6323a2d24b8dd84fc8886c46ba4253ab27aa2cf8c6501d75f16db20702afe5da
- SHA256 6323a2d24b8dd84fc8886c46ba4253ab27aa2cf8c6501d75f16db20702afe5da
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2025年全部热门单机游戏及汉化下载.url
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2025年全部热门单机游戏及汉化下载.url
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Just Cause 3 v1.0-v20251217 Plus 17 Trainer.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
Just Cause 3 v1.0-v20251217 Plus 17 Trainer.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
www.3dmgame.com.url
Resource
win10v2004-20260513-en
windows10-2004-x64
12 signatures
150 seconds
Behavioral task
behavioral6
Sample
www.3dmgame.com.url
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
11 signatures
150 seconds
General
- Target 6323a2d24b8dd84fc8886c46ba4253ab27aa2cf8c6501d75f16db20702afe5da
- Size 810KB
- Sample260710-nlcfnsbv4w
- SHA256 6323a2d24b8dd84fc8886c46ba4253ab27aa2cf8c6501d75f16db20702afe5da
- MD5 957908f6da294ebfa5871261daf54505
- SHA1 8ab34401cf451fb4620775c4c880618a22c695f7
- SHA512 3c52b932a332564f13d9fc4aaf27a20d22a4e2c0ad4b27038f1d239d5c98b86db917ddf3ef92faedb432099fc0259db079bb4ecff4eb3839bf287a542567c229
- SSDEEP 24576:Y1YjlPT8XyxnyS//NcsbgmbLa4O3FHj8gesoje:YCjxICxv/2sEYGtj
- TLSH T1B405333D8BA857FB590EA8A408468C91AC3928B7C7A239117CC6D74B14BD1C4DFB1A5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Just Cause 3 v1.0-v20251217 Plus 17 Trainer.exe
File Explorer
-
6323a2d24b8dd84fc8886c46ba4253ab27aa2cf8c6501d75f16db20702afe5da.rar 810KB
-
2025年全部热门单机游戏及汉化下载.url.url 147B
-
Just Cause 3 v1.0-v20251217 Plus 17 Trainer.exe.exe 1.6MB
-
www.3dmgame.com.url122B
-
说明.txt1KB
2025年全部热门单机游戏及汉化下载.url
- SHA256 92929d971a13a5fa4650d272ccce60e8d54da2b1d5b4baa8304a7ba6f8e97c1c
- MD5 2ce8b9f08060ff76bb0f7535c9890d1f
- SHA1 20d6fa6a9ccbdcfb40c703fdcc924e8c92eaf6a0
- SHA512 b04c6c34fa23b91208c86db22ff37e352e70da7110862ca737ca6174bf73ba46a7d4880ca6f1d42f323c987613d024232741c145e74589113f46766d6bb5b853
- TLSH T108C08C6E05078295C300550610E1F808E40F79A0ACD2904CA564CAAB5C890E3C084A3D
- MD5 SHA1 SHA512 TLSH
Just Cause 3 v1.0-v20251217 Plus 17 Trainer.exe
- IMPHASH fa0e0d9760bf802c0f340eb51be10816
- SHA256 2d5a3bfb96b824edd254f493489a6abf6c9e50847720ad40a3b65eab4a91d241
- MD5 676dc6a3cf753d19d7da067db2a37216
- SHA1 1959d93afb0c2370caffd6ed515e05f2212fabc1
- SHA512 9f6e343fa548041b10af3395f99a9a0600acaf11eb741be30e2150d5e3a25779c4c46305b9245592581426e6ccfaa98bfaf0a23a7dfa511dcd021d862a21fe8a
- SSDEEP 24576:IirJrNhEwXVyggyaFM4CoBwc4/WGnjnkXPbbcrYGtPEQs:IiFrNtX8y/4NBLTGjnkfXcrYGtPRs
- TLSH T1EA85AE27A7D501BDD0BB81B9CE568942E772780A07719BDF07D096622F277E04E3E722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
642468
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WideCharToMultiByte
MultiByteToWideChar
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
Sleep
GetCurrentProcessId
LoadLibraryW
GetProcAddress
GetModuleHandleA
LoadLibraryA
InitializeCriticalSectionEx
DeleteCriticalSection
GetModuleHandleW
DecodePointer
GetModuleFileNameW
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetTempPathW
WaitNamedPipeW
ReadFile
WritePrivateProfileStringW
GetCurrentProcess
FindResourceW
