Oathbound-0.7.0-Standalone.zip
- SHA256 a2e83352ab7904e35496d7f45f1f83891b56bc3dbbb918970cdc80dd816e5e60
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BepInEx/plugins/WarriorRpg/Warrior.Core.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
BepInEx/plugins/WarriorRpg/Warrior.Core.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
BepInEx/plugins/WarriorRpg/WarriorRpg.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
BepInEx/plugins/WarriorRpg/WarriorRpg.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target Oathbound-0.7.0-Standalone.zip
- Size 52KB
- Sample260916-xx1gbada39
- SHA256 a2e83352ab7904e35496d7f45f1f83891b56bc3dbbb918970cdc80dd816e5e60
- MD5 9b92c186934e9a2e50709a5527a78828
- SHA1 43610321f901e8729a856b9bb0ae90e40da7a093
- SHA512 c32d3db7c289cb976a7a00f78b45263bc4de4eae663a9ac49d9fa815a67eea4e487fac27437386ace413c6e8bfee243a8233c795972d788d49327483f4356581
- SSDEEP 768:CC5w2v+aJQnqzZQEYnVi6Heme7M3CqGdaxlA0uXrni+QvPNRYrZlJHfs7NVZPfca:TTQqz5F6HnJvurkv1RsvfsLZfc15URb
- TLSH T1D833F1E12C0E9C1BB115A2752E3B2718A7089252546FF1CD9A3F7CEF8AE814F7493188
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/BepInEx/plugins/WarriorRpg/Warrior.Core.dll unpack001/BepInEx/plugins/WarriorRpg/WarriorRpg.dll
File Explorer
-
Oathbound-0.7.0-Standalone.zip.zip 52KB
-
BepInEx/plugins/WarriorRpg/Warrior.Core.dll.dll 37KB
-
BepInEx/plugins/WarriorRpg/WarriorRpg.dll.dll 73KB
-
CHANGELOG.md1KB
-
README.md6KB
BepInEx/plugins/WarriorRpg/Warrior.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 70b9208fa02b6cbeda62f2b567b3c9fe90f528eb1f60937ae6553990cb9eda31
- MD5 15deb4c09b8fbcf66b6d7e7d92b97b26
- SHA1 f116a2644d2ee075d63f6c9ace968abe284047df
- SHA512 39ce8ede080416f9f710fd7935aa1068710a5196de949f943e1b1d1894cb0c9fccf3ee44006e063e488c1fba04b80a9a820505a29e6fb6c27eee3425b92a5c15
- SSDEEP 768:I96/0ULqbfM3RDQCbaR3HmOpYAa5ztI+p/bRTR8LN0gStqhoqnnCZ9:I9/ULsE3eCbIpm4AbRON0g0qxnCD
- TLSH T111033E5167FD4229FAFB6F34ADB421200AB7BC8AAD36D34E5611215D19B2B80CD61F33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
43726
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Warrior.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
35KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/plugins/WarriorRpg/WarriorRpg.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fb2eed7018b394df9e0fb5a6b8d14f31cf3f1674978fcf429182a58b9ac2662f
- MD5 eed6405d2d54af947e0b2aef154369c7
- SHA1 e576fccce8eac9ba2c37de0722b0aafd69f8226e
- SHA512 18f52dfe1a0de6e9e1bce0ec93b1e4d8f784558c40dd8846aa0f6a24b817e42abd02b35a2b882d3cc61e41f09030ee9693edb19b2903ebc549d042f3c930b5c3
- SSDEEP 1536:yvW0mXStuzy0RYoxZlndu289yqUw1Z3jXIqZcEMZpGKUGLwC6PI:g3mXbOar0289A+jXIqWEM/GKbLwFI
- TLSH T11B73492433FC5926E8BF9F7EA8B0255517B6BA179833D34C1C92B0FC09527C29A21797
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
80986
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
WarriorRpg.pdb
mscoree
_CorDllMain
Name
.text
Size
71KB
Virtual Size
71KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
900B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
CHANGELOG.md
- SHA256 6faf78e9268d12215234c512c82046709013885616ba5e869b5f438718a8c940
- MD5 4591ea48db1ae4ea1c754dc7548253e2
- SHA1 2339830a6bd427357a2d9148d9b215c6629995ae
- SHA512 fd6c5c9dd4d15f437d663fda7cbd5d5bd5eab9297c56a5ba34cd9db5b79f2194792530b0f3dc83f8b1c32b57ce2f1447040efd8a0138aaa519d4510c5eae31fe
- TLSH T1A2316623C302203B0696456B20D930D19E79A1ACA7162DF640DF67485B8906C47BF6E6
- MD5 SHA1 SHA512 TLSH
README.md
- SHA256 dab1c2b76f2d39f0a980111e22e900b4066b6ef48debcc0f299a8657172d143a
- MD5 4fb929d0dc83f1baea4964b64882fafc
- SHA1 8f4602029a1b503713a4d3345efafc69a57ad623
- SHA512 b9d95952a4986914eee763d2cd359eec564a870a2b26ae63b80409150600a5e9f036a9dc7aaebc612c6506ff88e79aac120ce8d60db783338dbb8f61e12438d4
- SSDEEP 192:HwvU5K5MR0pk4VBswYDqU63UsJQFCyHQu:UIVR0p9FHJQ0ywu
- TLSH T10CE1C667A350327F268303BA72CA33D1EB36D064B22519A284CE559C331D5B945BF6EA
- MD5 SHA1 SHA512 SSDEEP TLSH