • bin/assets/music/freakyMenu.ogg
  • bin/assets/music/menu.ogg
  • bin/assets/music/menu_sonic_negro.ogg
  • bin/assets/music/old/title.ogg
  • bin/assets/shared/images/NOTE_assets.png
    .png
  • bin/assets/shared/images/NOTE_assets.xml
  • bin/assets/shared/images/NmiDialogue.png
    .png
  • bin/assets/shared/images/backspace.png
    .png
  • bin/assets/shared/images/backspace.xml
  • bin/assets/shared/images/bad.png
    .png
  • bin/assets/shared/images/bayer.png
    .png
  • bin/assets/shared/images/cheat.png
    .png
  • bin/assets/shared/images/combo.png
    .png
  • bin/assets/shared/images/dialogue/bfPortrait.png
    .png
  • bin/assets/shared/images/dialogue/bfPortrait.xml
  • bin/assets/shared/images/dialogue/dialogueBox.png
    .png
  • bin/assets/shared/images/dialogue/dialogueBox.xml
  • bin/assets/shared/images/duck.gif
    .gif
  • bin/assets/shared/images/epic.png
    .png
  • bin/assets/shared/images/go.png
    .png
  • bin/assets/shared/images/good.png
    .png
  • bin/assets/shared/images/grafix.png
    .png
  • bin/assets/shared/images/healthBar.png
    .png
  • bin/assets/shared/images/laughnmi.gif
    .gif
  • bin/assets/shared/images/lol.png
    .png
  • bin/assets/shared/images/lose.png
    .png
  • bin/assets/shared/images/lose.xml
  • bin/assets/shared/images/noise.png
    .png
  • bin/assets/shared/images/noise2.png
    .png
  • bin/assets/shared/images/pauseAlt/bfLol.png
    .png
  • bin/assets/shared/images/pauseAlt/bfLol.xml
  • bin/assets/shared/images/pauseAlt/pauseBG.png
    .png
  • bin/assets/shared/images/pauseAlt/pauseUI.png
    .png
  • bin/assets/shared/images/pauseAlt/pauseUI.xml
  • bin/assets/shared/images/ready.png
    .png
  • bin/assets/shared/images/restart.png
    .png
  • bin/assets/shared/images/screencapTierImage.png
    .png
  • bin/assets/shared/images/set.png
    .png
  • bin/assets/shared/images/shit.png
    .png
  • bin/assets/shared/images/sick.png
    .png
  • bin/assets/shared/images/speech_bubble_talking.png
    .png
  • bin/assets/shared/images/speech_bubble_talking.xml
  • bin/assets/shared/images/stage_light.png
    .png
  • bin/assets/shared/images/stageback.png
    .png
  • bin/assets/shared/images/stagecurtains.png
    .png
  • bin/assets/shared/images/stagefront.png
    .png
  • bin/assets/shared/images/week54prototype.png
    .png
  • bin/assets/shared/images/zzzzzzzz.png
    .png
  • bin/assets/shared/music/Estatica.ogg
  • bin/assets/shared/music/breakfast.ogg
  • bin/assets/shared/music/gameOver.ogg
  • bin/assets/shared/music/gameOverEnd.ogg
  • bin/assets/shared/sounds/ANGRY.ogg
  • bin/assets/shared/sounds/ANGRY_TEXT_BOX.ogg
  • bin/assets/shared/sounds/GF_1.ogg
  • bin/assets/shared/sounds/GF_2.ogg
  • bin/assets/shared/sounds/GF_3.ogg
  • bin/assets/shared/sounds/GF_4.ogg
  • bin/assets/shared/sounds/Lights_Shut_off.ogg
  • bin/assets/shared/sounds/Lights_Turn_On.ogg
  • bin/assets/shared/sounds/Senpai_Dies.ogg
  • bin/assets/shared/sounds/aceptar.ogg
  • bin/assets/shared/sounds/badnoise1.ogg
  • bin/assets/shared/sounds/badnoise2.ogg
  • bin/assets/shared/sounds/badnoise3.ogg
  • bin/assets/shared/sounds/camdev.ogg
  • bin/assets/shared/sounds/carPass0.ogg
  • bin/assets/shared/sounds/carPass1.ogg
  • bin/assets/shared/sounds/cherlok.ogg
  • bin/assets/shared/sounds/clickText.ogg
  • bin/assets/shared/sounds/cuminashe.ogg
  • bin/assets/shared/sounds/denegar_kjkj.ogg
  • bin/assets/shared/sounds/devxjulian.ogg
  • bin/assets/shared/sounds/duck.ogg
  • bin/assets/shared/sounds/dumbie.ogg
  • bin/assets/shared/sounds/fnf_loss_sfx-pixel.ogg
  • bin/assets/shared/sounds/fnf_loss_sfx.ogg
  • bin/assets/shared/sounds/gagato.ogg
  • bin/assets/shared/sounds/hesoyam.ogg
  • bin/assets/shared/sounds/intro1-pixel.ogg
  • bin/assets/shared/sounds/intro1.ogg
  • bin/assets/shared/sounds/intro2-pixel.ogg
  • bin/assets/shared/sounds/intro2.ogg
  • bin/assets/shared/sounds/intro3-pixel.ogg
  • bin/assets/shared/sounds/intro3.ogg
  • bin/assets/shared/sounds/introGo-pixel.ogg
  • bin/assets/shared/sounds/introGo.ogg
  • bin/assets/shared/sounds/lyfer.ogg
  • bin/assets/shared/sounds/mineExplode.ogg
  • bin/assets/shared/sounds/missnote1.ogg
  • bin/assets/shared/sounds/missnote2.ogg
  • bin/assets/shared/sounds/missnote3.ogg
  • bin/assets/shared/sounds/pancat.ogg
  • bin/assets/shared/sounds/pixelText.ogg
  • bin/assets/shared/sounds/selectttttt.ogg
  • bin/assets/shared/sounds/soundTest.ogg
  • bin/assets/shared/sounds/thunder_1.ogg
  • bin/assets/shared/sounds/thunder_2.ogg
  • bin/assets/shared/sounds/train_passes.ogg
  • bin/assets/shared/sounds/wilde.ogg
  • bin/assets/songs/nomoreinnocence/Inst.ogg
  • bin/assets/songs/nomoreinnocence/Voices.ogg
  • bin/assets/songs/nomoreinnocence/nomoreinnocence.json
  • bin/assets/songs/tutorial/Inst.ogg
  • bin/assets/songs/tutorial/tutorial-easy.json
  • bin/assets/songs/tutorial/tutorial-hard.json
  • bin/assets/songs/tutorial/tutorial.json
  • bin/assets/sounds/GF_1.ogg
  • bin/assets/sounds/GF_2.ogg
  • bin/assets/sounds/GF_3.ogg
  • bin/assets/sounds/GF_4.ogg
  • bin/assets/sounds/Ghost_Hit.ogg
  • bin/assets/sounds/Normal_Hit.ogg
  • bin/assets/sounds/beat.ogg
  • bin/assets/sounds/cancelMenu.ogg
  • bin/assets/sounds/confirmMenu.ogg
  • bin/assets/sounds/scrollMenu.ogg
  • bin/assets/sounds/title.ogg
  • bin/assets/sounds/titleShoot.ogg
  • bin/assets/stages/black.json
  • bin/assets/tools/badJoke1.ps1
    .ps1
  • bin/assets/tools/badJoke2.ps1
    .ps1
  • bin/assets/tools/badJoke3.ps1
    .ps1
  • bin/assets/tools/badJoke4.ps1
    .ps1
  • bin/assets/tools/badJoke5.ps1
    .ps1
  • bin/assets/tools/konamicode.ps1
    .ps1
  • bin/assets/tools/nircmd.exe
    .exe windows:4 windows x64 arch:x64

