crimson_desert_unpacker_3[.]6[.]zip

Resubmissions

21/04/2026, 11:38

260421-nr82tshs5s6

20/04/2026, 15:31

260420-syffbaas5v

20/04/2026, 11:15

260420-ncv7escw9v6

18/04/2026, 18:49

260418-xgqbeaex3k6

Sharing

Copy URL Twitter E-mail

General

Target
crimson_desert_unpacker_3.6.zip
Size 451KB
Sample260420-syffbaas5v
SHA256 232b8ea74df662ee1337744e482abe7d12cd954fb7d585b9578be4387e0ad827
MD5 aa91c7c485f1598f8ac7ccb11d9df71d
SHA1 351e01c456cfac01f850a6978aa46eb0f027f7ed
SHA512 23e83d3938817fd7688f19fcd8939c09f041823d95e15ef0830a5156f1f1007193b3475092d69b3ca43a3159baeddc778d39aa595ffd49f5dedbd8cf63c3317b
SSDEEP 12288:2zYfcEaN9B/Jm0LU0gM7aQhYyvZJHJmWX:9fclN9BhmSHD5vZJHgWX
TLSH
T1C8A4232CADA106903D67BF403D8C5F024A34A45BB6F9DAA6251F3F884CEFC6C157964D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/loader.exe
unpack001/lua51.dll

File Explorer

crimson_desert_unpacker_3.6.zip

.zip 451KB
Application.cmd

24B
loader.exe

.exe 31KB
lua51.dll

.dll 587KB
sdx.o

.js 293KB

crimson_desert_unpacker_3.6.zip

SHA256 232b8ea74df662ee1337744e482abe7d12cd954fb7d585b9578be4387e0ad827
MD5 aa91c7c485f1598f8ac7ccb11d9df71d
SHA1 351e01c456cfac01f850a6978aa46eb0f027f7ed
SHA512 23e83d3938817fd7688f19fcd8939c09f041823d95e15ef0830a5156f1f1007193b3475092d69b3ca43a3159baeddc778d39aa595ffd49f5dedbd8cf63c3317b
SSDEEP 12288:2zYfcEaN9B/Jm0LU0gM7aQhYyvZJHJmWX:9fclN9BhmSHD5vZJHgWX
TLSH
T1C8A4232CADA106903D67BF403D8C5F024A34A45BB6F9DAA6251F3F884CEFC6C157964D
MD5 SHA1 SHA512 SSDEEP TLSH

Password

cdu1337

loader.exe

IMPHASH 5bbfcbabfc013bccac23927b24324ffd
SHA256 7ad4b911d05a12f91ab27ba3baa351a56653ca099dda7ad87ee2b94f8cd018c9
MD5 c2a7f19ba96dc460d591d37d664fe6aa
SHA1 2e930eb7072ac6f8906c5df11e041d88aaea1fcd
SHA512 baf23c903b68e13786657cf1bcfc6db55493988eac28edc3caaee1011f65ff04eebef9e204853a3abf07d4a36ad7ef5bb8a3683863fac600b49590d7376624ad
SSDEEP 384:ib7da2Z2gMMu7VGueXHa2RIC23208fKUS5CWhYJ8L:Wa2JLuZ/eXaIO3r8iuWhYyL
TLSH
T138E2C62DB68258DEC591D27CA0D60731F079BD56172766BE1308F23A7E21AA1CB3F427
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Password

cdu1337

Minor OS version

Major OS version

Entry point

5184

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

DeleteCriticalSection EnterCriticalSection GetCurrentProcess GetFileInformationByHandleEx GetFileType GetLastError GetModuleHandleA GetProcAddress InitializeCriticalSection IsProcessorFeaturePresent LeaveCriticalSection LoadLibraryW SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue VirtualProtect VirtualQuery

msvcrt

__C_specific_handler __getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _cexit _commode _fileno _fmode _get_osfhandle _initterm _isatty _write atexit abort calloc exit fflush fgets fprintf fputc fputs free fwrite getenv isxdigit malloc memcpy putc setvbuf signal strchr strlen strncmp strstr vfprintf wcsncmp

lua51

luaJIT_version_2_1_1774896198 luaL_callmeta luaL_loadbuffer luaL_loadfile luaL_newstate luaL_openlibs luaL_traceback luaL_where lua_call lua_close lua_concat lua_cpcall lua_createtable lua_error lua_gc lua_getfield lua_gettable lua_gettop lua_insert lua_isstring lua_objlen lua_pcall lua_pushboolean lua_pushcclosure lua_pushfstring lua_pushlstring lua_pushnil lua_pushstring lua_pushvalue lua_rawgeti lua_rawseti lua_remove lua_setfield lua_sethook lua_settop lua_toboolean lua_tolstring lua_type

