theneverwheretales[.]zip

General

Target
theneverwheretales.zip
Size 418KB
Sample261003-xsrnlsvgpf
SHA256 1a0751cf28108c90bda9552124ff95f6d218d80a85096d47ac9caa38d6def685
MD5 31a36a494844ccba7ce52eda543cde29
SHA1 de997ded54ee60936785431aab0a039be34e47e1
SHA512 c6ee70cd76649d75068e8b3202505b0ce9b5e03e190792f85e6638bb809baa210f16519d8f71ddce44fce2e2c97fd83557534f3eaf0570674593ea45e4a55b98
SSDEEP 6144:L4kOsogi0adxErSkIxfAEvPPt6kpjPPiTmFoKE87V8PajHIpkNPDwXIwPDnEFwn:c2oXc6FXPJprRDqiPrQbnEFW
TLSH
T1729423DA51440E3C921FA0A1FF17B8A1AC1E52D4B0B4366ADB6F547BDBC6014B88BC63
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/虚域传说 - 第1卷全CG修改器.exe

File Explorer

theneverwheretales.zip

.zip 418KB
虚域传说 - 第1卷全CG修改器.exe

.exe 464KB

theneverwheretales.zip

SHA256 1a0751cf28108c90bda9552124ff95f6d218d80a85096d47ac9caa38d6def685
MD5 31a36a494844ccba7ce52eda543cde29
SHA1 de997ded54ee60936785431aab0a039be34e47e1
SHA512 c6ee70cd76649d75068e8b3202505b0ce9b5e03e190792f85e6638bb809baa210f16519d8f71ddce44fce2e2c97fd83557534f3eaf0570674593ea45e4a55b98
SSDEEP 6144:L4kOsogi0adxErSkIxfAEvPPt6kpjPPiTmFoKE87V8PajHIpkNPDwXIwPDnEFwn:c2oXc6FXPJprRDqiPrQbnEFW
TLSH
T1729423DA51440E3C921FA0A1FF17B8A1AC1E52D4B0B4366ADB6F547BDBC6014B88BC63
MD5 SHA1 SHA512 SSDEEP TLSH

虚域传说 - 第1卷全CG修改器.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 f6b06a9bc76115412a7b63b25efd2fb63616820934e14cb260c498c9623eeb1e
MD5 02775448c959587aeaa1bf593f5d1f4e
SHA1 4dc639b716a373d940863e99e270804e44cd55c2
SHA512 b049075f7dc551c5540bc45f1738446937c577eefb10b463a026f2b124283aea116955b7701e0ad177d8fb0ae6ebb9a023e8c9b35186e3a34ea19b5f1a9a622b
SSDEEP 12288:s+fu+EPupEPk7VyKyLXs0+fu+EPupEPk7:V3pEeyKyLXsd3pE
TLSH
T18BA402877FD80175E7CFA4796CB28002A37EB9A34621BA1C7F5D54CE2F11A408664FAD
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

278446

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

theneverwheretales.zip

虚域传说 - 第1卷全CG修改器.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

theneverwheretales.zip

虚域传说 - 第1卷全CG修改器.exe

mscoree

dotnet