Static task
static1
Behavioral task
behavioral1
Sample
sCheat.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
sCheat.exe
Resource
win10v2004-20231215-en
General
-
Target
46093f25bb365ac999e2a542b8e84c93
-
Size
404KB
-
MD5
46093f25bb365ac999e2a542b8e84c93
-
SHA1
e29e2ebf3a75c65a6ebf406278190a354ad2650b
-
SHA256
34fe652d29b51cb630f463c84ea0f3824df095c8e0122d90e1f32c9cc8a1efad
-
SHA512
40598d69da5db733161913d0e8b88e52156960208c65670bce757c7b8e27a0f7bfdd6744ce47de8ecab430ca826694cbc343bc2b81ec2aa70c7c0af08720fc9c
-
SSDEEP
12288:EXD85CSl2pLJu+qgJyK9jaLt4aWfcCNjMF/TE:AGMJuyjaLt4p0Cu7E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/sCheat.exe
Files
-
46093f25bb365ac999e2a542b8e84c93.rar
-
sCheat.exe.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 396KB - Virtual size: 444KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE