Overview

overview

5

Static

static

3

HaxWare.zip

windows7-x64

1

HaxWare.zip

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    HaxWare.zip

  • Size

    12.0MB

  • MD5

    745ce1702baf021361c090701c8ff746

  • SHA1

    6ad1736a97cbeca39900f392fccdf75d82761898

  • SHA256

    d2acf7e10de87fabddc4f614160c9dfea070f18dea2138af4072c597a91de5d6

  • SHA512

    6cf7122050be92e84338826c0de9faef59509dce8b5e04a89cbf4b1b08a5d59e5d49bd1084752525aa13cbd257bc7ca1c00ffa5eaf9901adbcdee1c8842a70f1

  • SSDEEP

    196608:K+Twj5hsGaKzhLERlE2LmCPPsiVvrJ6nJ0L2iLt5C5VIT9fRceQBy1nChLQWLrSj:IzsGaeWlRPxVvr0yLXuVI1RceDnqVfEn

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • HaxWare.zip
    .zip
  • HaxWare/Bypass CE Injection.exe
    .exe windows:6 windows x64 arch:x64

    b67b812388a1094acd5db594749b4971


    Headers

    Imports

    Sections

  • HaxWare/CED3D10Hook.dll
    .dll windows:5 windows x86 arch:x86

    54e6baf4a7fc30cce7ae3af2ae401782


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HaxWare/CED3D10Hook64.dll
    .dll windows:5 windows x64 arch:x64

    9ecc17e8125484bf6d22b853aa6333a7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HaxWare/CED3D11Hook.dll
    .dll windows:5 windows x86 arch:x86

    a3258c6ee97d726a9efc2336a95f2c30


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HaxWare/CED3D11Hook64.dll
    .dll windows:5 windows x64 arch:x64

    7b490c73f6a24a175ff2ab5985e57ccc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HaxWare/HaxWare..exe
    .exe windows:4 windows x64 arch:x64

    2be4009946d73b64e662d60f18501ab0


    Headers

    Imports

    Sections

  • HaxWare/autorun/AddToNewGroup.LUA
    .js
  • HaxWare/autorun/Code.lua
    .js
  • HaxWare/autorun/DotNetInject.lua
  • HaxWare/autorun/DotNetInterface.lua
    .js
  • HaxWare/autorun/Hax.lua
  • HaxWare/autorun/JavaInfo.lua
    .js
  • HaxWare/autorun/JavaSearch.lua
    .js
  • HaxWare/autorun/MethodInvokeDialog.lua
    .js
  • HaxWare/autorun/SpeedhackV3.lua
  • HaxWare/autorun/affinity.lua
  • HaxWare/autorun/andtools.lua
    .js
  • HaxWare/autorun/andtools/files that should be here.txt
  • HaxWare/autorun/autosave.LUA
    .js
  • HaxWare/autorun/babyce.lua
    .js
  • HaxWare/autorun/bigendian.lua
    .js
  • HaxWare/autorun/celib.lua
  • HaxWare/autorun/ceshare.lua
    .js
  • HaxWare/autorun/ceshare/ceshare_account.lua
    .js
  • HaxWare/autorun/ceshare/ceshare_comments.lua
    .js
  • HaxWare/autorun/ceshare/ceshare_fulltablelist.lua
    .js
  • HaxWare/autorun/ceshare/ceshare_permissions.lua
    .js
  • HaxWare/autorun/ceshare/ceshare_processlistextention.lua
    .js
  • HaxWare/autorun/ceshare/ceshare_publish.lua
    .js
  • HaxWare/autorun/ceshare/ceshare_querycheats.lua
    .js
  • HaxWare/autorun/ceshare/ceshare_requests.lua
    .js
  • HaxWare/autorun/ceshare/forms/BrowseCheats.FRM
    .xml .ps1 polyglot
  • HaxWare/autorun/ceshare/forms/CommentsOrRequests.FRM
    .xml
  • HaxWare/autorun/ceshare/forms/InitialSetup.FRM
    .xml
  • HaxWare/autorun/ceshare/forms/Permissions.FRM
    .xml
  • HaxWare/autorun/ceshare/forms/PublishCheat.FRM
    .xml
  • HaxWare/autorun/ceshare/forms/UpdateOrNew.FRM
    .xml
  • HaxWare/autorun/ceshare/images/link.png
    .png
  • HaxWare/autorun/copytoclipboardastext.lua
    .js
  • HaxWare/autorun/cpuid.lua
  • HaxWare/autorun/custom/Lua files in this folder get executed automatically as well.txt
  • HaxWare/autorun/dlls/32/CEJVMTI.dll
    .dll windows:5 windows x86 arch:x86

