mod_d1kamon.6.29_[unknowncheats.me]_.zip
- SHA256 3f0c378d18395988acd50f15f4f0651ca7f1e82288553b71eb2fae2712995687
Overview
overview
7Static
static
3mod_d1kamo...]_.zip
windows10-2004-x64
1mod_d1kamo...]_.zip
windows11-ltsc_2024-x64
1mod_d1kamo...ar.ttf
windows10-2004-x64
7mod_d1kamo...ar.ttf
windows11-ltsc_2024-x64
3mod_d1kamo...ar.ttf
windows10-2004-x64
7mod_d1kamo...ar.ttf
windows11-ltsc_2024-x64
3mod_d1kamo...ar.ttf
windows10-2004-x64
7mod_d1kamo...ar.ttf
windows11-ltsc_2024-x64
3mod_d1kamo...ar.otf
windows10-2004-x64
7mod_d1kamo...ar.otf
windows11-ltsc_2024-x64
3mod_d1kamo...ar.ttf
windows10-2004-x64
7mod_d1kamo...ar.ttf
windows11-ltsc_2024-x64
3mod_d1kamo...ar.ttf
windows10-2004-x64
7mod_d1kamo...ar.ttf
windows11-ltsc_2024-x64
3mod_d1kamo...on.ini
windows10-2004-x64
1mod_d1kamo...on.ini
windows11-ltsc_2024-x64
1mod_d1kamo...on.dll
windows10-2004-x64
3mod_d1kamo...on.dll
windows11-ltsc_2024-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
mod_d1kamon.6.29_[unknowncheats.me]_.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
mod_d1kamon.6.29_[unknowncheats.me]_.zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
mod_d1kamon.6.29/fonts/NotoEmoji-Regular.ttf
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
mod_d1kamon.6.29/fonts/NotoEmoji-Regular.ttf
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral5
Sample
mod_d1kamon.6.29/fonts/NotoSans-Regular.ttf
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral6
Sample
mod_d1kamon.6.29/fonts/NotoSans-Regular.ttf
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral7
Sample
mod_d1kamon.6.29/fonts/NotoSansArabic-Regular.ttf
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral8
Sample
mod_d1kamon.6.29/fonts/NotoSansArabic-Regular.ttf
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral9
Sample
mod_d1kamon.6.29/fonts/NotoSansCJKsc-Regular.otf
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral10
Sample
mod_d1kamon.6.29/fonts/NotoSansCJKsc-Regular.otf
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral11
Sample
mod_d1kamon.6.29/fonts/NotoSansSC-Regular.ttf
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral12
Sample
mod_d1kamon.6.29/fonts/NotoSansSC-Regular.ttf
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral13
Sample
mod_d1kamon.6.29/fonts/NotoSansSymbols2-Regular.ttf
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral14
Sample
mod_d1kamon.6.29/fonts/NotoSansSymbols2-Regular.ttf
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral15
Sample
mod_d1kamon.6.29/mod_d1kamon.ini
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral16
Sample
mod_d1kamon.6.29/mod_d1kamon.ini
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral17
Sample
mod_d1kamon.6.29/version.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral18
Sample
