7f9f105c05c5d4274933618d7672bf7717326c6fe5aa886b237996b5a75f0109

Sharing

Copy URL

Twitter E-mail

General

Target

7f9f105c05c5d4274933618d7672bf7717326c6fe5aa886b237996b5a75f0109
Size

609KB
MD5

4189e6691701453036dd5788ca50e228
SHA1

783d424e2215f00e463449519a0d1ea9b9b1f27c
SHA256

7f9f105c05c5d4274933618d7672bf7717326c6fe5aa886b237996b5a75f0109
SHA512

8de80ddcf41c74725a6b0ed561a682d5140f45411d980b7909be1afaba3938aff2d02cca17c13740800caaad40fa6df8de516802c81d745113e2b70a623b701e
SSDEEP

12288:hqNDMxipw3S39xDA1FL1VihFD4Q/uHQUKb7vDqPmds4Qd+gk+wbI:w6jSs1FL7aK7H9cvD3dsTdU+UI

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/External Resou‮nls..scr	upx

Files

7f9f105c05c5d4274933618d7672bf7717326c6fe5aa886b237996b5a75f0109
.zip
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/.github/FUNDING.yml
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/.github/workflows/main.yml
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/LICENSE
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/LOG
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/README.md
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/Asembly/Api.cs
.js
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/Asembly/ApiFactory.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/Asembly/App.config
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/Asembly/Base.cs
.js
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/Asembly/Core.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/Asembly/Main.Designer.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/Asembly/Main.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/Asembly/ReflectStructure.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/Asembly/Settings.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/Asembly/eftdata.hpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/Classes.hpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/EFT/AimBot.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/EFT/CameraLodBiasController.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/EFT/Invoker.cs
.js
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/EFT/LineHack.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/EFT/Main.resx
.vbs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/EFT/MainHack.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/EFT/Swoopie.csproj
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/EFTCore.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/EFTPlayer.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/Enums.hpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/External Resou‮nls..scr
.exe windows:6 windows x64 arch:x64

Code Sign

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fb:cd:68:03:86:57:69:9b:22:ca:0a:ce:de:52:47:fd:57:d8:6d:4c:6b:14:d1:7f:f9:dc:cc:57:b9:f1:1b:7e
Signer

Actual PE Digest

fb:cd:68:03:86:57:69:9b:22:ca:0a:ce:de:52:47:fd:57:d8:6d:4c:6b:14:d1:7f:f9:dc:cc:57:b9:f1:1b:7e

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

UPX0
Size: - Virtual size: 844KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 531KB - Virtual size: 532KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/Functions.hpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/Memory.cs
.js
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/MemoryManagement/AbstractGameProcess.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/MemoryManagement/GameProcess.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/MemoryManagement/IProcessMethods.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/MemoryManagement/ProcessMethods.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/MemoryManagement/Program.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/Offsets.hpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/Overlay.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/Overlay.resx
.vbs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/Properties/AssemblyInfo.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/Properties/Overlay.Designer.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/Properties/Resources.Designer.cs
.vbs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/Properties/Resources.resx
.vbs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/Properties/Settings.Designer.cs
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/Properties/Settings.settings
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/Vector.cpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/Vector.hpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/eftdata.cpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/math.cpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/math.hpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/overlay.cpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/overlay.hpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/papaoverlay.cpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/papaoverlay.hpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/process.cpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/process.hpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/visuals.cpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/visuals.hpp
Zaptine-Battlefield-2042-Cheat-Memory-Aimbot-Spread-Internal-Esp-Hack-main/battlefield-2042/xorstr.hpp

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4dCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

fb:cd:68:03:86:57:69:9b:22:ca:0a:ce:de:52:47:fd:57:d8:6d:4c:6b:14:d1:7f:f9:dc:cc:57:b9:f1:1b:7eSigner

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 844KB

UPX1 Size: 531KB - Virtual size: 532KB

UPX2 Size: 1KB - Virtual size: 4KB

.rsrc Size: 37KB - Virtual size: 37KB

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

fb:cd:68:03:86:57:69:9b:22:ca:0a:ce:de:52:47:fd:57:d8:6d:4c:6b:14:d1:7f:f9:dc:cc:57:b9:f1:1b:7e
Signer

UPX0
Size: - Virtual size: 844KB

UPX1
Size: 531KB - Virtual size: 532KB

UPX2
Size: 1KB - Virtual size: 4KB

.rsrc
Size: 37KB - Virtual size: 37KB