ValorantCheat[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

ValorantCheat.zip
Size

644KB
MD5

124d723787a030c545237b922433c4ef
SHA1

2e98ee065f64884ab57fb49528a7b6e4a7ff748e
SHA256

3f106c78894612b31ab7533630ad9dc84fc6be8d3a1770077f5922f71e84c532
SHA512

f84f4736792335f40f300f10603cb9aa49c26c39ebcd13c9b7a3c613dbe0bc88bea51973f4e84ff7c90319840c453aefb8073e03831e1598bf68da002e789534
SSDEEP

12288:0BMCH4k5KK1yu3v3WwH6KCpv6ORwc7AzR/g536fOOndfEKNzLoM3PT31SVTMw+:C90my+3BHDC9AzRM36fZndcKNzMurFe8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2a3549512f5f9cf1b11a26897a79532adc548c3000fb7b07fcae6b49cd5222ad

Files

ValorantCheat.zip
.zip

Password: infected
2a3549512f5f9cf1b11a26897a79532adc548c3000fb7b07fcae6b49cd5222ad
.exe windows:4 windows x86 arch:x86

Password: infected

d91f8fa7ff706b07bdf3a0948f972a09

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualProtect
VirtualQuery

msvcrt

__getmainargs
__initenv
__lconv_init
__p__acmdln
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_initterm
_iob
_onexit
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1000B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.UH2oS6N
Size: 661KB - Virtual size: 660KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

d91f8fa7ff706b07bdf3a0948f972a09

Headers

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 6KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 48B

.rdata Size: 1KB - Virtual size: 1KB

.bss Size: - Virtual size: 1000B

.idata Size: 1KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 8B

.rsrc Size: 512B - Virtual size: 16B

.UH2oS6N Size: 661KB - Virtual size: 660KB

.text
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 48B

.rdata
Size: 1KB - Virtual size: 1KB

.bss
Size: - Virtual size: 1000B

.idata
Size: 1KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 8B

.rsrc
Size: 512B - Virtual size: 16B

.UH2oS6N
Size: 661KB - Virtual size: 660KB