SerLO_PLay_GamES_v3.1.1.zip
- SHA256 ace3fd9df123eb3a2adbf33fb8a4173ca341ee2c78cc5da20910873f7ec7970f
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SerLO PLay GamES.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
SerLO PLay GamES.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
15 signatures
150 seconds
General
- Target SerLO_PLay_GamES_v3.1.1.zip
- Size 17.8MB
- Sample260802-yyfc7sfm71
- SHA256 ace3fd9df123eb3a2adbf33fb8a4173ca341ee2c78cc5da20910873f7ec7970f
- MD5 5dfcdf41ed7490a7f0aecc65d99f9b0d
- SHA1 57d5cce1c143d0e52e45bb0695eee75f0017b3aa
- SHA512 d334e3945f0b8c175b98341351c0432fab781057e0021ad2142c8f595d4fb02e79605bfc50b4bda61a0d5b0107b50d3c2a9a460201f32582cabc93c205d084a5
- SSDEEP 393216:ZIFOUw0iNu+PRJ8umMB0BqKlmcEqqnOKqP5CBhfjxJ6FllwG:VNtBmCD9e1KrhfAuG
- TLSH T19D173387A5F14299B0C446B695E13B218C4DFB543B3C8AD6CAD88B7660B02DF2F59CDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SerLO PLay GamES.exe
File Explorer
-
SerLO_PLay_GamES_v3.1.1.zip.zip 17.8MB
-
CHANGELOG.txt6KB
-
Leeme.txt4KB
-
SerLO PLay GamES.exe.exe 18.1MB
CHANGELOG.txt
- SHA256 f7bbe2f7a5e466328d72a864f6ea3af9a37165d5783bcd002e182b0c93c20b68
- MD5 f87021c4ca00447ebe3cf78cc74d64b8
- SHA1 746974b8635acb0fb2715685010dbbc3b098df18
- SHA512 550aa785f469544a86c021b1f5bf609fb0f6fc2ae5cadb76f2037d30bb93e3e7d5ecabbe399a4f299df4d2697ef548f7f19f7a2dae0f5a174d7491b07e46e358
- SSDEEP 192:bP85ULDgnjyZtnGbQwq05++zEyXQKq2F7/:bsODK6tiAyXQKq2J/
- TLSH T1A7E1B7A5838EFF9306B30647C247E637934052A8751F819D70EE836C238999DDB5EA6C
- MD5 SHA1 SHA512 SSDEEP TLSH
Leeme.txt
- SHA256 7bdc3ff4ebb705c52392dddb99329e0d1cd955c59f121dee87ee87dd376e810c
- MD5 ae8dce3b35b10a9817b3963711c28315
- SHA1 296fb5a5ee2f633a93e730c4a299a959dc578db0
- SHA512 833ac10e19e5a2467440036c184d197ee67ad05269e71ac10cd0f020f4d90363651ac0bb8c957ef4c08625db27ba3f71abf170445878339c29f9c2813ed5f211
- SSDEEP 96:xQrwPln0p9aEUmPo2qHFniBjLBix06/pUDS1DJnBLNxUJwWw/ijOZ8yWFwy:7WmaPgpiLm06BpBLYOZR4
- TLSH T1D1A16415968BDDA162B1C30386C2C67BE1949694301CCA9A70E6173C329CFCDDD9EE9C
- MD5 SHA1 SHA512 SSDEEP TLSH
SerLO PLay GamES.exe
- IMPHASH b9cb6be441f595d4370ca22ff548e6be
- SHA256 aac22535d2916307b0315fa536c4da18c28a614abb59ecf7d8ef2cf171dcc96a
- MD5 aa665085e74e5776ce10421e3c48113a
- SHA1 6fd48787c4e28a699802bf2226ed942bd28247ad
- SHA512 9211bd5aa87d76ec2c66e4c82de9e19c96b3001108da689730e803e037f0b7b0535cce2ce5fbdeaa2de88695c511f6621149f9e9de49d455a6dd3fbed8ab1173
- SSDEEP 393216:UOdT2s7f2Qs57zcFYLLVM5gKP+QimhFZUl/WpnYZp9YzqM8:hfoaYLJHVa5JnYwG
- TLSH T17E1733C2A0D40155D6844F7446A1FE306629BFAA3E3C458F46E07F7677B1BCF2C29A89
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4448
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
api-ms-win-crt-convert-l1-1-0
mbstowcs
wcstoul
api-ms-win-crt-heap-l1-1-0
_set_new_mode
calloc
free
malloc
api-ms-win-crt-private-l1-1-0
__C_specific_handler
wcschr
api-ms-win-crt-runtime-l1-1-0
__p___argc
__p___wargv
__p__wcmdln
_cexit
_configure_wide_argv
_crt_atexit
_errno
_exit
_initialize_wide_environment
_initterm
_initterm_e
_set_app_type
_set_invalid_parameter_handler
abort
exit
signal
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__p__commode
__p__fmode
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vswprintf
fwrite
puts
api-ms-win-crt-string-l1-1-0
_wcsdup
_wcsicmp
iswctype
strlen
strncmp
wcscmp
wcslen
wcsncmp
kernel32
AddDllDirectory
CloseHandle
CreateDirectoryW
CreateFileW
CreateProcessW
DeleteCriticalSection
EnterCriticalSection
FindResourceA
FormatMessageA
GetCommandLineW
GetCurrentProcessId
GetEnvironmentVariableW
GetExitCodeProcess
GetFileAttributesW
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetShortPathNameW
GetStartupInfoW
GetStdHandle
GetSystemTimeAsFileTime
GetTempPathW
InitializeCriticalSection
K32GetModuleFileNameExW
LeaveCriticalSection
LoadLibraryExW
LoadResource
LockResource
OpenProcess
SetConsoleCtrlHandler
SetDllDirectoryW
SetEnvironmentVariableW
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TlsGetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WriteFile
shell32
CommandLineToArgvW
SHFileOperationW
SHGetFolderPathW
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-environment-l1-1-0
__p__wenviron
Name
.text
Size
71KB
Virtual Size
70KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
156KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
18.0MB
Virtual Size
18.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
108B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