Starbound.1.4.4.rar
- SHA256 2370f097e8f27a802144b85a98bbfc355ac63d3e842c6fc7483f0c601ffa59ec
Overview
overview
7Static
static
3Starbound.1.4.4.rar
windows10-2004-x64
1Starbound.1.4.4.rar
windows11-ltsc_2024-x64
1Starbound....es.url
windows10-2004-x64
1Starbound....es.url
windows11-ltsc_2024-x64
1Starbound....me.txt
windows10-2004-x64
1Starbound....me.txt
windows11-ltsc_2024-x64
1Starbound....un.inf
windows10-2004-x64
1Starbound....un.inf
windows11-ltsc_2024-x64
1Starbound....-1.bin
windows10-2004-x64
3Starbound....-1.bin
windows11-ltsc_2024-x64
3Starbound....os.jpg
windows10-2004-x64
1Starbound....os.jpg
windows11-ltsc_2024-x64
1Starbound....up.exe
windows10-2004-x64
7Starbound....up.exe
windows11-ltsc_2024-x64
7Starbound...._0.ico
windows10-2004-x64
3Starbound...._0.ico
windows11-ltsc_2024-x64
3Behavioral task
behavioral1
Sample
Starbound.1.4.4.rar
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Starbound.1.4.4.rar
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
Starbound.1.4.4/More than 5000+ games.url
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Starbound.1.4.4/More than 5000+ games.url
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
Starbound.1.4.4/Readme.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
Starbound.1.4.4/Readme.txt
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
Starbound.1.4.4/autorun.inf
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
Starbound.1.4.4/autorun.inf
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
Starbound.1.4.4/elamigos-1.bin
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral10
Sample
Starbound.1.4.4/elamigos-1.bin
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral11
Sample
Starbound.1.4.4/elamigos.jpg
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral12
Sample
Starbound.1.4.4/elamigos.jpg
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral13
Sample
Starbound.1.4.4/setup.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral14
Sample
Starbound.1.4.4/setup.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
10 signatures
150 seconds
Behavioral task
behavioral15
Sample
Starbound.1.4.4/starbound_0.ico
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral16
Sample
Starbound.1.4.4/starbound_0.ico
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target Starbound.1.4.4.rar
- Size 764.2MB
- Sample260715-e4da9abw7p
- SHA256 2370f097e8f27a802144b85a98bbfc355ac63d3e842c6fc7483f0c601ffa59ec
- MD5 67ea38795ab066588f2a28ccc9cf516f
- SHA1 6411f9dcac89b33069ae21630e2bc9c2e68d4e25
- SHA512 ef1a6358d645458728fac94611688dd8052747a2d5112bdaedb24d1b92c8fb118ff095a0e090cfe2c325efa53bc2f6727b5e3256c1fb42b90c99f8f58ed41918
- SSDEEP 12582912:s0ZjBWZzxEVyMQv/Rf+UVaUTg/U2tFLR63dow0w4zUjCwhJBeZCr/BiYoAzQhkQw:s05sZFEVHwwUNUUQ76KC4ofBMY1U0x/
- TLSH T1C58933EC13A282E49DCEF146D58FCDFA93A48F8E375149548FAEFE110C185CA6C6D264
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Starbound.1.4.4/setup.exe - Inno Setup is an open-source installation builder for Windows applications. 1 IoCs
Inno Setup installer
resource yara_rule static1/unpack001/Starbound.1.4.4/setup.exe innosetup
File Explorer
-
Starbound.1.4.4.rar.rar 764.2MB
-
Starbound.1.4.4/More than 5000+ games.url120B
-
Starbound.1.4.4/Readme.txt1KB
-
Starbound.1.4.4/autorun.inf64B
-
Starbound.1.4.4/elamigos-1.bin761.9MB
-
Starbound.1.4.4/elamigos.jpg.jpg 33KB
-
Starbound.1.4.4/setup.exe.exe 2.4MB
-
Starbound.1.4.4/starbound_0.ico167KB
Starbound.1.4.4/More than 5000+ games.url
- SHA256 e73678423a8c739048ba6b13c488f833f87e5e5753b1551b22d0fce41a6581a1
- MD5 80a0d0b47cabbd9182cc633f6ba96f92
- SHA1 d33521e92617a8e0a84f30e89152c029fbfd2168
- SHA512 267db3ebd5528a2e59cb022a37ac9a908811018667137a257a90efd940972e2ee9836c697aa15a5dac3ff5b74fad634a1e73a5fa8dc948ad01f2aaab5939f9cc
- TLSH T192B012A99A45C286D351A50AB1B0FE0C880F75A4CDD3D1ECA294DDDB5D860D0C459B66
- MD5 SHA1 SHA512 TLSH
Starbound.1.4.4/Readme.txt
- SHA256 0a00c637b6c099e3803fc5227a9ab8f956120db04173eee6446c2bb63ba92263
- MD5 9886bc5d082a8ec9c8ca4ba6c79b3122
- SHA1 b7fe892b3891ec59906bc8236c1976cdec5d04c8
- SHA512 d1fd83cc3e176d9988cbcd9a59304cb3dee795ff7ecbee2fc7baf1b34883918fa497a3d35ef364cf9440e4ce615208eebd1dc52d2742fbbbe020717fe3a37948
