Undertale [Build 4279148].rar
- SHA256 269668dae4c9747ad78d994a8cda615093832ea7d1093e9066af451b44897281
Password
cracked-games.org
General
- Target Undertale [Build 4279148].rar
- Size 125.6MB
- Sample261014-1x73yaaw3j
- SHA256 269668dae4c9747ad78d994a8cda615093832ea7d1093e9066af451b44897281
- MD5 b001a5f787821b434c107daa9e17d7aa
- SHA1 600dc0a16e1cd5ade56e9de25bfb92cdbc3add73
- SHA512 313e02a01ad3f76b4a68ba35a949f7920226435fb13f2e19c145a4c9a985678d99b0fcb37919a8a16cf1ced3b23e5721996629a63a7574e3d704fee29e353e3d
- SSDEEP 3145728:GgQ476tLYKiP4Lw3sZuGwKxzXzxrZlfEhLbALwqB3pRz0:GgLWtcK6/MwKRDxFl8hPALwqBjz0
- TLSH T1105833C1B7CC0A725761A9910F2FEE45FF06A38DF5B81800C6D81189D9E58DA4B7E6B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Insecure Codesign Algorithm 1 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/Undertale [Build 4279148]/setup_undertale_1.08_(18328).exe - Inno Setup is an open-source installation builder for Windows applications. 1 IoCs
Inno Setup installer
resource yara_rule static1/unpack001/Undertale [Build 4279148]/setup_undertale_1.08_(18328).exe innosetup
File Explorer
-
Undertale [Build 4279148].rar.rar 125.6MB
-
CRACKED-GAMES.ORG.url194B
-
HOW TO INSTALL.txt973B
-
README.txt827B
-
Undertale [Build 4279148]/setup_undertale_1.08_(18328).exe.exe 126.7MB
CRACKED-GAMES.ORG.url
- SHA256 fe2e04580156349045e6ddba7a08eebf24ab062ab596b9e419ba32f11fa3c54d
- MD5 d128ec3a014b85be1d3b72fac80e0bc2
- SHA1 20838bb4567e39b450c513be238b9fc537eac5eb
- SHA512 d883d684b2d92499a7d8b37963d2bd57a49e9bb8cff600d68c14ea57eb83193a9438f9d11f56ba98ea87ed9998222412c3fa6b3029776271c987b37398d78300
- TLSH T15BC080F395458492D372D045F435BC84DC0EB15C4EFAC55C72D4ED9E5CD5013C881B49
- MD5 SHA1 SHA512 TLSH
HOW TO INSTALL.txt
- SHA256 041bff08f337937d8e570734e6eae5f2a93fe2f525cc94c0f50ef033749cf739
- MD5 31e192c0a7e6e43d1d757750dae9a950
- SHA1 0fe1885fc2381d7c024ec572228a01d7ba868538
- SHA512 10d60dfaf81ac9f6d3c4431ed55ce2a15c265f27af0ae58c283863d2cf4d4848b58c0b62e40fc3e13340e940427879e13214c5989d185ea342119ec11254d13c
- TLSH T1EE119E3F0947F3F67C122A9E872D1AC8606F7C15522242430FC9A5496E1E85CB1D60C2
- MD5 SHA1 SHA512 TLSH
README.txt
- SHA256 24e00d8955cb5b1aa5811a5fabaf65839243445a7d9923d076d842ce7b71af55
- MD5 83f848741166d912d40cbc2743d48ac3
- SHA1 92836bf1c711e44a4f77bcb02239717499ad6b06
- SHA512 fe980db4ebd26b96cd0849c109aeb0ae1a6a50af1173d5284351dd0311be22083a75ecae018790a4c49437f27e658bca93f2063ecc805f0a995de8af3539a8c5
- TLSH T1270127BF41823904B73295DE70213DD9F88FB11CAAA4586BB0D0D8568E8D4BF6451E9D
- MD5 SHA1 SHA512 TLSH
Undertale [Build 4279148]/setup_undertale_1.08_(18328).exe
- IMPHASH 20dd26497880c05caed9305b3c8b9109
- SHA256 21fbcab3c652d5af9efe57454d60d5a5057773e1c234ed16ae14233724502b44
- MD5 69a1054bcf85084cc4bc33e332f1844d
- SHA1 a3db1a7c5a07ea07c31d40ab4c7685215ac4f170
- SHA512 f57df05d2d5db04cb48a1d72070ac5d76ae29620cca314817fbfbb30d42c2150115ac510acb216095115c210fe2eee80575ffc78a36fd455e72e4de9492b4f81
- SSDEEP 3145728:WSHIqNWvNc0rn+0fslfSob+5Framz9LQMj5jMgQN7:WytNAfcSob2NaoLQ+7c7
- TLSH T187583306A48BCA71D215B3BD14934056BE5FE91ECAFE19206EE9D48D30F627118BD3E3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Inno Setup is an open-source installation builder for Windows applications.
Inno Setup installer
Password
cracked-games.org
Digest
48:33:22:66:9b:9e:dd:ba:39:5e:95:32:c3:d8:21:36:b9:3b:e7:b7
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=GOG Sp. z o.o.,O=GOG Sp. z o.o.,L=Warsaw,C=PL
Chains
Feb 2, 2018
CN=GOG Sp. z o.o.,O=GOG Sp. z o.o.,L=Warsaw,C=PL
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=GOG Sp. z o.o.,O=GOG Sp. z o.o.,L=Warsaw,C=PL
Serial Number
06:f5:6d:d3:85:38:01:8e:9a:31:24:87:96:e6:40:ab
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 21, 2017 - Nov 26, 2018
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=DigiCert Timestamp Responder,O=DigiCert,C=US
Serial Number
03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Issuer
CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 22, 2014 - Oct 22, 2024
Subject
CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2021
Minor OS version
0
Major OS version
5
Entry point
71644
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
user32
GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
TranslateMessage
SetWindowLongW
PeekMessageW
MsgWaitForMultipleObjects
MessageBoxW
LoadStringW
GetSystemMetrics
ExitWindowsEx
DispatchMessageW
DestroyWindow
CharUpperBuffW
CallWindowProcW
kernel32
GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
SizeofResource
SignalObjectAndWait
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResetEvent
RemoveDirectoryW
ReadFile
MultiByteToWideChar
LockResource
LoadResource
LoadLibraryW
GetWindowsDirectoryW
GetVersionExW
GetVersion
GetUserDefaultLangID
GetThreadLocale
GetSystemInfo
GetSystemDirectoryW
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLastError
GetFullPathNameW
GetFileSize
GetFileAttributesW
GetExitCodeProcess
GetEnvironmentVariableW
GetDiskFreeSpaceW
GetCurrentProcess
GetCommandLineW
GetCPInfo
InterlockedExchange
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindResourceW
EnumCalendarInfoW
DeleteFileW
CreateProcessW
CreateFileW
CreateEventW
CreateDirectoryW
CloseHandle
Sleep
comctl32
InitCommonControls
Name
.text
Size
61KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
21KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
8B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
107KB
Virtual Size
107KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