mod_d1kamon.6.29/version.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target mod_d1kamon.6.29_[unknowncheats.me]_.zip
- Size 23.0MB
- Sample260727-be46wsteme
- SHA256 3f0c378d18395988acd50f15f4f0651ca7f1e82288553b71eb2fae2712995687
- MD5 2c4a089d0e90ebcf2c6ef23cc757ca1b
- SHA1 8621f40f01849e3d52d2034665135cc6325e1f3b
- SHA512 dc628daea705d306771336b79794285b7dbdcb1962d42ec4ec2b90819834861d1e8b3e32ded0c714edffa8db518aaac061aff521f19b1c6c41c94750d70a7326
- SSDEEP 393216:zSwBEa3CgKwPxr9xsQKe45/UaRQ+Xjw1Dhlc1vPdzAeF48VB+h68y5va5ccsc0K6:/ycxVKB58+Xk1DhlcDEeZVB+h68mS5va
- TLSH T179373362D955BEE55811997BAF32A1BE75BCE0524F2C037348E62B0008B6FA447ED70F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/mod_d1kamon.6.29/version.dll
File Explorer
-
mod_d1kamon.6.29_[unknowncheats.me]_.zip.zip 23.0MB
-
mod_d1kamon.6.29/fonts/NotoEmoji-Regular.ttf860KB
-
mod_d1kamon.6.29/fonts/NotoSans-Regular.ttf614KB
-
mod_d1kamon.6.29/fonts/NotoSansArabic-Regular.ttf172KB
-
mod_d1kamon.6.29/fonts/NotoSansCJKsc-Regular.otf15.7MB
-
mod_d1kamon.6.29/fonts/NotoSansSC-Regular.ttf10.1MB
-
mod_d1kamon.6.29/fonts/NotoSansSymbols2-Regular.ttf1.2MB
-
mod_d1kamon.6.29/mod_d1kamon.ini607B
-
mod_d1kamon.6.29/version.dll.dll 3.2MB
mod_d1kamon.6.29/fonts/NotoEmoji-Regular.ttf
- SHA256 cd07743a4c93d8da929afdd28c1d368f11da478a1093146a13610081c2a58440
- MD5 2406adda04b83ddf8b6ed50dfb28548d
- SHA1 68067e4889b3b47b2c608d6267fccd7a97aded2b
- SHA512 4293b29a6506113b5c6d95ec1c1d66ed63950c4633f59c80426a5c5d2c7f423512e197bdf39ce78f8bb16da3d4ed31d63b07df89df487fbdbfe872b4c392f2e5
- SSDEEP 12288:MqqxT9D7zOwPjN8eMNZRl+YqRQ37VfW4XnjLHImUoadOWgJojF38SJO5D2l+N4NB:4h9bOAp+pERQRWKjLH6Oz42o+WvqjK
- TLSH T17C156C03E5EBDA5DFB4B35ED6D2222A680CE772A8779415CE28D3C37E1CD89059C6B40
- MD5 SHA1 SHA512 SSDEEP TLSH
mod_d1kamon.6.29/fonts/NotoSans-Regular.ttf
- SHA256 fe8c022f48d8dd29f17b744d16f9346f4357e16f7d4f7be58b000ae7c291b614
- MD5 f46b08cc90d994b34b647ae24c46d504
- SHA1 f04a504e2078d6c01b3bf453c0d18c4f77c2133b
- SHA512 f07f34ea964ed286686cdcb911a1648b8d6542228c1d31de73d119bd7433c9ef4b30a2ee370ba22a737f6c0a37445e88929edef74aca1ad07f23f32699a35fb7
- SSDEEP 6144:ZHTBip3A0PZd5Y6fo9ta8q00a4BZK1qFvlrc9dFlrelqAxndY18tLAmQphGtzDAd:ZH3R6fMylridLe/ngSLAmQ60/pTc6K3g
- TLSH T149D45C43EB6ADE8DD2061FBC56B3939263B8BC756FAF830BD5416927F8CB0C04945588
- MD5 SHA1 SHA512 SSDEEP TLSH
mod_d1kamon.6.29/fonts/NotoSansArabic-Regular.ttf
- SHA256 90f50de40af560ad55f2fcf460af8205f842b534b057bd8b8bcf7d3e10d3223a
- MD5 75527903c6a793772b02807c5343f4c8
- SHA1 456e74b0805d1931a7786d3d04673a3b02dd4dd3
- SHA512 8a652d822ee34062cdbd9cfab1bea9d58f210ccdd2f57166d87dba91a1037a6080a36571326a0e7dbbfb33fa6f774e62ffaa698c2bda7a25c77ab363c643c315
- SSDEEP 3072:abbSZGNc3gpjMjc6OQqyg4urmVD9df06HJcYdt:anuGy3gpwIyggL06ph
- TLSH T18D044C03E5A3DFC4EF061DACD7B162AA3A5ADC3C973B538FC9A8151BE0CB1405C96658
- MD5 SHA1 SHA512 SSDEEP TLSH