    52b115a47ffae378901264c3506742b0


    Headers

    Imports

    Sections

  • bin/assets/tools/rom.ps1
    .ps1
  • bin/assets/tools/shit.ps1
    .ps1
  • bin/assets/tools/shit2.ps1
    .ps1
  • bin/assets/tools/shit3.ps1
    .ps1
  • bin/assets/week1/images/Floor.png
    .png
  • bin/assets/week1/images/Ilustracion8.png
    .png
  • bin/assets/week1/images/Innocence_bg_1.png
    .png
  • bin/assets/week1/images/verganegra_1.png
    .png
  • bin/changelog.txt
  • bin/do NOT readme.txt
  • bin/icon.ico
  • bin/lime.ndll
    .dll windows:6 windows x64 arch:x64

    7529e748d5cfe42d97fc685806c5f0a5


    Headers

    Imports

    Exports

    Sections

  • bin/manifest/characters.json
  • bin/manifest/default.json
  • bin/manifest/shared.json
  • bin/manifest/songs.json
  • bin/manifest/stages.json
  • bin/manifest/tools.json
  • bin/manifest/tutorial.json
  • bin/manifest/week1.json
  • bin/mods/introMod/_append/data/introText.txt
  • bin/mods/modList.txt
  • bin/mods/readme.txt