    f169cd83c1b5a46b223f247f34ac4096


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HaxWare/autorun/dlls/64/CEJVMTI.dll
    .dll windows:5 windows x64 arch:x64

    323de1ff7655e597353e5677c1bc8a83


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HaxWare/autorun/dotnetinfo.lua
    .js
  • HaxWare/autorun/dotnetpatch.lua
  • HaxWare/autorun/dotnetsearch.lua
    .js
  • HaxWare/autorun/emurpm.frm
    .xml
  • HaxWare/autorun/emurpm.lua
    .js
  • HaxWare/autorun/forms/DotNetInfo.frm
    .xml
  • HaxWare/autorun/forms/DotNetSearch.frm
    .xml
  • HaxWare/autorun/forms/JavaInfo.frm
    .xml
  • HaxWare/autorun/forms/JavaSearch.frm
    .xml
  • HaxWare/autorun/forms/MonoDataCollector.frm
    .xml
  • HaxWare/autorun/forms/frmUltimap2.FRM
    .xml
  • HaxWare/autorun/images/export128x128.png
    .png
  • HaxWare/autorun/images/import128x128.png
    .png
  • HaxWare/autorun/java.lua
    .js
  • HaxWare/autorun/java/androidloadagent.CEA
  • HaxWare/autorun/java/cejvmtiagent.c
  • HaxWare/autorun/java/jvarscan.c
  • HaxWare/autorun/javaClassEditor.lua
  • HaxWare/autorun/javaclass.lua
  • HaxWare/autorun/luahook.lua
  • HaxWare/autorun/luasymbols.lua
  • HaxWare/autorun/modulelistscan.lua
    .js
  • HaxWare/autorun/monoscript.lua
    .js
  • HaxWare/autorun/patchscan.lua
    .js
  • HaxWare/autorun/pseudocode.lua
    .js
  • HaxWare/autorun/pseudocodediagram.lua
    .js
  • HaxWare/autorun/savesession.lua
    .js
  • HaxWare/autorun/splitscanintonewtab.lua
  • HaxWare/autorun/threadsafegui.lua
  • HaxWare/autorun/ultimap2.lua
    .js
  • HaxWare/autorun/versioncheck.lua
    .js
  • HaxWare/autorun/xml/xmlSimple.lua
  • HaxWare/buildsigs.bat
  • HaxWare/ced3d9hook.dll
    .dll windows:5 windows x86 arch:x86

    1918101ac90906330d7a2616375c55e0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HaxWare/ced3d9hook64.dll
    .dll windows:5 windows x64 arch:x64

    4b9b84d7aa5c3523fdc75de4312d466e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HaxWare/cedebug.txt
  • HaxWare/celua.txt
  • HaxWare/class.lua
    .js
  • HaxWare/classwrapper.lua
  • HaxWare/clibs64/lfs.dll
    .dll windows:6 windows x64 arch:x64

