Watchdog (Steam) (v260418).rar
- SHA256 1ea5d76c2448881b0d7409d307ea0fb3f1745e8c9110b70ce0cb8af2c9b768ff
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Watchdog (Steam) (v260418).rar
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
6 signatures
150 seconds
General
- Target Watchdog (Steam) (v260418).rar
- Size 371KB
- Sample260925-xsl35avard
- SHA256 1ea5d76c2448881b0d7409d307ea0fb3f1745e8c9110b70ce0cb8af2c9b768ff
- MD5 d30dbd276c7e428acc0fb5dcb858e171
- SHA1 9e274e0aaa29f0061a188475e6788ccbd70cbd84
- SHA512 b49bf65bb78a82b992a967145a1e4eeec6fc36ca9faddd4ef73250bce061b23797460fdf0dca8a5378b3a524c9ddc0e4e0cf6c54e9f21090036fe07a1ff59c4b
- SSDEEP 6144:7iJ712+3scjDrWyxrG4A5puRlpSGqdRrgHHcFWdKUidlnBjaZ55ToeiFlrmbzaJ+:7qrZnrZlRJVOgHHoWK3QaeGlRJyKge4J
- TLSH T12A8423EA15E71E469B3375B91D0D0169094EECD3EAACD605185B6C8C722CCF16FFAAC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/MetroFramework.Design.dll unpack001/MetroFramework.dll unpack001/Watchdog (PC).exe
File Explorer
-
Watchdog (Steam) (v260418).rar.rar 371KB
-
MetroFramework.Design.dll.dll 16KB
-
MetroFramework.dll.dll 333KB
-
Watchdog (PC).exe.exe 1.3MB
MetroFramework.Design.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0a4a96082e25767e4697033649b16c76a652e120757a2cecab8092ad0d716b65
- MD5 ab4c3529694fc8d2427434825f71b2b8
- SHA1 7be378e382e43eae84f1567b3570bca9a67e7697
- SHA512 02d7935f68c30457da79ad7b039b22caed11d8aedfec7c96619ac6da59ceb7c5e7a758dced64ec02d31c37a2befccdc8eb59be9e2dc849aa2bc22fabb5fa00a5
- SSDEEP 384:HYAB8KPALBamLG3gckiBTVU6sgFf5L7WTOYKpKG4rw:HyLBamS3gckiBTVkgiVXr
- TLSH T114723205B2FC423AE7EFC5336BA945503D74A90DA872CA1C1CE80AF959F67424AD1F53
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
22382
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
e:\Development\Desktop\Github\winforms-modernui\MetroFramework.Design\obj\Release\MetroFramework.Design.pdb
mscoree
_CorDllMain
Name
.text
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
MetroFramework.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4714b42d2e55a81981578929eecf9414dad3a559abcd3c826115b15c17092859
- MD5 617ae03c3c36db5f70305e59d2d4af2f
- SHA1 e19e9325571b1bc7a3d78accf12abf6ee4c153ea
- SHA512 baebb769e6efb2f94909ede332094cc7b5543744c0211949ece4a838dc058dac55a4de2d1979c6ddeefe5213e0641b9a642541638c8f8c5c29d4496e68b025b3
- SSDEEP 6144:y3UsWfsnYH3sQhCtuyDa6lPfuHvUNxqsvallj:yREkuqrl5vI
- TLSH T1FC745C1073D9853AE6EF8236F061186187F3E546F5BBDBA969CDA0ED0F9772049013A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
346318
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
330KB
Virtual Size
330KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Watchdog (PC).exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 c20709cda0f46bffdbdf41bafcf035f29d76098f2932690c5001001dec2fdee6
- MD5 8ccef046276622bd8be295f4b90f0300
- SHA1 31d6c1cf9a4b9bc5df63b69d98b5d3e0c1d843c8
- SHA512 14a4864271405afe45b3a733cdfe13005eb47ffec9f890f63a594eb447df288cf5a3ffebc10351ba2014e5f3225de104fd54f4e465be79c9080accd90b3fb9d3
- SSDEEP 24576:sRnjpVA4A7QM8Pgi8Pr8PA7wDMX8Pp8P:MjBXU8uw3q
- TLSH T1945519C536D4AC27D77C2BB580B398EC4F2C990FA9229B5F988924DEADD4F43254311B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1204166
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
164KB
Virtual Size
163KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