Undertale.zip
- SHA256 d71e838f7cb3b0efaec74961daff6062cddb59f4d2fc1f4e41e33ba0f42cb2a7
Overview
overview
7Static
static
7D3DX9_43.dll
windows10-2004-x64
3D3DX9_43.dll
windows11-ltsc_2024-x64
3GameOverla...er.dll
windows10-2004-x64
3GameOverla...er.dll
windows11-ltsc_2024-x64
3Undertale.exe
windows10-2004-x64
6Undertale.exe
windows11-ltsc_2024-x64
3codex.dll
windows10-2004-x64
3codex.dll
windows11-ltsc_2024-x64
3steam_api.dll
windows10-2004-x64
3steam_api.dll
windows11-ltsc_2024-x64
3steam_api.dll
windows10-2004-x64
3steam_api.dll
windows11-ltsc_2024-x64
3steamclient.dll
windows10-2004-x64
3steamclient.dll
windows11-ltsc_2024-x64
3Static task
static1
Behavioral task
behavioral1
Sample
D3DX9_43.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
D3DX9_43.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
GameOverlayRenderer.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
GameOverlayRenderer.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral5
Sample
Undertale.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Undertale.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
codex.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
codex.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
steam_api.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
steam_api.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
steam_api.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
steam_api.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
steamclient.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
steamclient.dll
Resource
win11ltsc2024-20260709-en
Detects file using ACProtect software.
| resource | yara_rule |
|---|---|
| static1/unpack001/codex.dll | acprotect |
| static1/unpack001/steamclient.dll | acprotect |
File was altered after it was signed.
| resource |
|---|
| unpack001/GameOverlayRenderer.dll |
| unpack001/steam_api.dll |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/Undertale.exe |
Codesigned file was signed by an untrusted entity.
| resource |
|---|
| unpack001/D3DX9_43.dll |
| unpack001/codex.dll |
| unpack001/steam_api.cdx |
| unpack001/steamclient.dll |
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
May 22, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=224, id=1, productName=Unmarked objects,
count=9, id=156, version=21202,
count=15, id=158, version=21202,
count=80, id=170, version=21202,
count=1, id=155, version=21202,
count=244, id=171, version=21202,
count=1, id=126, version=50727,
count=1, id=154, version=21202,
count=1, id=157, version=21202,
Codesign digest Mismatch
File was altered after it was signed.
Apr 29, 2019
CN=Valve,O=Valve,L=Bellevue,ST=WA,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=171, productName=VS2010 build 30319, version=30319,
count=8, id=150, version=20413,
count=66, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=132, productName=VS2008 build 21022, version=21022,
count=1, id=109, productName=VS2005 build 50727, version=50727,
count=2, id=156, version=21202,
count=31, id=123, productName=VS2005 build 50727, version=50727,
count=315, id=1, productName=Unmarked objects,
count=400, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=414, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=62, id=225, productName=VS2013 build 21005, version=21005,
count=27, id=223, productName=VS2013 build 21005, version=21005,
count=177, id=224, productName=VS2013 build 21005, version=21005,
count=10, id=203, version=65501,
count=5, id=257, productName=VS2015 UPD2 build 23918, version=23918,
count=90, id=1, productName=Unmarked objects,
count=6, id=228, version=40629,
count=1, id=220, productName=VS2013 UPD5 build 40629, version=40629,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=222, productName=VS2013 UPD5 build 40629, version=40629,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 15, 2016
CN=Valve,O=Valve,L=Bellevue,ST=WA,C=US
Codesign digest Mismatch
File was altered after it was signed.
Jan 15, 2016
CN=Valve,O=Valve,L=Bellevue,ST=WA,C=US
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=2, id=123, productName=VS2005 build 50727, version=50727,
count=71, id=225, productName=VS2013 build 21005, version=21005,
count=30, id=223, productName=VS2013 build 21005, version=21005,
count=235, id=224, productName=VS2013 build 21005, version=21005,
count=15, id=203, version=65501,
count=148, id=1, productName=Unmarked objects,
count=82, id=228, version=40629,
count=1, id=220, productName=VS2013 UPD5 build 40629, version=40629,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=222, productName=VS2013 UPD5 build 40629, version=40629,