Static task
static1
Behavioral task
behavioral1
Sample
TheMatrixPathOfNeoPLUS4TrainerEuro/Clone/For_Clone_DVD_From_MiRROR.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
TheMatrixPathOfNeoPLUS4TrainerEuro/Clone/For_Clone_DVD_From_MiRROR.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
TheMatrixPathOfNeoPLUS4TrainerEuro/Retail/For_EU_Retail.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
TheMatrixPathOfNeoPLUS4TrainerEuro/Retail/For_EU_Retail.exe
Resource
win10v2004-20231215-en
General
-
Target
776ebf9b4dd75cdff04a90dffe625993
-
Size
32KB
-
MD5
776ebf9b4dd75cdff04a90dffe625993
-
SHA1
8b3939e4d21d0be1ffddd9b3c40cd66b825035e2
-
SHA256
5ca7f0b8ac5c363b4636294281877d162ba09a2736db4a0a0de7e031d67e26b7
-
SHA512
2c22243fa461a0a8e6ab0705bacf649f869abf88ed1bd1bea3278ddbbe5448c558aa3786296ae9825d3bab86c739c9a03b22b7c9e84f42ecdfeb9fccc3af03b6
-
SSDEEP
768:lmq+uisycOuwxY+DNjDv1x9lNTSPBRvaxf87CJGudWHwGsNQ9LB8dLKBCZlBM:N+uiRcOgslQBRYNQuuGiWpSCzu
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/TheMatrixPathOfNeoPLUS4TrainerEuro/Clone/For_Clone_DVD_From_MiRROR.exe unpack001/TheMatrixPathOfNeoPLUS4TrainerEuro/Retail/For_EU_Retail.exe
Files
-
776ebf9b4dd75cdff04a90dffe625993.rar
-
TheMatrixPathOfNeoPLUS4TrainerEuro/CheatNoW Info.txt
-
TheMatrixPathOfNeoPLUS4TrainerEuro/Clone/For_Clone_DVD_From_MiRROR.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.asx-0 Size: 494B - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.asx-1 Size: 14KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
TheMatrixPathOfNeoPLUS4TrainerEuro/Retail/For_EU_Retail.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.asx-0 Size: 79B - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.asx-1 Size: 14KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
TheMatrixPathOfNeoPLUS4TrainerEuro/asx-pon.nfo