Overview

overview

5

Static

static

3

a/cheateng...86.exe

windows10-1703-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    a.rar

  • Size

    8.9MB

  • MD5

    b19162ef94b1acc7ffc6b1e0831e0f88

  • SHA1

    4fd1c7ab628324aa866f79fdf7f25f572712ebc7

  • SHA256

    885454475645af0e651f666ba770c418405da6ff7bb312c6e0183f708182800d

  • SHA512

    faa87732b8d6ce8c087c369364cfa54b59c4bd7f921f662b8b948eedc77bb49f13bee03746b0764f18b739b64588207fd93a446a0b74bfec55ee1f48658c6bf2

  • SSDEEP

    196608:nMvQLjpOHPonc7Nu0aEockc6HctqJ5p5CHZIA1gkmL7j7iGruYDTblXZ:nMvQLjprn8Y0doVc0J5nGZIkg77j+Gyu

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • a.rar
    .rar
  • a/Cheat Engine.exe
    .exe windows x86

    f3b761357f57995818640e897710fe7c


    Code Sign

    Headers

    Imports

    Sections

  • a/CheatEngine.chm
    .chm
  • a/DotNetDataCollector32.exe
    .exe windows x86

    a85578274de3109b2acca3f7b4d07f78


    Code Sign

    Headers

    Imports

    Sections

  • a/DotNetDataCollector64.exe
    .exe windows x64

    6d2ae1d2d16623fd1d450eb12f8a0a1a


    Code Sign

    Headers

    Imports

    Sections

  • a/Kernelmoduleunloader.exe
    .exe windows x86

    bf9ff213004b9a048b0035bc6992a55d


    Code Sign

    Headers

    Imports

    Sections

  • a/Kernelmoduleunloader.exe.sig
  • a/M14M.txt
  • a/Tutorial-i386.exe
    .exe windows x86

    e2ed98ca04b011dd57508cb5c430831c


    Code Sign

    Headers

    Imports

    Sections

  • a/Tutorial-x86_64.exe
    .exe windows x64

    ebc81e41411eca6dcef1d3a2f9c7449a


    Code Sign

    Headers

    Imports

    Sections

  • a/allochook-i386.dll
    .dll windows x86

    01d879543b1b93fb4a8c6591ae469368


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • a/allochook-x86_64.dll
    .dll windows x64

    5f356a9227d50401556d497592f20cdf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • a/autorun/dlls/32/CEJVMTI.dll
    .dll windows x86

    f169cd83c1b5a46b223f247f34ac4096


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • a/autorun/dlls/64/CEJVMTI.dll
    .dll windows x64

    323de1ff7655e597353e5677c1bc8a83


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • a/autorun/dlls/MonoDataCollector.dll
    .dll windows x86

    ddf891317e41d8e61f1a8927dbf9afca


    Code Sign

    Headers

    Imports

    Sections

  • a/autorun/dlls/src/Common/Pipe.cpp
  • a/autorun/dlls/src/Common/Pipe.h
  • a/autorun/dlls/src/Java/CEJVMTI/CEJVMTI.sln
  • a/autorun/dlls/src/Java/CEJVMTI/CEJVMTI/CEJVMTI.cpp
  • a/autorun/dlls/src/Java/CEJVMTI/CEJVMTI/CEJVMTI.h
  • a/autorun/dlls/src/Java/CEJVMTI/CEJVMTI/CEJVMTI.vcproj
    .xml
  • a/autorun/dlls/src/Java/CEJVMTI/CEJVMTI/JavaEventServer.cpp
    .js
  • a/autorun/dlls/src/Java/CEJVMTI/CEJVMTI/JavaEventServer.h
  • a/autorun/dlls/src/Java/CEJVMTI/CEJVMTI/JavaServer.cpp
    .js
  • a/autorun/dlls/src/Java/CEJVMTI/CEJVMTI/JavaServer.h
  • a/autorun/dlls/src/Java/CEJVMTI/CEJVMTI/dllmain.cpp
  • a/autorun/dlls/src/Java/CEJVMTI/CEJVMTI/stdafx.cpp
  • a/autorun/dlls/src/Java/CEJVMTI/CEJVMTI/stdafx.h
  • a/autorun/dlls/src/Java/CEJVMTI/CEJVMTI/targetver.h
  • a/autorun/dlls/src/Mono/MonoDataCollector.sln
  • a/autorun/dlls/src/Mono/MonoDataCollector/Metadata.h
  • a/autorun/dlls/src/Mono/MonoDataCollector/MonoDataCollector.cpp
  • a/autorun/dlls/src/Mono/MonoDataCollector/MonoDataCollector.h
  • a/autorun/dlls/src/Mono/MonoDataCollector/MonoDataCollector.vcproj
    .xml
  • a/autorun/dlls/src/Mono/MonoDataCollector/PipeServer.cpp
    .js
  • a/autorun/dlls/src/Mono/MonoDataCollector/PipeServer.h
  • a/autorun/dlls/src/Mono/MonoDataCollector/dllmain.cpp
  • a/autorun/dlls/src/Mono/MonoDataCollector/stdafx.cpp
  • a/autorun/dlls/src/Mono/MonoDataCollector/targetver.h
  • a/autorun/forms/MonoDataCollector.frm
    .xml
  • a/autorun/java.lua
  • a/autorun/javaClassEditor.lua
  • a/autorun/javaclass.lua
  • a/autorun/monoscript.lua
    .js
  • a/ced3d10hook.dll
    .dll windows x86

    54e6baf4a7fc30cce7ae3af2ae401782


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • a/ced3d10hook64.dll
    .dll windows x64

