Overview
overview
3Static
static
3penith - C...sample
ubuntu-18.04-amd64
1penith - C...sample
debian-9-armhf
1penith - C...sample
debian-9-mips
1penith - C...sample
debian-9-mipsel
1penith - C...sample
ubuntu-18.04-amd64
3penith - C...sample
debian-9-armhf
1penith - C...sample
debian-9-mips
1penith - C...sample
debian-9-mipsel
3penith - C...sample
ubuntu-18.04-amd64
1penith - C...sample
debian-9-armhf
1penith - C...sample
debian-9-mips
1penith - C...sample
debian-9-mipsel
1penith - C...sample
ubuntu-18.04-amd64
1penith - C...sample
debian-9-armhf
1penith - C...sample
debian-9-mips
1penith - C...sample
debian-9-mipsel
1penith - C...sample
ubuntu-18.04-amd64
1penith - C...sample
debian-9-armhf
1penith - C...sample
debian-9-mips
1penith - C...sample
debian-9-mipsel
1penith - C...sample
ubuntu-18.04-amd64
1penith - C...sample
debian-9-armhf
1penith - C...sample
debian-9-mips
1penith - C...sample
debian-9-mipsel
1penith - C...sample
ubuntu-18.04-amd64
1penith - C...sample
debian-9-armhf
1penith - C...sample
debian-9-mips
1penith - C...sample
debian-9-mipsel
1penith - C...sample
ubuntu-18.04-amd64
1penith - C...sample
debian-9-armhf
1penith - C...sample
debian-9-mips
1penith - C...sample
debian-9-mipsel
1Static task
static1
Behavioral task
behavioral1
Sample
penith - Copy/.git/hooks/applypatch-msg.sample
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral2
Sample
penith - Copy/.git/hooks/applypatch-msg.sample
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral3
Sample
penith - Copy/.git/hooks/applypatch-msg.sample
Resource
debian9-mipsbe-20221125-en
Behavioral task
behavioral4
Sample
penith - Copy/.git/hooks/applypatch-msg.sample
Resource
debian9-mipsel-20221111-en
Behavioral task
behavioral5
Sample
penith - Copy/.git/hooks/commit-msg.sample
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral6
Sample
penith - Copy/.git/hooks/commit-msg.sample
Resource
debian9-armhf-20221125-en
Behavioral task
behavioral7
Sample
penith - Copy/.git/hooks/commit-msg.sample
Resource
debian9-mipsbe-20221111-en
Behavioral task
behavioral8
Sample
penith - Copy/.git/hooks/commit-msg.sample
Resource
debian9-mipsel-en-20211208
Behavioral task
behavioral9
Sample
penith - Copy/.git/hooks/fsmonitor-watchman.sample
Resource
ubuntu1804-amd64-20221125-en
Behavioral task
behavioral10
Sample
penith - Copy/.git/hooks/fsmonitor-watchman.sample
Resource
debian9-armhf-20221111-en
Behavioral task
behavioral11
Sample
penith - Copy/.git/hooks/fsmonitor-watchman.sample
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral12
Sample
penith - Copy/.git/hooks/fsmonitor-watchman.sample
Resource
debian9-mipsel-20221111-en
Behavioral task
behavioral13
Sample
penith - Copy/.git/hooks/post-update.sample
Resource
ubuntu1804-amd64-20221125-en
Behavioral task
behavioral14
Sample
penith - Copy/.git/hooks/post-update.sample
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral15
Sample
penith - Copy/.git/hooks/post-update.sample
Resource
debian9-mipsbe-20221125-en
Behavioral task
behavioral16
Sample
penith - Copy/.git/hooks/post-update.sample
Resource
debian9-mipsel-20221111-en
Behavioral task
behavioral17
Sample
penith - Copy/.git/hooks/pre-applypatch.sample