Name

.text

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

224B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1024B

Virtual Size

816B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1024B

Virtual Size

652B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

124B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

lua51.dll

IMPHASH c408ea58a5c6242773f6d306db52755d
SHA256 04d3c82782927330d56827ff551697666dbab4b3abf5b86bde492efdd142bc58
MD5 82e81158366a953c33d0720dfe34b95b
SHA1 4b5eee1d2ba5bf3ca0389c0415626634c640a4bd
SHA512 3c9f7360bafc48d573d24fe1612e23a97fe08944c9ad5f5d46818d5e74365d00d7e5aeee63391d4c0de7390b5fecaa695b698fd62ccc741dec181f0d24ee82af
SSDEEP 12288:Psx+0xTI82jcKvyp9jvgEXXBKHKLx2h601BqStQIF3yB:OrmyXMKF2hXBtQIF3yB
TLSH
T173D4160BA6B362BCC267C134879B8BB1B931BC5402346DBF55A0E7311E71E91179FA39
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Password

cdu1337

Minor OS version

Major OS version

Entry point

4592

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

kernel32

CreateThread DeleteCriticalSection EnterCriticalSection FormatMessageA FreeLibrary GetCPInfo GetCurrentProcess GetLastError GetModuleFileNameA GetModuleHandleA GetModuleHandleExA GetProcAddress GetTempPathA InitializeCriticalSection IsProcessorFeaturePresent LeaveCriticalSection LoadLibraryExA LoadLibraryW MultiByteToWideChar RaiseException RtlCaptureContext RtlLookupFunctionEntry RtlRestoreContext RtlUnwindEx RtlVirtualUnwind SetLastError Sleep TerminateProcess TlsGetValue VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForSingleObject

msvcrt

__DestructExceptionObject ___lc_codepage_func ___mb_cur_max_func __iob_func __setusermatherr _amsg_exit _close _errno _fdopen _filelengthi64 _fileno _fmode _gmtime64 _initterm _localtime64 _lock _mktime64 _open _pclose _popen _strtoi64 _strtoui64 _time64 _strdup _unlock _write abort acos asin atan calloc clearerr clock cosh difftime exit fclose feof ferror fflush fgetpos fgets fopen fprintf fputc fputs free fread fsetpos fwrite getc getenv isdigit isspace isxdigit localeconv log10 malloc memchr memcmp memcpy memmove memset putchar realloc remove rename setlocale setvbuf sinh strchr strcmp strcpy strerror strftime strlen strncmp strncpy strrchr strstr strtol strtoul system tan tanh tmpnam tolower ungetc vfprintf

luaJIT_profile_dumpstack luaJIT_profile_start luaJIT_profile_stop luaJIT_setmode luaJIT_version_2_1_1774896198 luaL_addlstring luaL_addstring luaL_addvalue luaL_argerror luaL_buffinit luaL_callmeta luaL_checkany luaL_checkinteger luaL_checklstring luaL_checknumber luaL_checkoption luaL_checkstack luaL_checktype luaL_checkudata luaL_error luaL_execresult luaL_fileresult luaL_findtable luaL_getmetafield luaL_gsub luaL_loadbuffer luaL_loadbufferx luaL_loadfile luaL_loadfilex luaL_loadstring luaL_newmetatable luaL_newstate luaL_openlib luaL_openlibs luaL_optinteger luaL_optlstring luaL_optnumber luaL_prepbuffer luaL_pushmodule luaL_pushresult luaL_ref luaL_register luaL_setfuncs luaL_setmetatable luaL_testudata luaL_traceback luaL_typerror luaL_unref luaL_where lua_atpanic lua_call lua_checkstack lua_close lua_concat lua_copy lua_cpcall lua_createtable lua_dump lua_equal lua_error lua_gc lua_getallocf lua_getfenv lua_getfield lua_gethook lua_gethookcount lua_gethookmask lua_getinfo lua_getlocal lua_getmetatable lua_getstack lua_gettable lua_gettop lua_getupvalue lua_insert lua_iscfunction lua_isnumber lua_isstring lua_isuserdata lua_isyieldable lua_lessthan lua_load lua_loadx lua_newstate lua_newthread lua_newuserdata lua_next lua_objlen lua_pcall lua_pushboolean lua_pushcclosure lua_pushfstring lua_pushinteger lua_pushlightuserdata lua_pushlstring lua_pushnil lua_pushnumber lua_pushstring lua_pushthread lua_pushvalue lua_pushvfstring lua_rawequal lua_rawget lua_rawgeti lua_rawset lua_rawseti lua_remove lua_replace lua_resume lua_setallocf lua_setfenv lua_setfield lua_sethook lua_setlocal lua_setmetatable lua_settable lua_settop lua_setupvalue lua_status lua_toboolean lua_tocfunction lua_tointeger lua_tointegerx lua_tolstring lua_tonumber lua_tonumberx lua_topointer lua_tothread lua_touserdata lua_type lua_typename lua_upvalueid lua_upvaluejoin lua_version lua_xmove lua_yield luaopen_base luaopen_bit luaopen_debug luaopen_ffi luaopen_io luaopen_jit luaopen_math luaopen_os luaopen_package luaopen_string luaopen_string_buffer luaopen_table

Name

.text

Size

496KB

Virtual Size

496KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

800B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

42KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

crimson_desert_unpacker_3.6.zip

Application.cmd

loader.exe

kernel32

msvcrt

lua51

generic

lua51.dll

kernel32

msvcrt

generic

sdx.o