- TLSH T1243106FE4B228585066DBDF3B35BB20EEA51819CD20670C2759C476B9B5D38C42EC08D
- MD5 SHA1 SHA512 TLSH
Starbound.1.4.4/autorun.inf
- SHA256 fc55533b1aad8f58ea40f7c09ec1d52995d57bf9bdbd8417b7eb33fa7d804a37
- MD5 26a2c050cb11a78b2a6f6a152c9eae04
- SHA1 82252acd836b4fdc815f38a3b382c09862081bfd
- SHA512 d12a1701270460cc6770b7b6f56e14ec636c0b7fa0a542905833c67b6d7acbb1d090dcc6946b816dbc6efa0da403739635b171b4c2183a96c1fa0cb7843b9e78
- TLSH T14EA00280C91E886DBE09E0F1079A3EA1CD9B51EA09645675D2C76486503539C0F5D841
- MD5 SHA1 SHA512 TLSH
Starbound.1.4.4/elamigos-1.bin
- SHA256 12c078b6705a8ab5e033f96f9e45e58b09a9d4a3398cb9aa624abed7278f6730
- MD5 3edbd3049bed9efabc92cd03032e30bc
- SHA1 1dca18b2026bc4eceb7c1ef640d7d7f49ace938c
- SHA512 f1359631bbebcf91c9c32d49f400dfaa0253d7f9313e6e6017daa5f20cabb4d836c44ffa5c79b8deab9ab653b87195ed8a4939e7a943552f3cdf4129fedb5826
- SSDEEP 12582912:d0ZjBWZzxEVyMQv/Rf+UVaUTg/U2tFLR63dow0w4zUjCwhJBeZCr/BiYoAzQhkQe:d05sZFEVHwwUNUUQ76KC4ofBMY1U0xL
- TLSH T14C8933ED03B282E49DCEB145D58FCDFA93A48F8E375149548FAEFE110C185CA6C6D268
- MD5 SHA1 SHA512 SSDEEP TLSH
Starbound.1.4.4/elamigos.jpg
- SHA256 87db0fc1299e1460569f4ed9583e1e53e22b6402d741d960bf4b7ade3e4b41ff
- MD5 150332d4f3de60a5e933dd0ba00a771f
- SHA1 63866488d1772d0c8a1ff08077d604d8390c2e71
- SHA512 3b462f69826b8c31dec3418161938d568497f4b0939e5bb39f5e430f4e98940e0036eeeed7f3d7a6bd69ae13293b4bd0a1e995cffb0b95f34c33031388dd1270
- SSDEEP 384:6SbZbC1GHcTIjF5Xn8slNh0Omj7tJRvlUYORbxgvq2cX0WOh0eMOaZbw7oHEyVq2:6SbdCTWSskebayZOh0eFaZbwUkyc2
- TLSH T196F2370BA91ACF17601487E67E635D696F9F2B0D88D576EE022B0C8F1E813B40DDD21E
- MD5 SHA1 SHA512 SSDEEP TLSH
Starbound.1.4.4/setup.exe
- IMPHASH 48aa5c8931746a9655524f67b25a47ef
- SHA256 4dca0f9f305187a47504951dc248b479e1c81ee0be095f2d7663cb882ab3e00c
- MD5 097e51f516981b7517895e9edb07ed60
- SHA1 8696e640da763a589ddd02732a055e201fb1adcb
- SHA512 f67ad9413a5a5a1c651565cfc6185d89281997b27bf492e0e2d3449cbd820a98f25889daa938029e37ad2f91a8efb0c18dc10767b63ba511735946f3f75725c3
- SSDEEP 49152:LAhI/HoKxeBZHq9K5+eHHxGIsktdS4XuTSK09YzA5RV:E+vlcqxIHxSw4109Y85/
- TLSH T176C52343B7D306B5F8656A398EB180904E277C7A6AD1215B7FB0F70E0A72AC15D32792
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Inno Setup is an open-source installation builder for Windows applications.
Inno Setup installer
Minor OS version
0
Major OS version
5
Entry point
70588
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
user32
GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
TranslateMessage
SetWindowLongW
PeekMessageW
MsgWaitForMultipleObjects
MessageBoxW
LoadStringW
GetSystemMetrics
ExitWindowsEx
DispatchMessageW
DestroyWindow
CharUpperBuffW
CallWindowProcW
kernel32
GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
SizeofResource
SignalObjectAndWait
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResetEvent
RemoveDirectoryW
ReadFile
MultiByteToWideChar
LockResource
LoadResource
LoadLibraryW
GetWindowsDirectoryW
GetVersionExW
GetUserDefaultLangID
GetThreadLocale
GetSystemInfo
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLastError
GetFullPathNameW
GetFileSize
GetFileAttributesW
GetExitCodeProcess
GetEnvironmentVariableW
GetDiskFreeSpaceW
GetCurrentProcess
GetCommandLineW
GetCPInfo
InterlockedExchange
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindResourceW
EnumCalendarInfoW
DeleteFileW
CreateProcessW
CreateFileW
CreateEventW
CreateDirectoryW
CloseHandle
Sleep
comctl32
InitCommonControls
Name
.text
Size
60KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
21KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
8B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
212KB
Virtual Size
212KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Starbound.1.4.4/starbound_0.ico
- SHA256 c8f14e602115eb47ed98c45ec8b86ac5bcdffd14c4720d0cff82755eb9f6670d
- MD5 5323b4c821f3b52bbb300ce008dbd5d5
- SHA1 1314c206e9a9094ad7ad7750d6c08fa421f5b9d0
- SHA512 bedb4b7afa993fcf07c2013b6406d085ffe6b8253a5dc1f67236213faf43a3af1804d5a6e68c631ecfd089e4d0c166ed84f011a1fd05a796e85ab5e73e483e8d
- SSDEEP 1536:yY3IIQmqGNPbHw+Dc26YUMWZTUH+K4oY7fJEmaJqEunzUFakQP2C2a:B3IIQmqsPbQd24BUHX4oY7RPaszUqV
- TLSH T1C7F38DA73BD0A3D5E420993BEA57C1A6122BBC326B8125D7B754F32F05B0112935BF1B
- MD5 SHA1 SHA512 SSDEEP TLSH