mod_d1kamon.6.29/fonts/NotoSansCJKsc-Regular.otf
- SHA256 2c76254f6fc379fddfce0a7e84fb5385bb135d3e399294f6eeb6680d0365b74b
- MD5 6d30d01b9b25bd766898ecba71d5cd3d
- SHA1 d577bdc302c03212e1d05fd3f808657a71edea0c
- SHA512 547b4700975a76d0d96699d19723fce097ec6fde09bba0020bcfdd9b47db197b9e79ef782484e906a951577d772b77ea3e705c68105754b9c6521a6f2c907ff8
- SSDEEP 393216:4YvxIQAf3jPhZIuF5M9SRODMhLF1bVOVQmdzmZKkS/MJd63upqSumqjqS8UU:/ITfzJGgqI15OVQmdzyOMJ8+pfejbU
- TLSH T146F6122F61BDA824D964E1703953E45A7AEA045C064FE1F8E4936A3378F52343BED7C2
- MD5 SHA1 SHA512 SSDEEP TLSH
mod_d1kamon.6.29/fonts/NotoSansSC-Regular.ttf
- SHA256 d45f67f0a7c0ca3f256950777ce6a61cc7ce5f9696d02900cbbaac25f8aa7d16
- MD5 21e0367704b0b4fb503fed27c3372cbc
- SHA1 19e013bd11fb2ea6b895f113e4d9d5a7b5c15547
- SHA512 4206fd897a59f1d162d7fa2cc3915a991c7acda03e325bbfa346c3644e9b79527c28637b0c8a0a0d7b8041ba3f3a2adc75fc1ae73c4c5bbe01d2cb6e533c00fd
- SSDEEP 196608:wGyc7iEp2yRSAVjEiaqXFSHRGn0xpfpoPt9WIPIsHqaagSb+kPaY/R:OGn0TpoPLDanykNJ
- TLSH T1EEB669C716AD3D8B45A137BC544190ACF1CFD82DAB99D3F48DD7FC9A00964821D82BBA
- MD5 SHA1 SHA512 SSDEEP TLSH
mod_d1kamon.6.29/fonts/NotoSansSymbols2-Regular.ttf
- SHA256 f67f40c65f929f029827ab37cfdc4897dfd9ae3c28d9e98ba46e0d52e39eb97e
- MD5 d9100fb773ec2565167d866a1ef7706f
- SHA1 a19828fb102b1d60932b60f3f7450f4a73ea76d5
- SHA512 3e19cee235cd5b5bd369425eac4bc3702ff210cab09bfee86733f2724346ab3cfc6d54133527716356e7b997cdc964ddec20da3ebcf2fe86b074d52176c7f2d5
- SSDEEP 24576:HZKS3rqS0GBzfIlM7uWFHKgtuequ2KxR2se09i7f/yIEkKU+Vpf:H3ltuk2fse09yf/QR
- TLSH T1E645AF07E7C6FA65FF579AAC25602B13029F5067973B43AEE0823772DC9A4E01E5D183
- MD5 SHA1 SHA512 SSDEEP TLSH
mod_d1kamon.6.29/mod_d1kamon.ini
- SHA256 81536b620c77e2a8eda0554b42483ce0bd8a7b33ee53c5b38a81f3550e08d867
- MD5 3b3e836361dea0020005bc0cd91ac38e
- SHA1 4b7b99587815da1efa0e828ff5e7d71aa98d401b
- SHA512 647d51c772c65a04ebbcf8bfa08f2ec7ed086dc9973ab0e4d48637ba9c4c6d91a5829ff82369b189d13f60878773e39d6125d0dd1176619dd3a39c1d7ac392cb
- TLSH T121F0ACC74B0619E23FF18B17B22E91C1FB20831B48B3101215EA478D7074302A2F99AB
- MD5 SHA1 SHA512 TLSH
mod_d1kamon.6.29/version.dll
- IMPHASH 6178fba78ca0102116a02fd58b98fa66
- SHA256 158caa165bc2e65a7997cd5662f116c37ae90a0ea9c6272ee5a30cc30326cb19
- MD5 6e03ecaf813a5602555203e802e7e56b
- SHA1 9710c21250229cb2b305e77b94ea02b6b3c3ba08
- SHA512 e6e5d987b4b28ef3ba3dc3509a6e958f0f3edad268a53b014cb4a83fe82f9ce868a9591cbeca4960c6d149712377b7ec2167e4d5b2323b4f492b49ae9dbb82fb
- SSDEEP 49152:9ICVyO65Qckuycb18W3TaZXmaEF/DQhbG949O/TIkSILjfKmarMzsMHMMtUGM9:cxkW1sXj2/DQE949n9u9zAMHMOM
- TLSH T1A3F50241F152D0B2C8AA0170B27E7B6F993D1A24071855EBF3D039E85B702D3A7F6B56
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
757616
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
SetEvent
LoadLibraryA
QueryPerformanceFrequency
CloseHandle
