1541442829_gameawards_ru_trainer+12.zip
- SHA256 f9dd2794b6cd57c8dd56cbf340771f16892b95cbe0b0bfc3a0f55c70b79acd79
Behavioral task
behavioral1
Sample
Call of duty world at war/Call of duty world at war.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Call of duty world at war/Call of duty world at war.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
Call of duty world at war/Call of duty world at war.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
Call of duty world at war/Call of duty world at war.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target 1541442829_gameawards_ru_trainer+12.zip
- Size 5KB
- Sample260910-ajm8hat1hx
- SHA256 f9dd2794b6cd57c8dd56cbf340771f16892b95cbe0b0bfc3a0f55c70b79acd79
- MD5 20917bbee516510cbf027b48e152e1e5
- SHA1 52297a5e4fc9ba7b54813b462050a72c0a092848
- SHA512 a3cc65d475c47b0f30eb656f28bd06ad8ef2e07792c6d3b2580c09dcd5e88a9ec3beeef64576ed50d289eb2c622c169928fa25a1b5a5463dd40788e503cdc007
- SSDEEP 96:svaVpuyUl0S25i1TEcmoxEONsN2I/MYIgz2Xfg4nX49g+xQe1J6C:sCVpIl0S2M4chdfahIgz2xnXghxf3
- TLSH T1D1B15C20C2464B5DF9D1FF7CDBE88E16B1AD53310718A442AB4531772CF3AF405665E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule static1/unpack001/Call of duty world at war/Call of duty world at war.dll acprotect -
resource yara_rule static1/unpack001/Call of duty world at war/Call of duty world at war.dll upx - Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/Call of duty world at war/Call of duty world at war.dll unpack002/out.upx unpack001/Call of duty world at war/Call of duty world at war.exe
File Explorer
-
1541442829_gameawards_ru_trainer+12.zip.zip 5KB
-
Call of duty world at war/Call of duty world at war.dll.dll 4KB
-
out.upx.dll 8KB
-
Call of duty world at war/Call of duty world at war.exe.exe 2KB
Call of duty world at war/Call of duty world at war.dll
- SHA256 ab2fe1f9f5f924937589a3a2a557378ed4446d0d8e829debb68f2dd8fe93cc07
- MD5 e6eae076cff19c56915311a758692603
- SHA1 71bfbb3574cff0150b19ca9c6378d091eff9d3b7
- SHA512 6f8591ef28a5c5a3c8f131926eda5108545bf2eba918256073f65e434b4595f599589dad5db25a8fce7b190e33df53e923d448b5141acb505653bb236fbdbee2
- SSDEEP 96:Qy9YDNvncd4vCaBAETQBgFQFON9ppbpj4B7acXaB+:hKDN7vCEAElJnFjPEaB
- TLSH T1C8914C9C332B393BCB4B023A235AE912BF68B22523FC15C0672D90675DB71288935A95
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
27376
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
UPX0
Size
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX2
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
out.upx
- SHA256 b7eded520fd5761f94440ebb3452126b82b04807b1e2a45198e79b26194ba395
- MD5 fb5d2bfebfb9ca491b688e3d2fbe8633
- SHA1 4781ca1adc1e116ac4ba4ef84cc63feb518e4dc6
- SHA512 8c285646de8ca53ec5e38f31ef86d38086bd775ed3589f14611292d594146574c289b07869582e0041e8b6563b73a46554ff8598d3468f074f35eabb5172b524
- SSDEEP 96:4foLhkIJ+dwzsnTZgZjOYSSCzagzMmH/eJ80wJ7bgm4S:4foFd+alIYBCHMmH/Cy7uS
- TLSH T1E7021E3107BB23F2D5A2A2B4243F5379013B6562A5B15E0AC7DEAD3727934909E37F24
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.code
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
524B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Call of duty world at war/Call of duty world at war.exe
- IMPHASH 7d988b1674e7a6b9609960b16b1e3c51
- SHA256 6e075157248473e92d0a96da7df0862a411825a334398ddfeb13b445441c4b8c
- MD5 da87c76b4678944e7a9c0f8905f89ebd
- SHA1 e958ba7ecfe5711de273ef7c79867034697c6d6e
- SHA512 f4c55d5c64ff8c915bae7f5d1e2bdcbf93c4c9582d699d7b1614a184152671d5a8fee48e1166f9c7bf541a56f660b61249ed53f9d19d7a86812dd8e7807bbb05
- TLSH T1F051C6630B642563D3F20B3189DFCB0B596398611A37CF1B44054A1A4E7034CADAE7B2
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
K32EnumProcesses
K32GetModuleBaseNameW
OpenProcess
lstrcmpiW
GetModuleFileNameW
WriteProcessMemory
VirtualAllocEx
VirtualFreeEx
LoadLibraryW
CreateRemoteThread
WaitForSingleObject
CloseHandle
ExitProcess
user32
MessageBoxW
Name
.code
Size
512B
Virtual Size
496B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
752B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
512B
Virtual Size
464B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