Anime Shop Simulator.7z
- SHA256 95042af274c506fdc6640e5d95022907e8f28c167644d77a2df3eb87d8ae8629
Password
pm2g
Behavioral task
behavioral1
Sample
Setup.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Setup.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Setup.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
12 signatures
150 seconds
General
- Target Anime Shop Simulator.7z
- Size 757.9MB
- Sample261024-cvvstsfs6t
- SHA256 95042af274c506fdc6640e5d95022907e8f28c167644d77a2df3eb87d8ae8629
- MD5 79bcd925b2d40b95367cb4aa2ea6eba9
- SHA1 257f563b81d24ce7ea7638f079b8abc0b19a4009
- SHA512 95424e7c1c3b51e73e411e8d229f7128618fb3107d1985d93a0b7555e881cb39033395cab508be8aac94c0902fa61844c82d951ccadac9d392489d9eda23f3ff
- SSDEEP 12582912:nIkxL6Q+PHPUl/6eUTjg9ryJqinzmeomP1DsiQ385xzb2YQDUSS4QOY64GWLqjpu:nIklSH8l/6eUTjayJJzFoM2e94Q1HLqs
- TLSH T17D89338C25E69B34BCCBC95316539617AC1B7F41CBD2EFAF78866620B635CC40E53988
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Setup.exe - Inno Setup is an open-source installation builder for Windows applications. 1 IoCs
Inno Setup installer
resource yara_rule static1/unpack001/Setup.exe innosetup
File Explorer
-
Anime Shop Simulator.7z.7z 757.9MB
-
Data1a-01.bin5.3MB
-
Data1b-01.bin46.0MB
-
Data1c-01.bin1KB
-
Data1d-01.bin2KB
-
Data1e-01.bin242.3MB
-
Data1f-01.bin153KB
-
Data1g-01.bin446.5MB
-
Data1h-01.bin12.7MB
-
Setup.dll2.7MB
-
Setup.exe.exe 2.1MB
Data1a-01.bin
- SHA256 f57901c8f57b032dea62a1bd6357f19ed6cbd2953925aec0064348c673ef0a82
- MD5 730d3bcc06312ac32049eda869035091
- SHA1 aa273d34f16a96e018a068972d87ff53372dd298
- SHA512 2946ec3f5b25c4e46b11dff749a7506f37765297b66a0701d4b28471895baa30eb5b793a10b23a0d9dfa637733d45adf8b43156a603fc643729ef75aa3855e0a
- SSDEEP 98304:zkVKO3Hnv4lHEU/WCEvk06W0alQHbiR8bV5JSsVVj2i7QY4mG3vu/c:AVlHnwREU/sf6WyHXLJS22is7zu/c
- TLSH T11C46334A44FA4FB4ACC61D2E6F5D71E701B2C69AE2CB4BE16A324D54042D330FDE85E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Data1b-01.bin
- SHA256 ccc2e328111590aa9a29e8f181bf5247dc7293b42128c8b3d0b38f67282d9412
- MD5 dc8763f8dd9b109efe07c864ed9fb773
- SHA1 bdd624ec02642f200a15caad29f7a49f1ac84bf2
- SHA512 4d5971dc1396c4ee5e2831e35fc16d91fbfc7924775f46218566d5f4ab030f7ee8de315c1dd71ae49186c6fca86a6a350dd7bc81393df39d14856691a47a8cd1
- SSDEEP 786432:fgXIvXlPq1UcNtTah7N+v30AYIaG//NFEC5iFkptJos++EqNob1AacQXv/uwwNiy:dvXlPTcfWpikDe/NyCYkrDRtyOacE/up
- TLSH T1DCB733A7958DFB19CA30684DF8767AC28478CBBB04709A3E77F5107A382379115BBB05
- MD5 SHA1 SHA512 SSDEEP TLSH
Data1c-01.bin
- SHA256 98ad3218405bdef42eccb8a2ee984079f0727e2707dd8c436809248cc219cad7
- MD5 f4c9976346b601f11ccfea36eb4e6b73
- SHA1 5307701627afaa8f612c1c77a992868994774e7c
- SHA512 a907114a628646c11b804439ef561e693ab4f03c5a969aaafc242b95d8b2f44503173e1832c9a41c30b510d76f7cd3d876397b6106353045b7c1497104fd5b42
- TLSH T1C7114281E27669EDDA3291722D43DB30B694A8FB400D8F72D06A455921B93450CD8CA5
- MD5 SHA1 SHA512 TLSH
Data1d-01.bin
- SHA256 7a65a16f6f617e3bb96922a337a0dd74334e2bc697778043d8cbba000c6d717c
- MD5 5519834c92e33b522e475960368a87e2
- SHA1 daebabf7d3c417f7ae7979f49c79a18539d46aa1
