Naisho-no-Natsuyasumi_Win_EN_Full-rip.zip
- SHA256 100e84435946adcb2e338538273c2afa8cba1d828757fa3f5066789405b4404e
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Naisho no Natsuyasumi/live.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Naisho no Natsuyasumi/nainatu-eng.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
General
- Target Naisho-no-Natsuyasumi_Win_EN_Full-rip.zip
- Size 73.0MB
- Sample260825-s6y8dsbp81
- SHA256 100e84435946adcb2e338538273c2afa8cba1d828757fa3f5066789405b4404e
- MD5 8fe670a5a82a1005776e637b391fda69
- SHA1 516c891d2642912b7e9054717aadfde382b61b9e
- SHA512 0cd06ed04a57d5eddaf5cd176ee067d1827c1fe177ac9edc394682c261c512d42550e21e4175f5582a3065672f85ccb41a98a29aa48236385febff8e671d8583
- SSDEEP 1572864:BQ3ira8QgDMGw3367qt9/Z556pnHMtYTyr8WNFJ/hWLiOF:Bja8QgFwmq7b50e1BhWLrF
- TLSH T17CF733BCB170AF7BA7BB3163F724A5BEE2CD329450AB1451CAAC3255160EBEF419C105
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Naisho no Natsuyasumi/live.dll unpack001/Naisho no Natsuyasumi/nainatu-eng.exe
File Explorer
-
Naisho-no-Natsuyasumi_Win_EN_Full-rip.zip.zip 73.0MB
-
Naisho no Natsuyasumi/live.dll.dll 352KB
-
Naisho no Natsuyasumi/nainatu-eng.exe.exe 74.9MB
-
Naisho no Natsuyasumi/readme.txt1KB
Naisho no Natsuyasumi/live.dll
- IMPHASH 2820eb1ee1a0c814d30ab4a783655cb8
- SHA256 b178aa29db4552ba47039c8d6435e289b2a12d4ea30ba4ef16cc054c81a406ef
- MD5 745f8dc4998ef2305ca7d89e788c9964
- SHA1 834a92b2f850469a9d70dcd696222612661a0c5d
- SHA512 4e4b8daa0292e9a1cf71619992d387a061f6a44cadc79ef1b0838b3c735ca74a76aecd0ec62dd684b8c2cccc51e74c677c08b6cbf629861fa364176443df4509
- SSDEEP 6144:awKshtJOgrKf0nx8g5LVTBAam2PTIUssm5DjUONN8MR0:jccKf0Cv1e/ssm59h
- TLSH T111748D12A6D204FCC9CA1535542E373FD679DA4E0256CEC3D364DEFA6D22D80EE3924A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
46569
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
winmm
timeGetTime
timeKillEvent
timeBeginPeriod
timeEndPeriod
timeSetEvent
kernel32
CreateSemaphoreA
ReleaseSemaphore
GetThreadPriority
FreeEnvironmentStringsA
MulDiv
GetModuleHandleW
DeviceIoControl
GetCurrentProcessId
GetTickCount
GetLocalTime
QueryPerformanceCounter
GlobalMemoryStatus
CloseHandle
SetFilePointer
ReadFile
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedIncrement
InterlockedDecrement
CreateEventA
GetModuleHandleA
WaitForSingleObject
SetEvent
CreateThread
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
ResumeThread
SetThreadPriority
ExitThread
GetProcAddress
LoadLibraryA
FreeLibrary
Sleep
WaitForMultipleObjects
WideCharToMultiByte
MultiByteToWideChar
ResetEvent
GetLastError
RtlUnwind
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
ExitProcess
SetUnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetDiskFreeSpaceA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
IsBadReadPtr
IsBadCodePtr
SetStdHandle
FlushFileBuffers
GetStringTypeA
GetStringTypeW
GetSystemInfo
LocalAlloc
LocalFree
GetComputerNameA
user32
DefWindowProcA
RegisterClassA
CreateWindowExA
IsRectEmpty
DestroyWindow
SetForegroundWindow
UpdateWindow
ShowWindow
SetWindowPos
PostMessageA
GetWindowPlacement
GetQueueStatus
PeekMessageA
MsgWaitForMultipleObjects
PostThreadMessageA
RegisterWindowMessageA
DispatchMessageA
gdi32
CreateCompatibleDC
SelectObject
DeleteDC
DeleteObject
CreateDIBSection
advapi32
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
GetUserNameA
ole32
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoInitialize
CreateStreamOnHGlobal
CoCreateInstance
CoFreeUnusedLibraries
liveFinal
liveInit
liveOggGetAutoRepeat
liveOggGetBuffPos
liveOggGetBuffSize
liveOggGetLen
liveOggGetPan
liveOggGetPosition
liveOggGetRepeatPos
liveOggGetVol
liveOggGetWritePos
liveOggIsEnd
liveOggIsPaused
liveOggIsPlaying
liveOggPause
liveOggPlay
liveOggSetAutoRepeat
liveOggSetPan
liveOggSetPosition
liveOggSetRepeatPos
liveOggSetVol
liveOggStrGetFormat
liveOggStrGetLen
liveOggStrGetPos
liveOggStrGetSize
liveOggStrRead
liveOggStrSetPos
liveOggStrmanAdd
liveOggStrmanDel
liveOggmanAdd
liveOggmanDel
liveOggmanGetCount
liveOggmanProcessEvent
liveOggmanRestore
liveOggmanSetUseThread
liveOggmanUpdate
liveScreenGetVideoMode
liveScreenGetVideoModeCount
liveScreenSetVideoMode
liveVersion
liveVideoGetAutoRepeat
liveVideoGetDC
liveVideoGetDIBInfo
liveVideoGetLen
liveVideoGetPan
liveVideoGetPosition
liveVideoGetSourceHeight
liveVideoGetSourceWidth
liveVideoGetVisible
liveVideoGetVol
liveVideoIsEnd
liveVideoIsPaused
liveVideoIsPlaying
liveVideoNeedPaint
liveVideoPause
liveVideoPlay
liveVideoReleaseDC
liveVideoResume
liveVideoSetAutoRepeat
liveVideoSetPan
liveVideoSetPosition
liveVideoSetRect
liveVideoSetVisible
liveVideoSetVol
liveVideoSuspend
liveVidmanAdd
liveVidmanDel
liveVidmanFreeDIB
liveVidmanGetDIB
liveVidmanPause
liveVidmanProcessEvent
liveVidmanRestart
liveVidmanResume
liveVidmanSuspend
liveWmpGetAutoRepeat
liveWmpGetBuffPos
liveWmpGetBuffSize
liveWmpGetLen
liveWmpGetPan
liveWmpGetPosition
liveWmpGetVol
liveWmpGetWritePos
liveWmpIsEnd
liveWmpIsPaused
liveWmpIsPlaying
liveWmpPause
liveWmpPlay
liveWmpSetAutoRepeat
liveWmpSetPan
liveWmpSetPosition
liveWmpSetVol
liveWmpmanAdd
liveWmpmanDel
liveWmpmanProcessEvent
liveWmpmanRestore
Name
.text
Size
236KB
Virtual Size
234KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
76KB
Virtual Size
85KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
16KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=29, version=9178,
count=1, id=28, version=9178,
count=4, id=19, version=8022,
count=15, id=19, version=8034,
count=190, id=1, productName=Unmarked objects,
count=12, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=45, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=13, productName=Unmarked objects (old),
count=126, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=36, id=14, version=7299,
count=31, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Naisho no Natsuyasumi/nainatu-eng.exe
- SHA256 a3ce5e934f855649352a49eb91ce9d75c21773252317c54b3de79f96ec855f4d
- MD5 bf420ce454c438c4c6078c4dc4c3efc7
- SHA1 4a14ff0b1bfeb719d56c4ff60a2837a134fdd0cc
- SHA512 3b3b99dd092a5ae98a5a62da96167719c0b4970a7f9b6e3be5396d0c9e60f8e7dc485bce9040496113bddab7485730f8915d263b8818170c2c3d5fbef4001ac9
- SSDEEP 1572864:KHWz43yTaM72u5MyNlSjLp0OUo0dTBmXFvTLfl/Pe6VKB83x5zyDbnW:UWz4iaM7zMLVneNMFrL1VKB8TyDbnW
- TLSH T1C5083317FA818E7BC05725349C1F97AD7268FA582F34968337A42F5C5F3B3913829286
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
1
Entry point
1655744
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
12KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
16B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
120KB
Virtual Size
119KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
50KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Naisho no Natsuyasumi/readme.txt
- SHA256 01434a89b4695beef24947702f5f1cd6a5900a9b4f8b487b37bd93350defeef3
- MD5 6b8156d9b11ff6f017c0b34faf960ebe
- SHA1 4f95db89ece19d3dfa40a4fa55c387e4cf3bfd77
- SHA512 e93eecc21c3fbd8abb2fe1b293b1f9ab9e1b857caa653843e0865185e39fac45d493c05afbbec5389b8bd6ad84b93da578542e0893b62996b79c2a5388129121
- TLSH T14D31DCB84C97E91A411CF09DF177B641E337A7D7820A808BBD1DFED46B40B81968C68D
- MD5 SHA1 SHA512 TLSH