Chara.zip
- SHA256 14b7a191f2a2d0cab5b916889c456fafa86c1d980cc7d2595ea174608cba5f0d
Password
Chara
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Chara/Chara.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
Chara/Chara.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
9 signatures
150 seconds
General
- Target Chara.zip
- Size 11.3MB
- Sample261024-d18sbasshx
- SHA256 14b7a191f2a2d0cab5b916889c456fafa86c1d980cc7d2595ea174608cba5f0d
- MD5 d5fe8b58e4cc05743da0a4a07fc63e49
- SHA1 200ebdcd103b98a3b15d504c30e12baeda79f233
- SHA512 7a9d0447cc9d61482be2c8909ae7f1f653773ceea3a79ca57ee2450e01e345eebb555b10e9c788b776ff8ebbf53f7394489f9a0c3d503379d3e861f08289267e
- SSDEEP 196608:RIZYPbdX+esFee/fGP1V/nBBf+6zJMYj2LEeRy0OfiAedvhqh07KW49jsKibpgIW:Rdzh/btp5Wededvhqh07KWmjs3bpgz
- TLSH T179C633C29163BF17DA1097633E3A7AC35889C06B8BD1774A963C4C800BEBBDD593694D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Chara/Chara.exe unpack001/Chara/GameData/data.dll
File Explorer
-
Chara.zip.zip 11.3MB
-
Chara/Chara.exe.exe 2.9MB
-
Chara/GameData/....txt3B
-
Chara/GameData/data.dll.dll 109KB
-
Chara/GameData/errorbugfix.dll13.4MB
-
Chara/GameData/fixlags.dll976KB
-
Chara/GameData/mainmap.dll2.0MB
-
Chara/README.txt1KB
Chara/Chara.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 35c5a7e33d914ba133450bea8c077f683889e99d5326f9ab4d045d3367431bd4
- MD5 29714d1f654ccd01bdab9082cbaa5512
- SHA1 60b0f6771bfbb6db460e97056fad61684dd68ee9
- SHA512 7af00543a51cf55bea53c0a0e0b13fda1f50eb609987237b87eb0a642304efe3dda8588810d375819c49dcd7b86a91d4b7e80c482c16750a273cfbe3b43189ea
- SSDEEP 1536:70lY8QpaMvgbqGqepD2CtluqlhT7zHI5nKpa:70lY8QpaigGGHxXlo
- TLSH T185E5BA38F2250878E19FF4798842BC0E769D79D3D7D285A027BC19544FE9FEE9C82681
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
Chara
Minor OS version
0
Major OS version
4
Entry point
2914174
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
2.8MB
Virtual Size
2.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
166KB
Virtual Size
166KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Chara/GameData/....txt
- SHA256 ab5df625bc76dbd4e163bed2dd888df828f90159bb93556525c31821b6541d46
- MD5 2f43b42fd833d1e77420a8dae7419000
- SHA1 6eae3a5b062c6d0d79f070c26e6d62486b40cb46
- SHA512 3a8fb4b09bfb7b454177b044ed4854f4a2c3c18f5d6ef28be875f58d064ac9607cc8b11dc23e93a7a5f187ac277534e05658add66604b3bc03c6b76f8476925c
- MD5 SHA1 SHA512
Chara/GameData/data.dll
- IMPHASH 4634626f65d1259996bf5fc5d324a3d7
- SHA256 2cde6d3a161a7c7f9943d4928994b2128e797488dbdd705a8a7f72626a54731d
- MD5 a32ed60845dfc48c2731abea7534451d
- SHA1 2a3a18eae58ced30241ab631af944cf71ffb1691
- SHA512 73e7ab1d07b396414312a1a90b0cb140c55e5117a53426ef40268c70d656c3ab691ba42e88968c85ac4b0878302f2c65a0a6d14daca82debc66a985379dea6ca
- SSDEEP 1536:OpSqZfdIz3hyQXtIimshZ5j7oqjP4A7zWCl7MbiRhRxCWelL:yNdepIiroqjP4AxRxChL
- TLSH T152B31989BFA1DC97D915433945E6C335273DF2806B878B173E2695391E27BA0BFC4282
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
Chara
Minor OS version
0
Major OS version
4
Entry point
5088
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
__iob_func
_amsg_exit