- SHA512 3b1cb29a7bcdc727f584ab5e1288ea1ff5459633bc60c2b4557b9c2f56a2d771fd9c41255eb1cc95fe9e1eb1385b324c73b7d47c068d88ec19b17d43a044ba22
- TLSH T1A0516B08D031290EC43EE17332934FD04BD8329DA56D8D3513AEE5E90327162D563C2F
- MD5 SHA1 SHA512 TLSH
Data1e-01.bin
- SHA256 5fee7874344d55ceeee8b52654b6f39aac2246f314314019d733366bd8bbe435
- MD5 d2726e782988e7e5e199e536c9e244ad
- SHA1 fe72c0121a36b28a15aa64cdd1e61dd1761beec0
- SHA512 1e21b2015f8505eddf23167d913398674045dc4799021ba58a8f7a655e0643a37100c3b1fa7169ec576d01e1b2adb7ac89ba96d929ddfbdd0e2bb960801404f6
- SSDEEP 6291456:vQycu1OswC3jyL4oUB0o1cwUQvIGwrVMdyGE7kLMlI:Ib03o4X0o16QQVVmyGE7kQI
- TLSH T100C8332F61B73A09C2AE7C538BE93E780ED58BEEA2D98DF7254010776121BE904577C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Data1f-01.bin
- SHA256 15d515c06b1b9b7155dbb70d97556de2b656389510a4320963b1ffb8c91a75b6
- MD5 a9b4c6fa85183e8639f759d617e22c21
- SHA1 ac2e3ae71850898ad46e5cbffc7bf0367a7a44d3
- SHA512 247f7340e22a258aea780e6ebdb7e1f20871a3f263826542342dccea9f141bf0bc2e3007f9363bba067459162d056238c21ae947a6c63b81485688149143713a
- SSDEEP 3072:wuEml9C8OW0LXsvWvNqJR/Cjc503iuxaVUwCg8xYn2KfAbh4Ya92rUNYwPV:wYlrGW0NyRazyuMivgOYnHfASYed
- TLSH T122E313BA2982C2D690B5C9D1A2DDAE194BFA1267DAB1CB1305234DDF1F3C3F8C565230
- MD5 SHA1 SHA512 SSDEEP TLSH
Data1g-01.bin
- SHA256 f17ef6c182833789cfbefb13e48c1d7795cc1d58064b46c35b1b1cf33a0bd961
- MD5 b1d4f70b26fc4c2aa1eb845de32fa94b
- SHA1 4edb5b7974cb39ecc7ef0d4b3f6af7f8847ff25a
- SHA512 0dbbb791940bb72b9aec80e338b9f4396090245a68dcfbd6f8182ad4f2c6571ffc518d4afb4e5ddec42e8c6a2da9ec190875afb51bf421a1879bee2b808d09a7
- SSDEEP 6291456:WKup7I6GX7SM0XtjXKYehcl2kOw7VEmigdgbf90OsSBbyoYHSDzLO+uX4rT7OFgl:9upSXIVbiyFV3iT0O1BbyFkvOtcOycq
- TLSH T1FF29336EFB0354D8B2784AEE6518551AC5BEB036AB7284AD0CD1B22F7F232C59F5143C
- MD5 SHA1 SHA512 SSDEEP TLSH
Data1h-01.bin
- SHA256 6eeee9e0dbaaf433f9202d68e2fcbbbbaf1fb812c2035f5c4564b59e91c83c21
- MD5 d201e8e6d5bf7d06c4d25a83a87cd30a
- SHA1 0830daa59db6e528e53bbaefa7dc8bf5cbb25cfe
- SHA512 78d264e44497bfd85413febf2c9eaafd06d77bff624d17d3dc8d7928b906148e9a041c44066c9a64ef1731efb0b46415037689aba93dbf6012df39afe3e11c72
- SSDEEP 393216:Cy4newIIcRNQA542aDDYOFBbW+lHCYSRQ+T7Qv:Z4newvmNQAFaYowmHCY/+T7Qv
- TLSH T120D6330CD02CB97B56A452374ADCD0D76F0D624A2CE620A1058DC65CE7D9EBA62E43FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup.dll
- SHA256 d21446378424c695a3d180118c9e4d440aa0498b723a162eee758348acb31651
- MD5 2e63ae4ad21729331c4c5fd6e2fc9019
- SHA1 8ce7298d903c2d24dacc6ef1c46d1e38bd507818
- SHA512 b712014092db36eacf509e394154f9b660ced012bdd2b7ccd2c9aaf164ba456ddff516fa05b035f2bf2ab086364dfaf7b97ea58aaa2b68dbcd19f978979e1dce
- SSDEEP 49152:9as99Fcc/35Wlt4WF1lDIsw+o/iMtHjNGBJcgan0iJX3NTrqgQThEq:99cc/35yF19Hw+oxjQBJTafTNQT3
- TLSH T1BAD5337A0F317916638F9DAE397510715F914C4AD57D8790288E7E8702EBB40BF3AA2C
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup.exe
- IMPHASH 5a594319a0d69dbc452e748bcf05892e
- SHA256 85768b4e5c7305817141cdd6118d4f7f81c724214b6f9febe0cba486f96d9ab9
- MD5 7fa301994fa86180f0ee01081fccd20b
- SHA1 779f9d64003aab3005b77a9f23700e37169ea849
