not_birds-Overstocked-1.2.1.zip
- SHA256 ce27063ff9c7696ef91a1e23cbf203116b9a30a38ac370853e9fc46c50fce47f
Static task
static1
1 signatures
General
- Target not_birds-Overstocked-1.2.1.zip
- Size 74KB
- Sample261011-2ckycaab28
- SHA256 ce27063ff9c7696ef91a1e23cbf203116b9a30a38ac370853e9fc46c50fce47f
- MD5 d29a2e4d119fe61c7a99b89385a5d1ca
- SHA1 95650c3b97816ba3e555ed48361e0e9d515dafb1
- SHA512 281e3f29ed5781f455c5c31c8ea5f6653a7ad479b0cc48d69b925be4ab6f5a5409df5790510e3841b1d247c68e9f69cdf7894c0226d0964cc6e53dcfd9e676df
- SSDEEP 1536:cJMqh5/s11Z8awDDGJBH+Dvp+Bj8cry5x4WLYT6GkvtAxszNyGpzLTnx4Wzmmto:YMqhxUZ8iHwxmj8DvLYu5qxeTLTCzH
- TLSH T182730263233E596DDA2F4AFAD03DA6B1BE3088205518EE5930D4D3AC7B506C2F5B8358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Mods/Overstocked-Mel.dll
File Explorer
-
not_birds-Overstocked-1.2.1.zip.zip 74KB
-
Mods/Overstocked-Mel.dll.dll 19KB
-
README.md504B
-
icon.png.png 63KB
-
manifest.json290B
Mods/Overstocked-Mel.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ded90d70ba026de4476a619152145ef8df4e8dfd897513692169cb524f99c0c0
- MD5 e2a0df24d0abeec8354b57ce88ec92e5
- SHA1 8b308e9085d9b50db24085218acfb48622b76e15
- SHA512 38ad2cee686776eda58b4c174370163739d8b194037d26b131c1c49b1f30f702b2c04b89210f468372b9e20e54cca0ab10d9e72e11188e242a55d8bd4c478394
- SSDEEP 384:frlF3RJiFYZjEOLtOZdQgizLkJAKejhC4H7:frlBR0FYZjxLtOZWnk167
- TLSH T1AA922B6062FD87F6E5FA9BBA9EF2218107F0E2431915D70C2F8DA0DE0D677452A60367
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
25846
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/home/notabird/RiderProjects/Overstocked/Overstocked/obj/MelonLoader/netstandard2.1/Overstocked.pdb
mscoree
_CorDllMain
Name
.text
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
900B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
README.md
- SHA256 7e066a9409641df9eca59343292c9b3fa5718455bbb861fde60ba2ca97b5db3e
- MD5 dfa6422e2e27fdc08fa14f448cd6b6a2
- SHA1 e01306cdf79b81f6b02b490b0ed61716b62a4a49
- SHA512 8a1c34dfa9cf27c374452db3339634c7db32cf0956a7f98e99719ebe391a9fc9d77f61b0019aa208f88e78e948500c74c2ce2b402838f03ecb91ab384fe5c166
- TLSH T164F005FC255117B63377914DC500D7CCBFBC81A66754E790281D45345CC69314139345
- MD5 SHA1 SHA512 TLSH
icon.png
- SHA256 e5cc9664e66c991a3c63fe044ba6a1a1a8109e333fac25f7e0172f37e0539e47
- MD5 9272b4f926024ad2d57e4334654ee00d
- SHA1 64f332e028f50112d6d00f1ee471dfb9db044cf1
- SHA512 c76b2f19f1e9e532cda2a0697353198415458d112b38ab36f996c3116a3ebbdb412a8b716d366db3a515ce053882734043fe5ed0e2631fd622066bcce8d4c956
- SSDEEP 1536:QGJBH+Dvp+Bj8cry5x4WLYT6NkvtAxszNyGpzLTnx4Wzma:THwxmj8DvLYugqxeTLTCza
- TLSH T143530213533A1E7D6A1756AAF039E6B17D748C60611DEE6421D493DC3B906C2F1E8329
- MD5 SHA1 SHA512 SSDEEP TLSH
manifest.json
- SHA256 f1c27837632c781cf3ab8644fc7ff4abecedb661caa33b890c70641b10a5f102
- MD5 fc7957fdce7e221fb521b21e6fec1e79
- SHA1 0847fa4f092a790eb8a0b1b8e0f9aed21a6f6f07
- SHA512 f71e8d840b1891d31350bea351f4ff885f44d5d065e43efe0014a175bc392ebe12ff775651270c6b97a6096fccfa3ecaac43d31ee7f54d64758cdd14f33b5146
- TLSH T1E7D0EB2609204733B38B03A4C920429633BE0E2F4A82A51C5F4F0058864CBE7D13120E
- MD5 SHA1 SHA512 TLSH