Craft_Rise_Hack_Cheat_V1.17.23.rar
- SHA256 5b3dc5017ab4178e6a056c61ef8e205982bcfa7b7fd8854b82fd4e9aa9d0274d
Overview
overview
10Static
static
3Craft_Rise...23.rar
windows10-2004-x64
7Craft_Rise...23.rar
windows11-21h2-x64
3Craft_Rise...er.exe
windows10-2004-x64
10Craft_Rise...er.exe
windows11-21h2-x64
10Craft_Rise...23.exe
windows10-2004-x64
1Craft_Rise...23.exe
windows11-21h2-x64
1Craft_Rise...13.exe
windows10-2004-x64
1Craft_Rise...13.exe
windows11-21h2-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Craft_Rise_Hack_Cheat_V1.17.23.rar
Resource
win10v2004-20231222-en
windows10-2004-x64
6 signatures
1800 seconds
Behavioral task
behavioral2
Sample
Craft_Rise_Hack_Cheat_V1.17.23.rar
Resource
win11-20231215-en
windows11-21h2-x64
5 signatures
1800 seconds
Behavioral task
behavioral3
Sample
Craft_Rise_Hack_Cheat_V1.17.23/Craft_Rise_Cheacker.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
10 signatures
1800 seconds
Behavioral task
behavioral4
Sample
Craft_Rise_Hack_Cheat_V1.17.23/Craft_Rise_Cheacker.exe
Resource
win11-20231215-en
windows11-21h2-x64
9 signatures
1800 seconds
Behavioral task
behavioral5
Sample
Craft_Rise_Hack_Cheat_V1.17.23/Craft_Rise_Hack_Cheat_V1.17.23.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
1800 seconds
Behavioral task
behavioral6
Sample
Craft_Rise_Hack_Cheat_V1.17.23/Craft_Rise_Hack_Cheat_V1.17.23.exe
Resource
win11-20231215-en
windows11-21h2-x64
0 signatures
1800 seconds
Behavioral task
behavioral7
Sample
Craft_Rise_Hack_Cheat_V1.17.23/Valo_Cheat_V1.89.413.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
0 signatures
1800 seconds
Behavioral task
behavioral8
Sample
Craft_Rise_Hack_Cheat_V1.17.23/Valo_Cheat_V1.89.413.exe
Resource
win11-20231215-en
windows11-21h2-x64
0 signatures
1800 seconds
General
- Target Craft_Rise_Hack_Cheat_V1.17.23.rar
- Size 1.6MB
- Sample240122-x7dejadbb7
- SHA256 5b3dc5017ab4178e6a056c61ef8e205982bcfa7b7fd8854b82fd4e9aa9d0274d
- MD5 93a2d291f97442a59b72fec4f2476e10
- SHA1 1dfd92db8cff0ab3bcc890f5dd1e543db3964076
- SHA512 9f837546b148f192ec8e0ac4daecc4e628642536aacb70e682f7676cd7488f114273ae5995d022a636712974f91087c8f672ee10eaa26debba01224986a5f191
- SSDEEP 24576:vsf6bNAHs5p9R0bHgCibGt5CdPRpafJsTsO97qHmYbvrPsr2XWY1DKx:/bqH+pEs9KfvRgL9eGDamYS
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/Craft_Rise_Hack_Cheat_V1.17.23/Craft_Rise_Cheacker.exe unpack001/Craft_Rise_Hack_Cheat_V1.17.23/Craft_Rise_Hack_Cheat_V1.17.23.exe unpack001/Craft_Rise_Hack_Cheat_V1.17.23/Valo_Cheat_V1.89.413.dll
File Explorer
-
Craft_Rise_Hack_Cheat_V1.17.23.rar.rar 1.6MB
-
Craft_Rise_Hack_Cheat_V1.17.23/Craft_Rise_Cheacker.exe.exe 1.5MB
-
Craft_Rise_Hack_Cheat_V1.17.23/Craft_Rise_Hack_Cheat_V1.17.23.exe.exe 146KB
-
Craft_Rise_Hack_Cheat_V1.17.23/Valo_Cheat_V1.89.413.dll.exe 10KB
Craft_Rise_Hack_Cheat_V1.17.23/Craft_Rise_Cheacker.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 def9ca51ee50b3e34df194b618b5db125712facd64dc4f9ab52d4044348ce36e
- MD5 9bf7de62505839e62d84095f16e5f67a
- SHA1 543612808cd9e7369007f06f9f57548614b8b320
- SHA512 1c50c9947f8d8cbea90acf0ba1e3ef222b135574513f9f12143e761e1f1346cbb2d29a30d17c9ab2b66b79949419bbdcd8b1053ad8702d2e81642a7ce29d43dd
- SSDEEP 24576:jEKdAe4q1cdYlqS5wjlq0cnHFl0oegbCmjZiwLGlaLPR7i+lRx+dCxOvuw7G3tHG:7dAK8SuY0cnHH0oVTjBClYpOyRxPy7GQ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1576430
