Static task
static1
Behavioral task
behavioral1
Sample
MultiHack v1.8.zip
Resource
win7-20241023-en
General
-
Target
MultiHack v1.8.zip
-
Size
3.7MB
-
MD5
21999c283e40354f9afa5b9648b77fc2
-
SHA1
4bc28b361ef2045e979ad1e4db462898e8a03dd2
-
SHA256
f1280ad6d45710afa6fa3f44f19e2390e8fcdc72b04ee3ac0eee739ed8d73ba6
-
SHA512
df6b2b643e985f7857f3709c146c157c3e17324881dcc3eab4488768ed49f53818eb4ad7b37e786b325c2eaa19169259691427f0ad4eb8ef774a091178ebf464
-
SSDEEP
49152:kRy9fGgwaV3FcPvP0+LGScC03k6WTAK+K78qDyJcHxLrP+koOQLXbuv3iO5yXL7x:8U+gwaVVcvJXI32+zUOqpnoOr/ixX6o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/MultiHack v1.8/Loader.exe
Files
-
MultiHack v1.8.zip.zip
Password: 1234
-
MultiHack v1.8/Loader.exe.exe windows:4 windows x86 arch:x86
Password: 1234
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.bss Size: 313KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
MultiHack v1.8/README.txt
-
MultiHack v1.8/jvm.cfg
-
MultiHack v1.8/scripts/actbusy.txt
-
MultiHack v1.8/scripts/actremap.txt
-
MultiHack v1.8/scripts/audio_options.txt
-
MultiHack v1.8/scripts/bonus_maps_manifest.txt
-
MultiHack v1.8/scripts/bugreporter_defaults.txt
-
MultiHack v1.8/scripts/chapterbackgrounds.txt
-
MultiHack v1.8/scripts/clientmenu.txt
-
MultiHack v1.8/scripts/controller_options.txt
-
MultiHack v1.8/scripts/credits.txt
-
MultiHack v1.8/scripts/damagecutout.txt
-
MultiHack v1.8/scripts/damagecutout_ceda.txt
-
MultiHack v1.8/scripts/damagecutout_female.txt
-
MultiHack v1.8/scripts/damagecutout_laughriot.txt
-
MultiHack v1.8/scripts/debugoptions.txt
-
MultiHack v1.8/scripts/game_options.consoles.txt
-
MultiHack v1.8/scripts/game_options.txt
-
MultiHack v1.8/scripts/gameinfo.txt
-
MultiHack v1.8/scripts/gameserverconfig.vdf
-
MultiHack v1.8/scripts/gameuianimations.txt
-
MultiHack v1.8/scripts/global_actors.txt
-
MultiHack v1.8/scripts/hl2_scripts.dsp
-
MultiHack v1.8/scripts/hud_textures.txt
-
MultiHack v1.8/scripts/hudanimations.txt
-
MultiHack v1.8/scripts/instructor_lessons.txt
-
MultiHack v1.8/scripts/instructor_texturemanifest.txt
-
MultiHack v1.8/scripts/instructor_textures.txt
-
MultiHack v1.8/scripts/inventory_structure.txt
-
MultiHack v1.8/scripts/mapautocompile.txt
-
MultiHack v1.8/scripts/mod_lessons.txt
-
MultiHack v1.8/scripts/mod_textures.txt
-
MultiHack v1.8/scripts/motion_controller_move_options.txt
-
MultiHack v1.8/scripts/motion_controller_options.txt
-
MultiHack v1.8/scripts/mouse_keyboard_options.txt
-
MultiHack v1.8/scripts/plugin_animations.txt
-
MultiHack v1.8/scripts/propdata.txt
-
MultiHack v1.8/scripts/radialmenu.txt
-
MultiHack v1.8/scripts/sentences.txt
-
MultiHack v1.8/scripts/serverbrowsergametypes.txt
-
MultiHack v1.8/updater.ini
-
MultiHack v1.8/val.dll