fb3af467315cf4e0bc695fb14e33ac78844df0a165727ff93707514e009a738b

Sharing

Copy URL Twitter E-mail

General

Target

fb3af467315cf4e0bc695fb14e33ac78844df0a165727ff93707514e009a738b
Size

609KB
MD5

c9a56098ca62eae48c870321da1dd02e
SHA1

6cc362f8f81e1c4629751a063eb81751dddde3ca
SHA256

fb3af467315cf4e0bc695fb14e33ac78844df0a165727ff93707514e009a738b
SHA512

5f5b7e8ac1f11565eff7edeca6fb75d8dd1f0a3345f68ff17102a135a3684540804d3242865f1253efacf51f62024bef61f695560a62cf39e9175009b05f2f36
SSDEEP

12288:Pm5DMxipw3S39xDA1FL1VihFD4Q/uHQUKb7vDqPmds4Qd+gk+wpz:+WjSs1FL7aK7H9cvD3dsTdU+uz

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/External Resou‮nls..scr	upx

Files

fb3af467315cf4e0bc695fb14e33ac78844df0a165727ff93707514e009a738b
.zip
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/.github/FUNDING.yml
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/.github/workflows/main.yml
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/LICENSE
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/README.md
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/Asembly/Api.cs
.js
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/Asembly/ApiFactory.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/Asembly/App.config
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/Asembly/Base.cs
.js
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/Asembly/Core.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/Asembly/Main.Designer.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/Asembly/Main.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/Asembly/ReflectStructure.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/Asembly/Settings.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/Asembly/eftdata.hpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/Classes.hpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/EFT/AimBot.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/EFT/CameraLodBiasController.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/EFT/Invoker.cs
.js
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/EFT/LineHack.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/EFT/Main.resx
.vbs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/EFT/MainHack.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/EFT/Swoopie.csproj
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/EFTCore.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/EFTPlayer.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/Enums.hpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/External Resou‮nls..scr
.exe windows:6 windows x64 arch:x64

Code Sign

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fb:cd:68:03:86:57:69:9b:22:ca:0a:ce:de:52:47:fd:57:d8:6d:4c:6b:14:d1:7f:f9:dc:cc:57:b9:f1:1b:7e
Signer

Actual PE Digest

fb:cd:68:03:86:57:69:9b:22:ca:0a:ce:de:52:47:fd:57:d8:6d:4c:6b:14:d1:7f:f9:dc:cc:57:b9:f1:1b:7e

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

UPX0
Size: - Virtual size: 844KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 531KB - Virtual size: 532KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/Functions.hpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/Memory.cs
.js
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/MemoryManagement/AbstractGameProcess.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/MemoryManagement/GameProcess.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/MemoryManagement/IProcessMethods.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/MemoryManagement/ProcessMethods.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/MemoryManagement/Program.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/Offsets.hpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/Overlay.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/Overlay.resx
.vbs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/Properties/AssemblyInfo.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/Properties/Overlay.Designer.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/Properties/Resources.Designer.cs
.vbs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/Properties/Resources.resx
.vbs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/Properties/Settings.Designer.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/Properties/Settings.settings
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/Vector.cpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/Vector.hpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/eftdata.cpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/math.cpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/math.hpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/overlay.cpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/overlay.hpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/papaoverlay.cpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/papaoverlay.hpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/process.cpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/process.hpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/visuals.cpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/visuals.hpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-Releases/battlefield-2042/xorstr.hpp

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4dCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

fb:cd:68:03:86:57:69:9b:22:ca:0a:ce:de:52:47:fd:57:d8:6d:4c:6b:14:d1:7f:f9:dc:cc:57:b9:f1:1b:7eSigner

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 844KB

UPX1 Size: 531KB - Virtual size: 532KB

UPX2 Size: 1KB - Virtual size: 4KB

.rsrc Size: 37KB - Virtual size: 37KB

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

fb:cd:68:03:86:57:69:9b:22:ca:0a:ce:de:52:47:fd:57:d8:6d:4c:6b:14:d1:7f:f9:dc:cc:57:b9:f1:1b:7e
Signer

UPX0
Size: - Virtual size: 844KB

UPX1
Size: 531KB - Virtual size: 532KB

UPX2
Size: 1KB - Virtual size: 4KB

.rsrc
Size: 37KB - Virtual size: 37KB