LoadResource
SizeofResource
LockResource
LoadLibraryExW
GetFileAttributesW
FreeLibrary
GetProcessTimes
GetSystemTimeAsFileTime
IsWow64Process
SetLastError
GetFileSizeEx
ResumeThread
WaitForSingleObject
LocalFree
CreateDirectoryW
SetEndOfFile
WriteConsoleW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
WriteFile
CreateFileW
GetLastError
GetPrivateProfileStringW
CloseHandle
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
ReadConsoleW
GetConsoleMode
FormatMessageA
GetLocaleInfoEx
GetStringTypeW
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
GetCurrentThreadId
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
AreFileApisANSI
GetFileInformationByHandleEx
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObjectEx
GetExitCodeThread
EnterCriticalSection
LeaveCriticalSection
EncodePointer
CompareStringEx
GetCPInfo
LCMapStringEx
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
OutputDebugStringW
RaiseException
RtlUnwindEx
RtlPcToFileHeader
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetStdHandle
GetFileType
SetFilePointerEx
FlushFileBuffers
GetConsoleOutputCP
RtlUnwind
user32
MessageBoxW
SetProcessDPIAware
MessageBoxA
advapi32
SetEntriesInAclW
ConvertStringSidToSidW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
shell32
SHGetFolderPathW
ole32
CoInitializeEx
CoUninitialize
oleaut32
SysFreeString
SysAllocString
VariantInit
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
mscoree
CLRCreateInstance
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
winmm
PlaySoundW
Name
.text
Size
816KB
Virtual Size
815KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
246KB
Virtual Size
246KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
10KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
31KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
564KB
Virtual Size
563KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=259, version=30795,
count=181, id=261, version=30795,
count=17, id=260, version=30795,
count=10, id=259, version=35207,
count=16, id=260, version=35207,
count=98, id=261, version=35207,
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=17, id=257, version=30795,
count=195, id=1, productName=Unmarked objects,
count=30, id=261, version=33523,
count=18, id=265, version=35221,
count=1, id=255, version=35221,
count=1, id=151,
count=1, id=258, version=35221,
www.3dmgame.com.url
- SHA256 03df27e82600098c34c413cc2e45b43638d3ac33666960cfbd913f1c3f9a0b11
- MD5 49cbfed4fa9b3fafdc9d499b6163fa62
- SHA1 28decd9138bd3f7b3ef38bf9e40cd0d6305d1cdb
- SHA512 64e91ed564ef64d7687599012c4728b811fec2661dcb7941374cdd3a8450563073c67c452d97d43545f49182fbda2c26702dd35088723ace21717282d1233627
- TLSH T14BB0129C5B46C09AD371D81A70F0FD09E80EB9F048C2D4DC76D0DD9F2C950D1D54AB2A
- MD5 SHA1 SHA512 TLSH
说明.txt
- SHA256 f93e8d60b88d14ae5ddf612b5bfff01aefc07e31df8441e9fad6d6cc98549113
- MD5 4f5215f9d478e30cdb786e4d5c9c04ee
- SHA1 f7de3900ec03808d6f48f7fe7efe39ec9898170f
- SHA512 2f3923ae0314989a00863956667da5356167fc8b2cd70ad7f24bd1ea5d2c77d426dff2c2600410c123bb968f7f977e591472104bf3fe8280c5b1696cb5eba434
- TLSH T17F417602DE8DB20531A445202AEDA893D32F52C1413E9F4406D9EBE97BD79422CCBFCA
- MD5 SHA1 SHA512 TLSH