13f59988549dfdeff9b112f2bca8551e976f51a203d2f1f3b7fcf867e077fa95
- SHA256 13f59988549dfdeff9b112f2bca8551e976f51a203d2f1f3b7fcf867e077fa95
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ConfigOverhaulCyberpunk.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
ConfigOverhaulCyberpunk.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
非凡软件站_软件下载_下载首页.url
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
非凡软件站_软件下载_下载首页.url
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
非凡软件站下载帮助.url
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
非凡软件站下载帮助.url
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target 13f59988549dfdeff9b112f2bca8551e976f51a203d2f1f3b7fcf867e077fa95
- Size 28KB
- Sample261030-mj2gcaeb97
- SHA256 13f59988549dfdeff9b112f2bca8551e976f51a203d2f1f3b7fcf867e077fa95
- MD5 7343c3a4b47483229cb58b089ece1e2e
- SHA1 06a9a16bedc0f64aeff0b542eb580d811ccc167f
- SHA512 617748eaba22dab82653113d301ed939435e5b778b13e219f91d91c9936677700b74205e2b01075b042e8b84dfb02445194c7e3268dcfbfe7f2e1a56c940b693
- SSDEEP 384:tS8rZJ8PBu6dwSsiJL5f1l8HGkVLkyXrA/+ZbV7jbRPybQ4cCY+2/YOGiswgQD1v:XrZVeHNGHGkpkcr0a1zffJGT211CVwJ
- TLSH T199D2E1D1AC5501B9D631E5FDE22499D7300CE2AF5EB808027DBCE0302D9F7916AD631B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/ConfigOverhaulCyberpunk.exe unpack002/inifileparser.dll
File Explorer
-
13f59988549dfdeff9b112f2bca8551e976f51a203d2f1f3b7fcf867e077fa95.zip 28KB
-
ConfigOverhaulCyberpunk.exe.exe 45KB
-
inifileparser.dll.dll 28KB
-
非凡安装使用说明.txt1KB
-
非凡软件站_软件下载_下载首页.url48B
-
非凡软件站下载帮助.url57B
ConfigOverhaulCyberpunk.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 070ce3b9a500ee8c7dae703d9ebdcdb431aef8145211cb2541e5d846a2e3d248
- MD5 aed3ddb8c0a4dbb5de99b3e0d7d56616
- SHA1 080829cadc256021d3f552e44082556b55145d88
- SHA512 e19fb54e6b5bbff10a3a76d550e98d2140ab54112440735198f9658bc8f20f2053918cd15b0634887175882fc6eeeaf94b1278da70a604d2775b288cdb625605
- SSDEEP 768:SY4EX52BxncLv4TiOVAJJX4E2oPPuoCk0s3/QYnYA:SzBxcT4TP2R93uTcPh
- TLSH T1FF237C2237DC530AD2FE5BBA2E7040850AF9FF656770D69E2D84204E59B23815712F3B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
50346
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\Development\Projects\Visual Studio\ConfigOverhaulCyberpunk\RadeonGameListRemover\obj\Release\ConfigOverhaulCyberpunk.pdb
mscoree
_CorExeMain
Name
.text
Size
41KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
512B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
inifileparser.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f81ba0dd987d46a67b1879ef4ee11c14f32940ff211eace347a68e42bf272554
- MD5 2e77f841dbf271fd1ffc460bfd87a1d5
- SHA1 18125861f0519cdf643560c0a988bf70c87d47b3
- SHA512 556e4133d28935c13d93e5190178804b13c98334332316ced50b878f35730b92c62f0440f1c2e1bc3f5c36eaeced5ca794cd2fdf9ad5434af6194940aed0e346
- SSDEEP 768:3FBulP+gma9/YzvPtAlzIzlpAuJa2kIhW9:1B8yaWzvPtpAEa2kSQ
- TLSH T1ECD2F80127ECC33BC7AE4778F472125102F4EA5A7123DF4A9EAC60477E13B946A5636B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
34674
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/Users/ricky/development/personal/ini-parser/src/IniFileParser/obj/Release/INIFileParser.pdb
mscoree
_CorDllMain
Name
.text
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
936B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
非凡安装使用说明.txt
- SHA256 bddc9efd0910facb19cdaf91ce110258d0e309014a963924bd86fcf1b3c6c25c
- MD5 3c67717dbfa96d0caded91b27bed8a05
- SHA1 f7407de60e3a6096a7a95ef05a1fb0d1ee780f6e
- SHA512 6b601c37ef8a9012d0586c58a3cfb7e3e64055472d9a07f80960b01979e3e167e40512c2ed6694f940044468c88eb21ce8cb5b5cba8c866c5702172606c134b6
- TLSH T11321868C5F978B4DC74DDD18C12118A8C6432AE2729C59962C512185FF2A4FAF14F24C
- MD5 SHA1 SHA512 TLSH
非凡软件站_软件下载_下载首页.url
- SHA256 b227ced1365a3af0d13ba414813c41f844972b2629e5cef2d3041fe7a546cec9
- MD5 bdc6522ac9e56bf6fb89885a913ede8e
- SHA1 7dbc318215c8ceb26bc2e50aee08914b48109047
- SHA512 7ce6afb2405a476c1701778226da56efa0473682e0ecb721812f7444635c4e84c5e18f32a507f058da6b04e7d0ea2b2d5a228e850ae81f81128602e95753ed6f
- MD5 SHA1 SHA512
非凡软件站下载帮助.url
- SHA256 4615652904207d6692b4b708164bdc92c4ab4e62e984c325a78fd346c9b54298
- MD5 76e8d0d978aed1857724ab053c27c713
- SHA1 0da7578bc10626797c2bfb61730c0387dc1205fa
- SHA512 112c467fd5e9278fd332c3c915f3eca69dcf41c4c93433a581adc6dfee0e1537ea2976e18a1868cbc1f157e14a495ab59a549becddf516201f76b7ed03747ad3
- TLSH T1729002968109C4958706468C5472D554D81375E4D457C4E5D1949A04594A5A545C5608
- MD5 SHA1 SHA512 TLSH