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral18
Sample
penith - Copy/.git/hooks/pre-applypatch.sample
Resource
debian9-armhf-20221111-en
Behavioral task
behavioral19
Sample
penith - Copy/.git/hooks/pre-applypatch.sample
Resource
debian9-mipsbe-20221125-en
Behavioral task
behavioral20
Sample
penith - Copy/.git/hooks/pre-applypatch.sample
Resource
debian9-mipsel-en-20211208
Behavioral task
behavioral21
Sample
penith - Copy/.git/hooks/pre-commit.sample
Resource
ubuntu1804-amd64-20221125-en
Behavioral task
behavioral22
Sample
penith - Copy/.git/hooks/pre-commit.sample
Resource
debian9-armhf-20221111-en
Behavioral task
behavioral23
Sample
penith - Copy/.git/hooks/pre-commit.sample
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral24
Sample
penith - Copy/.git/hooks/pre-commit.sample
Resource
debian9-mipsel-20221125-en
Behavioral task
behavioral25
Sample
penith - Copy/.git/hooks/pre-merge-commit.sample
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral26
Sample
penith - Copy/.git/hooks/pre-merge-commit.sample
Resource
debian9-armhf-20221111-en
Behavioral task
behavioral27
Sample
penith - Copy/.git/hooks/pre-merge-commit.sample
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral28
Sample
penith - Copy/.git/hooks/pre-merge-commit.sample
Resource
debian9-mipsel-20221125-en
Behavioral task
behavioral29
Sample
penith - Copy/.git/hooks/pre-push.sample
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral30
Sample
penith - Copy/.git/hooks/pre-push.sample
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral31
Sample
penith - Copy/.git/hooks/pre-push.sample
Resource
debian9-mipsbe-20221125-en
Behavioral task
behavioral32
Sample
penith - Copy/.git/hooks/pre-push.sample
Resource
debian9-mipsel-20221111-en
General
-
Target
penith - Copy.zip
-
Size
15.0MB
-
MD5
99d6b846b361a78f49fde604bff89bcf
-
SHA1
3cc1ec85e5f3962ede0345537963edf6b0e26e44
-
SHA256
d7c7dc14a135c7e722b0dad0e2492b1536d73a1c5c47148d2b5c4e8aeb6b856d
-
SHA512
6344fb895fb8dbb14c8a6627d34ee1ea2746bf64e1e578c2977848e35940dc38665cf7158ef83e7276761b4b14a4971d7bbbd96d94814f8413eb8f5151c10bc4
-
SSDEEP
393216:Mc9BkYtwUZDMgiJBEX+EUs1QbUSdVE829zIPfKvcprPBeF:M0kgi2Os1Qs8298Pivcpro
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/penith - Copy/Release/external-aimbot.exe
Files
-
penith - Copy.zip.zip
-
penith - Copy/.git/HEAD
-
penith - Copy/.git/config
-
penith - Copy/.git/description
-
penith - Copy/.git/hooks/applypatch-msg.sample.sh linux
-
penith - Copy/.git/hooks/commit-msg.sample.sh linux
-
penith - Copy/.git/hooks/fsmonitor-watchman.sample.sh linux
-
penith - Copy/.git/hooks/post-update.sample.sh linux
-
penith - Copy/.git/hooks/pre-applypatch.sample.sh linux
-
penith - Copy/.git/hooks/pre-commit.sample.sh linux
-
penith - Copy/.git/hooks/pre-merge-commit.sample.sh linux
-
penith - Copy/.git/hooks/pre-push.sample.sh linux
-
penith - Copy/.git/hooks/pre-rebase.sample.sh linux
-
penith - Copy/.git/hooks/pre-receive.sample.sh linux
-
penith - Copy/.git/hooks/prepare-commit-msg.sample.sh linux
-
penith - Copy/.git/hooks/push-to-checkout.sample.sh linux
-
penith - Copy/.git/hooks/update.sample.sh linux
-
penith - Copy/.git/index
-
penith - Copy/.git/info/exclude