CreateThread
ResetEvent
GetProcAddress
FreeLibrary
CreateSemaphoreW
WideCharToMultiByte
CreateEventA
QueryPerformanceCounter
MultiByteToWideChar
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
SizeofResource
VirtualProtect
GetModuleFileNameW
FindResourceA
GetTickCount64
DisableThreadLibraryCalls
LockResource
LoadResource
FindResourceW
GetCurrentProcessId
GetModuleHandleW
VirtualFree
VirtualAlloc
VirtualQuery
HeapCreate
HeapFree
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
HeapReAlloc
CreateFileA
GetThreadContext
FlushInstructionCache
SetThreadContext
OpenThread
GetSystemDirectoryA
WriteConsoleW
SetEndOfFile
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
FindNextFileW
FindFirstFileExW
FindClose
GetOEMCP
GetACP
IsValidCodePage
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
LoadLibraryExW
ReadConsoleW
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
GetFileType
GetStdHandle
GetLastError
GetFileInformationByHandle
Sleep
CreateFileW
WaitForSingleObject
SetThreadPriority
ReleaseSemaphore
WriteFile
HeapAlloc
ReadFile
SetFilePointerEx
UnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleExW
TerminateProcess
ExitProcess
FlsFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
RaiseException
InterlockedFlushSList
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
user32
SetClipboardData
GetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
GetCursorPos
DefWindowProcW
CallWindowProcW
PostMessageW
DestroyWindow
MessageBoxW
CreateWindowExW
UnregisterClassW
RegisterClassExW
GetAsyncKeyState
SetWindowLongW
VkKeyScanA
GetKeyState
GetWindowThreadProcessId
ScreenToClient
GetCapture
ClientToScreen
IsChild
TrackMouseEvent
GetForegroundWindow
LoadCursorW
SetCapture
SetCursor
GetClientRect
ReleaseCapture
SetCursorPos
imm32
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
d3dcompiler_47
D3DCompile
d3d11
D3D11CreateDeviceAndSwapChain
dxgi
CreateDXGIFactory1
GetFileVersionInfoA
GetFileVersionInfoByHandle
GetFileVersionInfoExA
GetFileVersionInfoExW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeExA
GetFileVersionInfoSizeExW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueW
Name
.text
Size
903KB
Virtual Size
902KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
139KB
Virtual Size
138KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.fptable
Size
512B
Virtual Size
128B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=36, id=259, version=33145,
count=180, id=261, version=33145,
count=28, id=260, version=33145,
count=26, id=259, version=35721,
count=15, id=260, version=35721,
count=73, id=261, version=35721,
count=17, id=257, version=33145,
count=182, id=1, productName=Unmarked objects,
count=17, id=265, version=36248,
count=1, id=256, version=36248,
count=1, id=255, version=36248,
count=1, id=151,
count=1, id=258, version=36248,