cheatchecker[.]exe

Resubmissions

14-10-2024 08:01

241014-jw3ndssckf 8

14-03-2024 00:52

240314-a8eyesgh33 10

Sharing

Copy URL

Twitter E-mail

General

Target

cheatchecker.exe
Size

7.8MB
MD5

64925f73451b96d282f4a3a6bd8d265a
SHA1

3ec096d5f78b5d62b6d02b41697ff36ad1076cce
SHA256

2575b49e96cf0027ea9469a23aa8ab722365f5fd614fa88c3d3ec2766a789f38
SHA512

4de9dbe9f3dc7fbac5c3af20c2caae571a73cdf5026d7e1eb1b1bb5ce97db8f1df033be07966351fdfdd4e16265970dfa85cda54a05a046066f3ded177fbe16c
SSDEEP

196608:7DA39sA6Lvn3QtRuQJShuxpVPoOGs2UqT9ZbWr39GSPV9p9N:PANsAG3QtRuf09oK2VVrMp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cheatchecker.exe

Files

cheatchecker.exe
.exe windows:6 windows x86 arch:x86

31dd50c03875ccab4191c8315b9ceb12

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateJobObjectW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

advapi32

CreateProcessAsUserW

msvcp140

?_Xlength_error@std@@YAXPBD@Z

urlmon

URLDownloadToFileW

shlwapi

PathCombineW

vcruntime140

__std_exception_copy

api-ms-win-crt-stdio-l1-1-0

__p__commode

api-ms-win-crt-string-l1-1-0

_wcsicmp

api-ms-win-crt-runtime-l1-1-0

_c_exit

api-ms-win-crt-heap-l1-1-0

_set_new_mode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.[{0
Size: - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.9q#
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.(~:
Size: 7.8MB - Virtual size: 7.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

31dd50c03875ccab4191c8315b9ceb12

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

msvcp140

urlmon

shlwapi

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: - Virtual size: 8KB

.rdata Size: - Virtual size: 5KB

.data Size: - Virtual size: 1KB

.[{0 Size: - Virtual size: 4.4MB

.9q# Size: 1KB - Virtual size: 1KB

.(~: Size: 7.8MB - Virtual size: 7.8MB

.reloc Size: 1024B - Virtual size: 772B

.rsrc Size: 512B - Virtual size: 480B

.text
Size: - Virtual size: 8KB

.rdata
Size: - Virtual size: 5KB

.data
Size: - Virtual size: 1KB

.[{0
Size: - Virtual size: 4.4MB

.9q#
Size: 1KB - Virtual size: 1KB

.(~:
Size: 7.8MB - Virtual size: 7.8MB

.reloc
Size: 1024B - Virtual size: 772B

.rsrc
Size: 512B - Virtual size: 480B