- SHA512 9f0a826321c66a340fd47c88cfb6c32a8fd9b19be3f023780c952f6d59b0f5aa6225313ae1372cfc8cac3c87be94457a26e85fa7ed7b1d734b25445ec9fb6d17
- SSDEEP 49152:MqeNV26ezLPYArt9uD9SAbIrAbF0b61a8RHDt8gR6:ZEUPIOjuDUlrWUg8R
- TLSH T15BA5D03FB268653ED9AE0B3245B39350997BBB61A41B8C2E47F0094CCF665701F3BA15
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Inno Setup is an open-source installation builder for Windows applications.
Inno Setup installer
Password
pm2g
Minor OS version
0
Major OS version
6
Entry point
745196
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
kernel32
GetACP
GetExitCodeProcess
LocalFree
CloseHandle
SizeofResource
VirtualProtect
VirtualFree
GetFullPathNameW
ExitProcess
HeapAlloc
GetCPInfoExW
RtlUnwind
GetCPInfo
GetStdHandle
GetModuleHandleW
FreeLibrary
HeapDestroy
ReadFile
CreateProcessW
GetLastError
GetModuleFileNameW
SetLastError
FindResourceW
CreateThread
CompareStringW
LoadLibraryA
ResetEvent
GetVersion
RaiseException
FormatMessageW
SwitchToThread
GetExitCodeThread
GetCurrentThread
LoadLibraryExW
LockResource
GetCurrentThreadId
UnhandledExceptionFilter
VirtualQuery
VirtualQueryEx
Sleep
EnterCriticalSection
SetFilePointer
LoadResource
SuspendThread
GetTickCount
GetFileSize
GetStartupInfoW
GetFileAttributesW
InitializeCriticalSection
GetThreadPriority
SetThreadPriority
GetCurrentProcess
VirtualAlloc
GetSystemInfo
GetCommandLineW
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
GetWindowsDirectoryW
VerSetConditionMask
GetDiskFreeSpaceW
FindFirstFileW
GetUserDefaultUILanguage
lstrlenW
QueryPerformanceCounter
SetEndOfFile
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
SetEvent
CreateFileW
GetLocaleInfoW
GetSystemDirectoryW
DeleteFileW
GetLocalTime
GetEnvironmentVariableW
WaitForSingleObject
WriteFile
ExitThread
DeleteCriticalSection
TlsGetValue
GetDateFormatW
SetErrorMode
IsValidLocale
TlsSetValue
CreateDirectoryW
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
GetUserDefaultLangID
RemoveDirectoryW
CreateEventW
SetThreadLocale
GetThreadLocale
comctl32
InitCommonControls
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
user32
CreateWindowExW
TranslateMessage
CharLowerBuffW
CallWindowProcW
CharUpperW
PeekMessageW
GetSystemMetrics
SetWindowLongW
MessageBoxW
DestroyWindow
CharUpperBuffW
CharNextW
MsgWaitForMultipleObjects
LoadStringW
ExitWindowsEx
DispatchMessageW
oleaut32
SysAllocStringLen
SafeArrayPtrOfIndex
VariantCopy
SafeArrayGetLBound
SafeArrayGetUBound
VariantInit
VariantClear
SysFreeString
SysReAllocStringLen
VariantChangeType
SafeArrayCreate
netapi32
NetWkstaGetInfo
NetApiBufferFree
advapi32
RegQueryValueExW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegCloseKey
OpenProcessToken
RegOpenKeyExW
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Name
.text
Size
718KB
Virtual Size
717KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
27KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didata
Size
512B
Virtual Size
420B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
154B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
Virtual Size
24B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
93B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