_initterm
_lock
_onexit
_unlock
abort
calloc
free
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf
user32
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
EnableStartButton
KeyboardProc
UnhookKeyboard
keyboardHook
startButtonDisabled
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
96B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
512B
Virtual Size
504B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
436B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
182B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
92B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
1024B
Virtual Size
784B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
39KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/31
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/45
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/57
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/70
Size
512B
Virtual Size
302B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/81
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/92
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Chara/GameData/errorbugfix.dll
- SHA256 31c8769f23e435dbaaa818e1b6f8368bad2c3837f53d394850809e3daa217882
- MD5 0b6dac156864e81c209a5e495ada49d6
- SHA1 80cf770740aa1269dd3ba4987feb2e44dcedb32e
- SHA512 a18b7ebf612d8b101de23cd91569b3edb994514b1f2cf9ece6804cacf3838b00b4ccb16ee9458f965b8f89bcd11ffbf520ef4e4f8aeca3af1735707d31e0ec03
- SSDEEP 49152:djbtMO5c6O0LIs7GNeQ1tXIFR3Ov3U7ptcKK+UN5a9C5LOIX72fUA6iTWTaiHcQn:8
- TLSH T18FE61251DB6F2FCE7D2C0D8D446F2E4A4C8D5E323C22C8F5DADF150B4229AD616A291B
- MD5 SHA1 SHA512 SSDEEP TLSH
Chara/GameData/fixlags.dll
- SHA256 582c9b1468cecf1971b5250df3e8654967bb2974f7fb84dbc68f43feb20d8a9e
- MD5 b0d2c8afc81cb5881867137a06cb047b
- SHA1 f19a8591a2413042cd06bdc2a6375489cdfc113b
- SHA512 8ff283dc22da04f3bc798159dc90132c2b86bac6c16653861b32e36ef9925cab6fc492b695b23c07390b0f2a5efd1959afc4b1d9c5da2d46d61df19c8f94542a
- SSDEEP 24576:Dy5KMjWcsmCl3NCIo7KeD0afJKyLsZgrqz9v+Bu0A8:6K4o0fPOK28
- TLSH T1EF2523F3AADDAE694470E725441BF04D34974BE7032AF8E79BC5F0CB0A9C743652294A
- MD5 SHA1 SHA512 SSDEEP TLSH
Chara/GameData/mainmap.dll
- SHA256 db54ee1bb3e5b66b4a222af087266f741f4e46a298aa263463ce9e0efb359ec4
- MD5 e6524f620e8d894b692ea08e67a62486
- SHA1 54fca1dc7b50dbba3ea809547226014135abc410
- SHA512 ed60ab10e62a4423ca8c8b123042724c2a42968040338cdc78be7034ab3e653bc40455eb50f69280aeb1d5274ba80cabb86e1817431c1c28da68e6d92fac95d0
- SSDEEP 24576:C026GYtnM/VAsO1upvM5pJzmLzT85r880aWu6mII02c2ui7GeHpTlqVbzc3OuXWV:CqttIIpJIvsIo6AQ2u8iVbAsp/Vx
- TLSH T1E6A50251DF2B2FDE2D281E8C456F6E554C8D6E323D22C8F1DA9F140B4238AD616B2D1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Chara/README.txt
- SHA256 1f6fc65d5d2c259483f10f02d277f36bbcbfeddc132b1378440fe14cd909b4c3
- MD5 b8f31e008d3857ee9ab5d9e73857ce52
- SHA1 4df91ede9e903bdf568b6cbbfc9313549a77ba20
- SHA512 686cca7880ed247d6230a7ac406c6c5450d466b106fc5d00becb41f35b40220cd5b94639caa67ab42a8279c5ef9d4459fe2766c9c09923cefffc554b64e68548
- TLSH T17521A92F6AA3052603791083A3828C27838224FEC8081206BC08AFAEB929A88721480C
- MD5 SHA1 SHA512 TLSH