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Craft_Rise_Hack_Cheat_V1.17.23/Craft_Rise_Hack_Cheat_V1.17.23.exe
- IMPHASH 6dbf27f4c70fe2c8ed3e0122ba75d641
- SHA256 5fd835db939307a0c43d18c702804d50c3ea5ea124f1e714edb82fa6ccaba214
- MD5 37c8a9cc5370e6aff4ee7253a8c4ae53
- SHA1 7c458906cbbe5c40aea13bf63d616e9c35dfc1cf
- SHA512 3922097d78fe2a7a661c8dd78fca1a9fabe3c1dba0e17563c4589128440ffbb3db7ef09ffd3666aac268a9988325aa47e39b346e8570662f3668170c1e692fcd
- SSDEEP 3072:wczkitvo4BpYN/6mBPry8TXROLdW5m4mURs9OOGX0kx:wA4NCmBPry/N24OOC
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
80992
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSection
GetEnvironmentVariableW
FindClose
MultiByteToWideChar
GetLastError
GetFileAttributesExW
GetFullPathNameW
GetProcAddress
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EnterCriticalSection
FindFirstFileExW
OutputDebugStringW
LoadLibraryA
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LCMapStringEx
DecodePointer
EncodePointer
InitializeCriticalSectionEx
GetStringTypeW
user32
MessageBoxW
shell32
ShellExecuteW
advapi32
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey
api-ms-win-crt-runtime-l1-1-0
_exit
__p___argc
_initterm_e
_initterm
_get_initial_wide_environment
_invalid_parameter_noinfo_noreturn
_initialize_wide_environment
_configure_wide_argv
_initialize_onexit_table
_set_app_type
__p___wargv
_seh_filter_exe
_register_onexit_function
_cexit
terminate
_errno
exit
abort
_crt_atexit
_c_exit
_register_thread_local_exe_atexit_callback
api-ms-win-crt-stdio-l1-1-0
setvbuf
fflush
_wfopen
__stdio_common_vswprintf
__stdio_common_vfwprintf
_set_fmode
__stdio_common_vsprintf_s
__acrt_iob_func
fputwc
fputws
__p__commode
api-ms-win-crt-heap-l1-1-0
_set_new_mode
_callnewh
free
malloc
calloc
api-ms-win-crt-string-l1-1-0
wcsnlen
strcpy_s
_wcsdup
strcspn
wcsncmp
toupper
api-ms-win-crt-convert-l1-1-0
_wtoi
wcstoul
api-ms-win-crt-locale-l1-1-0
setlocale
___lc_locale_name_func
localeconv
_unlock_locales
_lock_locales
___mb_cur_max_func
_configthreadlocale
__pctype_func
___lc_codepage_func
api-ms-win-crt-math-l1-1-0
frexp
__setusermatherr
api-ms-win-crt-time-l1-1-0
_gmtime64_s
_time64
wcsftime
Name
.text
Size
97KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
37KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
792B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=260, version=30034,
count=10, id=259, version=30034,
count=77, id=261, version=30034,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=29395,
count=162, id=1, productName=Unmarked objects,
count=10, id=265, version=30151,
count=1, id=258, version=30151,
Craft_Rise_Hack_Cheat_V1.17.23/Valo_Cheat_V1.89.413.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 eb33cace01b6bb8503f06a83279e6d231bbc4cb0751838758fa4dfe379105c31
- MD5 fc45f8e0af0dedc6b7b86cedf5b015ee
- SHA1 efd99167513215c83c07937fe92f6976cd605fd6
- SHA512 bd5a9bf002731b26098df714b29aa73cb8b5dc822bec0cea4dedc4c31eced5312700664923deacf869035e6f47e5217af1d76ed99b37bfe6c76d83729bbbd5c9
- SSDEEP 192:up5Fwkz0BBdIamzTxzw8iSxks3rLrV1r9Nr8ZYJo/DhzbdF1Oz:VgHrVtr8Zqo/DxbdO
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15866
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