Nenyooo v1[.]0[.]3028[.]0[.]1 Unknowcheats_[unknowncheats[.]me]_[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

Nenyooo v1.0.3028.0.1 Unknowcheats_[unknowncheats.me]_.zip
Size

5.5MB
MD5

845f85089c495026a1bc2897a36c30fe
SHA1

218e852779f7355d138906e455c0f434d8b60361
SHA256

4908f3816ddc118385b4a5f188b0faf7dc5c7a1eea0f7bf46ebb798e79f22c2c
SHA512

b58298ef1058bb700dda6981f057243cc9aa9129565d9b4e44f12137155eb848ff20f56d15dc43424a47d998a4b3c0f6cb828a700f005e5ef55a86ddb6556426
SSDEEP

98304:SCYWptCHac1r3YKxfpjBXOxW9bohvPHgLktz38m/V/K/NxKrYrFyIrsACK5XxAn:+st8aODjBXOsohXHiktLV/K/b8QOsxAn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Nenyooo Unknowcheats.exe

Files

Nenyooo v1.0.3028.0.1 Unknowcheats_[unknowncheats.me]_.zip
.zip
Nenyooo Unknowcheats.exe
.exe windows:6 windows x64

0152087df58ff13026de8f996be5b5fa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

d3d11

D3D11CreateDeviceAndSwapChain

kernel32

GetModuleHandleA
LoadLibraryA
QueryPerformanceFrequency
GetProcAddress
VerSetConditionMask
GetModuleHandleW
FreeLibrary
QueryPerformanceCounter
WriteProcessMemory
RtlAddFunctionTable
Sleep
VirtualProtectEx
VirtualAllocEx
ReadProcessMemory
CreateRemoteThread
VirtualFreeEx
GetExitCodeProcess
FormatMessageA
GetLocaleInfoEx
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
GetFileInformationByHandle
AreFileApisANSI
CopyFileW
GetFileInformationByHandleEx
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GlobalUnlock
GetCurrentProcess
OpenProcess
GetLastError
LocalFree
CloseHandle
IsWow64Process
WideCharToMultiByte
GlobalLock
GlobalFree
GlobalAlloc
MultiByteToWideChar

user32

GetAsyncKeyState
DispatchMessageW
TranslateMessage
PostQuitMessage
UpdateWindow
GetWindowLongW
DefWindowProcW
AdjustWindowRectEx
PeekMessageW
GetKeyState
DestroyWindow
GetCursorPos
GetDC
SetWindowPos
MonitorFromWindow
FindWindowA
SetCursorPos
MoveWindow
MessageBoxW
GetWindowRect
GetWindowThreadProcessId
SetClipboardData
GetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
EnumDisplayMonitors
CreateWindowExW
ScreenToClient
UnregisterClassW
SetWindowTextW
RegisterClassExW
WindowFromPoint
ShowWindow
GetCapture
GetMonitorInfoW
ClientToScreen
IsChild
TrackMouseEvent
GetForegroundWindow
SetLayeredWindowAttributes
SetFocus
BringWindowToTop
LoadCursorW
SetCapture
SetCursor
SetWindowLongW
GetClientRect
SetProcessDPIAware
ReleaseCapture
SetForegroundWindow
IsIconic
ReleaseDC

gdi32

GetDeviceCaps

advapi32

OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW

shell32

ShellExecuteW

msvcp140

?good@ios_base@std@@QEBA_NXZ
_Query_perf_frequency
?_Winerror_map@std@@YAHH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Syserror_map@std@@YAPEBDH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?uncaught_exceptions@std@@YAHXZ
?_Xout_of_range@std@@YAXPEBD@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
_Query_perf_counter

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmAssociateContextEx
ImmSetCandidateWindow
ImmGetContext

d3dcompiler_47

D3DCompile

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memset
_CxxThrowException
__current_exception_context
__current_exception
__C_specific_handler
strstr
__std_terminate
__std_exception_destroy
memcmp
memchr
__std_exception_copy
memcpy
memmove

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_register_onexit_function
_initialize_onexit_table
_cexit
terminate
_seh_filter_exe
_set_app_type
_configure_wide_argv
_initterm_e
_exit
_c_exit
_initialize_wide_environment
_register_thread_local_exe_atexit_callback
exit
_get_wide_winmain_command_line
_initterm
_invalid_parameter_noinfo_noreturn

api-ms-win-crt-heap-l1-1-0

_callnewh
_set_new_mode
free
malloc

api-ms-win-crt-string-l1-1-0

strncpy
strcmp
strncmp

api-ms-win-crt-stdio-l1-1-0

fseek
fclose
fflush
__acrt_iob_func
__stdio_common_vfprintf
ftell
__stdio_common_vsscanf
_set_fmode
fwrite
__stdio_common_vsprintf
_wfopen
__p__commode
fread

api-ms-win-crt-utility-l1-1-0

rand
qsort

api-ms-win-crt-locale-l1-1-0

_configthreadlocale
___lc_codepage_func

api-ms-win-crt-math-l1-1-0

pow
cosf
ceilf
sqrtf
__setusermatherr
acosf
sin
sinf

Sections

.text
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 731KB - Virtual size: 730KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 402KB - Virtual size: 401KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Nenyooo/Extra/Appearance/Barbie Barb.xml
.xml
Nenyooo/Extra/Appearance/Barbie.xml
.xml
Nenyooo/Extra/Vehicle/All_Vehicle.ini
Nenyooo/User Interface/Fonts/Options.ttf
Nenyooo/User Interface/Fonts/Title.ttf
Nenyooo/User Interface/Textures/Header.gif
.gif
Nenyooo/User Interface/Textures/Header.png
.png
Nenyooo/User Interface/Textures/Options.png
.png
Nenyooo/User Interface/Textures/Right Arrow.png
.png

Sharing

General

Malware Config

Signatures

Files

0152087df58ff13026de8f996be5b5fa

Headers

DLL Characteristics

File Characteristics

Imports

d3d11

kernel32

user32

gdi32

advapi32

shell32

msvcp140

imm32

d3dcompiler_47

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

Sections

.text Size: 315KB - Virtual size: 315KB

.rdata Size: 731KB - Virtual size: 730KB

.data Size: 4.5MB - Virtual size: 4.5MB

.pdata Size: 15KB - Virtual size: 14KB

.rsrc Size: 402KB - Virtual size: 401KB

.reloc Size: 512B - Virtual size: 304B

.text
Size: 315KB - Virtual size: 315KB

.rdata
Size: 731KB - Virtual size: 730KB

.data
Size: 4.5MB - Virtual size: 4.5MB

.pdata
Size: 15KB - Virtual size: 14KB

.rsrc
Size: 402KB - Virtual size: 401KB

.reloc
Size: 512B - Virtual size: 304B