hbm_cheatenabler[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

hbm_cheatenabler.exe
Size

185KB
MD5

df688bfe6f62d51d3ce39fa649efa771
SHA1

c311788239389990cb86ddfc2c9f16534cfbb8d0
SHA256

5d388c04f519e8bd2669abe822d0051ceff9662a22d13ed4f2daee04fe4409a9
SHA512

5bbcde24506ffbc8c815387592e5726830b57fbbaa23e24f5b02122f59fd1b47262d2cafbd50cea0d5820163ea4517a297903317d86fd6f5c36d02e498d630dc
SSDEEP

3072:rflrR4259z1BLJwejJ88kUK5orCK577NXUIY+tlW3W+uAg0FujTL9PPRi:lRZbzPL3l8bUCoL51XDAOXFPRi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
hbm_cheatenabler.exe

Files

hbm_cheatenabler.exe
.exe windows x86

2951e93126983ffa364a3950e4eb740c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowThreadProcessId
EnumWindows
GetWindowTextA
IsWindowVisible

kernel32

RaiseException
CreateFileW
HeapSize
GetProcessHeap
SetStdHandle
Sleep
OpenProcess
ReadProcessMemory
WriteProcessMemory
SetConsoleTitleA
GetLastError
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
MultiByteToWideChar
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
SetEnvironmentVariableW
WriteConsoleW
RtlUnwind
FreeLibrary
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
HeapFree
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapAlloc
GetFileType
CloseHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW

Sections

.text
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2951e93126983ffa364a3950e4eb740c

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 117KB - Virtual size: 117KB

.rdata Size: 55KB - Virtual size: 54KB

.data Size: 4KB - Virtual size: 7KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 117KB - Virtual size: 117KB

.rdata
Size: 55KB - Virtual size: 54KB

.data
Size: 4KB - Virtual size: 7KB

.reloc
Size: 8KB - Virtual size: 7KB