-
penith - Copy/.git/logs/HEAD
-
penith - Copy/.git/logs/refs/heads/main
-
penith - Copy/.git/logs/refs/remotes/origin/HEAD
-
penith - Copy/.git/objects/pack/pack-f25fba618ca460bfb5af789aca13371844786f6b.idx
-
penith - Copy/.git/objects/pack/pack-f25fba618ca460bfb5af789aca13371844786f6b.pack
-
penith - Copy/.git/packed-refs
-
penith - Copy/.git/refs/heads/main
-
penith - Copy/.git/refs/remotes/origin/HEAD
-
penith - Copy/.gitignore
-
penith - Copy/.vs/external-aimbot/FileContentIndex/c8ca8720-ddf9-4df2-80ca-2c8d7876cf2f.vsidx
-
penith - Copy/.vs/external-aimbot/v17/.suo
-
penith - Copy/.vs/external-aimbot/v17/Browse.VC.db
-
penith - Copy/.vs/external-aimbot/v17/Browse.VC.db-shm
-
penith - Copy/.vs/external-aimbot/v17/Browse.VC.db-wal
-
penith - Copy/.vs/external-aimbot/v17/Browse.VC.opendb
-
penith - Copy/.vs/penith/v17/.wsuo
-
penith - Copy/LICENSE
-
penith - Copy/README.md
-
penith - Copy/Release/external-aimbot.exe.exe windows x86
b7031bafbdc796be1f6b422477c28669
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteProcessMemory
Module32Next
OpenProcess
CreateToolhelp32Snapshot
Process32Next
CloseHandle
ReadProcessMemory
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetModuleHandleW
GetCurrentProcess
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
user32
GetAsyncKeyState
msvcp140
_Query_perf_frequency
_Thrd_sleep
_Query_perf_counter
_Xtime_get_ticks
vcruntime140
__current_exception_context
_except_handler4_common
memset
__current_exception
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
_controlfp_s
terminate
_seh_filter_exe
_register_onexit_function
_set_app_type
_initialize_onexit_table
_configure_narrow_argv
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
__p___argc
_initialize_narrow_environment
_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
__p___argv
api-ms-win-crt-math-l1-1-0
_hypotf
_CIatan2
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 916B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
penith - Copy/Release/external-aimbot.exe.recipe
-
penith - Copy/Release/external-aimbot.iobj
-
penith - Copy/Release/external-aimbot.ipdb
-
penith - Copy/Release/external-aimbot.log
-
penith - Copy/Release/external-aimbot.pdb
-
penith - Copy/Release/external-aimbot.tlog/CL.command.1.tlog
-
penith - Copy/Release/external-aimbot.tlog/CL.read.1.tlog
-
penith - Copy/Release/external-aimbot.tlog/CL.write.1.tlog
-
penith - Copy/Release/external-aimbot.tlog/Cl.items.tlog
-
penith - Copy/Release/external-aimbot.tlog/external-aimbot.lastbuildstate
-
penith - Copy/Release/external-aimbot.tlog/link.command.1.tlog
-
penith - Copy/Release/external-aimbot.tlog/link.read.1.tlog
-
penith - Copy/Release/external-aimbot.tlog/link.write.1.tlog
-
penith - Copy/Release/external-aimbot.tlog/link.write.2u.tlog
-
penith - Copy/Release/external-aimbot.vcxproj.FileListAbsolute.txt
-
penith - Copy/Release/main.obj
-
penith - Copy/Release/vc143.pdb
-
penith - Copy/external-aimbot.sln
-
penith - Copy/external-aimbot.vcxproj.xml
-
penith - Copy/external-aimbot.vcxproj.filters
-
penith - Copy/external-aimbot.vcxproj.user
-
penith - Copy/main.cpp
-
penith - Copy/memory.h
-
penith - Copy/vector.h