    9ecc17e8125484bf6d22b853aa6333a7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • a/ced3d11hook.dll
    .dll windows x86

    a3258c6ee97d726a9efc2336a95f2c30


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • a/ced3d11hook64.dll
    .dll windows x64

    7b490c73f6a24a175ff2ab5985e57ccc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • a/ced3d9hook.dll
    .dll windows x86

    1918101ac90906330d7a2616375c55e0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • a/ced3d9hook64.dll
    .dll windows x64

    4b9b84d7aa5c3523fdc75de4312d466e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • a/ceregreset.exe
    .exe windows x86

    8f7c0fec528c1a37206076f4c07abb58


    Code Sign

    Headers

    Imports

    Sections

  • a/cheatengine-i386.exe
    .exe windows x86

    d10dafaa9a4cd4473efa1a3280308274


    Code Sign

    Headers

    Imports

    Sections

  • a/cheatengine-i386.exe.sig
  • a/cheatengine-x86_64.exe
    .exe windows x64

    824adb5979bb28d9255a51244608dd92


    Code Sign

    Headers

    Imports

    Sections

  • a/cheatengine-x86_64.exe.sig
  • a/commonmodulelist.txt
  • a/d3dhook.dll
    .dll windows x86

    a4cee279203b8eef2b26aa769c0003a5


    Headers

    Imports

    Sections

  • a/d3dhook64.dll
    .dll windows x64

    e1df8870766f8039f1e65ca890989bfe


    Headers

    Imports

    Sections

  • a/dbk32.sys
    .exe windows x86

    84d02250cf67d110be990d050ad3fedf


    Code Sign

    Headers

    Imports

    Sections

  • a/dbk64.sys
    .exe windows x64

    49e070f65ae7b6da7e83d710a4df2301


    Code Sign

    Headers

    Imports

    Sections

  • a/defines.lua
  • a/donottrace.txt
  • a/languages/How to add languages.txt
  • a/languages/cheatengine-x86_64.po
  • a/languages/language.ini
  • a/languages/lclstrconsts.po
  • a/languages/tutorial-x86_64.po
  • a/lua5.1-32.dll
    .dll windows x86

    6a42fb9b0b856939ae23f1a7cabd3801


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • a/lua5.1-64.dll
    .dll windows x64

    86b18d22c123cfffaf5ddfe321e40b05


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • a/luaclient-i386.dll
    .dll windows x86

    efc2fc9cdecd05dddf56c04ff4a601ee


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • a/luaclient-x86_64.dll
    .dll windows x64

    d0154dcff90393a9baa2070665a3b4c8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • a/main.lua
  • a/overlay.fx
  • a/plugins/DebugEventLog/src/DebugEventLog.lpi
    .xml
  • a/plugins/DebugEventLog/src/DebugEventLog.lpr
  • a/plugins/DebugEventLog/src/DebugEventLog.res
  • a/plugins/DebugEventLog/src/exportimplementation.pas
    .js
  • a/plugins/DebugEventLog/src/frmEventLogUnit.lfm
  • a/plugins/DebugEventLog/src/frmEventLogUnit.pas
  • a/plugins/cepluginsdk.h
  • a/plugins/cepluginsdk.pas
    .js
  • a/plugins/example-c/bla.h
  • a/plugins/example-c/example-c-32bit.dll
    .dll windows x86

    6d3891a00ff708b6aa5d9eeb447aee4e


    Headers

    Imports

    Exports

    Sections

  • a/plugins/example-c/example-c-64bit.dll
    .dll windows x64

    5e5d12b8027fe9920e0e6cbc5508c8c0


    Headers

    Imports

    Exports

    Sections

  • a/plugins/example-c/example-c.c
  • a/plugins/example-c/example-c.def
  • a/plugins/example-c/example-c.sln
  • a/plugins/example-c/example-c.vcproj
    .xml
  • a/plugins/example-lazarus/Unit1.pas
    .js
  • a/plugins/example-lazarus/exampleplugin.lpi
    .xml
  • a/plugins/example-lazarus/exampleplugin.lpr
  • a/speedhack-i386.dll
    .dll windows x86

    f2533baa83c4aa33708b7e7e892a5b98


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • a/speedhack-x86_64.dll
    .dll windows x64

    98ccfa9b2eb6ea0a0bb7b28e860fcb32


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • a/standalonephase1.dat
    .exe windows x86

    8d92fa1956a6a631c642190121740197


    Headers

    Imports

    Sections

  • a/standalonephase2.dat
    .exe windows x86

    fa12988c1f536d0d5a773434549432dc


    Code Sign

    Headers

    Imports

    Sections

  • a/tiny.dat
    .exe windows x86

    eae719b7384e30dfa50a17f56fc10efb


    Headers

    Imports

    Sections

  • a/unins000.dat
  • a/unins000.exe
    .exe windows x86


    Code Sign

    Headers

    Sections

  • a/unins000.msg
  • a/vehdebug-i386.dll
    .dll windows x86

    50967bfc5cf90629ec113323944f50a7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • a/vehdebug-x86_64.dll
    .dll windows x64

    5ce47c41a3bc188e4da172ce46fe83b6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • a/vmdisk.img
    .vbs
  • a/vmdisk.img.sig
  • a/win32/dbghelp.dll
    .dll windows x86

    c4677aef9c8c5ed50bde782c8933dff3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • a/xmplayer.exe
    .exe windows x86

    80090a77051c7062ef2265487048b577


    Code Sign

    Headers

    Imports

    Sections