General

  • Target

    GrowtopiaInstaller.exe

  • Size

    217.6MB

  • MD5

    6d0dfb7e73a37586efb2cbb6bda64832

  • SHA1

    680b55741bc388c31c78807a26393036928306a5

  • SHA256

    c2b9af171b5b8a3980ea86c6340c96e61c8aeb40a26452aae0f7e30521eb7b5f

  • SHA512

    0d28940ab04355981c7bc5a03b3f0fdaef0ab77186889786becd4e9ce08c5d7cc3fef23db44b80b6ae76e1a9cddef9289bbce414efecddd0e4c91c99b19ca136

  • SSDEEP

    6291456:cTkXdH4xUfSAKd05D7ip7ripHqYxWuCJlK:cWYxkB6rSEPJlK

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • GrowtopiaInstaller.exe
    .exe windows:4 windows x86 arch:x86

    b78ecf47c0a3e24a6f4af114e2d1f5de


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    610235b90207a63ccf481f0d4375d329


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Growtopia.exe
    .exe windows:6 windows x64 arch:x64

    39c77b6c87d971c62a9768f0f4e62707


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MicrosoftEdgeWebview2Setup.exe
    .exe windows:5 windows x86 arch:x86

    ccc6e30409f96054ca558f4765d32e38


    Code Sign

    Headers

    Imports

    Sections

  • anzu.dll
    .dll windows:6 windows x64 arch:x64

    1054328810b3c31a1c138b627a283240


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • fmod64.dll
    .dll windows:6 windows x64 arch:x64

    c624923d4eb6c568c3717eb47cd26917


    Headers

    Imports

    Exports

    Sections

  • fmodex64.dll
    .dll windows:5 windows x64 arch:x64

    542b9a8453fd7dd6ff53cc2bea2003af


    Headers

    Imports

    Exports

    Sections

  • vc_redist.x64.exe
    .exe windows:5 windows x86 arch:x86

    8e2588a9cf43886de3449dfff03137b6


    Code Sign

    Headers

    Imports

    Sections

  • vc_redist.x86.exe
    .exe windows:5 windows x86 arch:x86

    8e2588a9cf43886de3449dfff03137b6


    Code Sign

    Headers

    Imports

    Sections