    4f96687c5feff2c3645a5c06bd5349eb


    Headers

    Imports

    Exports

    Sections

  • HaxWare/commonmodulelist.txt
  • HaxWare/d3dhook.dll
    .dll windows:5 windows x86 arch:x86

    a4cee279203b8eef2b26aa769c0003a5


    Code Sign

    Headers

    Imports

    Sections

  • HaxWare/d3dhook64.dll
    .dll windows:5 windows x64 arch:x64

    e1df8870766f8039f1e65ca890989bfe


    Code Sign

    Headers

    Imports

    Sections

  • HaxWare/defines.lua
  • HaxWare/donottrace.txt
  • HaxWare/include/_mingw.h
  • HaxWare/include/assert.h
  • HaxWare/include/celib.h
  • HaxWare/include/celog.h
  • HaxWare/include/cepipelib.c
  • HaxWare/include/cesocket.h
  • HaxWare/include/conio.h
  • HaxWare/include/ctype.h
  • HaxWare/include/dir.h
  • HaxWare/include/direct.h
  • HaxWare/include/dirent.h
  • HaxWare/include/dos.h
  • HaxWare/include/errno.h
  • HaxWare/include/excpt.h
  • HaxWare/include/fcntl.h
  • HaxWare/include/fenv.h
  • HaxWare/include/float.h
  • HaxWare/include/inttypes.h
  • HaxWare/include/io.h
  • HaxWare/include/jni.h
  • HaxWare/include/limits.h
  • HaxWare/include/locale.h
  • HaxWare/include/malloc.h
  • HaxWare/include/math.h
  • HaxWare/include/mem.h
  • HaxWare/include/memory.h
  • HaxWare/include/process.h
  • HaxWare/include/sec_api/conio_s.h
  • HaxWare/include/sec_api/crtdbg_s.h
  • HaxWare/include/sec_api/io_s.h
  • HaxWare/include/sec_api/mbstring_s.h
  • HaxWare/include/sec_api/search_s.h
  • HaxWare/include/sec_api/stdio_s.h
  • HaxWare/include/sec_api/stdlib_s.h
  • HaxWare/include/sec_api/stralign_s.h
  • HaxWare/include/sec_api/string_s.h
  • HaxWare/include/sec_api/sys/timeb_s.h
  • HaxWare/include/sec_api/tchar_s.h
  • HaxWare/include/sec_api/time_s.h
  • HaxWare/include/sec_api/wchar_s.h
  • HaxWare/include/setjmp.h
  • HaxWare/include/share.h
  • HaxWare/include/signal.h
  • HaxWare/include/stdarg.h
  • HaxWare/include/stdbool.h
  • HaxWare/include/stddef.h
  • HaxWare/include/stdint.h
  • HaxWare/include/stdio.h
  • HaxWare/include/stdlib.h
  • HaxWare/include/string.h
  • HaxWare/include/sys/fcntl.h
  • HaxWare/include/sys/file.h
  • HaxWare/include/sys/locking.h
  • HaxWare/include/sys/stat.h
  • HaxWare/include/sys/time.h
  • HaxWare/include/sys/timeb.h
  • HaxWare/include/sys/types.h
  • HaxWare/include/sys/unistd.h
  • HaxWare/include/sys/utime.h
  • HaxWare/include/tccdefs.h
  • HaxWare/include/tchar.h
  • HaxWare/include/time.h
  • HaxWare/include/vadefs.h
  • HaxWare/include/values.h
  • HaxWare/include/varargs.h
  • HaxWare/include/wchar.h
  • HaxWare/include/wctype.h
  • HaxWare/include/winapi/basetsd.h
  • HaxWare/include/winapi/basetyps.h
  • HaxWare/include/winapi/guiddef.h
  • HaxWare/include/winapi/poppack.h
  • HaxWare/include/winapi/pshpack1.h
  • HaxWare/include/winapi/pshpack2.h
  • HaxWare/include/winapi/pshpack4.h
  • HaxWare/include/winapi/pshpack8.h
  • HaxWare/include/winapi/winbase.h
  • HaxWare/include/winapi/wincon.h
  • HaxWare/include/winapi/windef.h
  • HaxWare/include/winapi/windows.h
  • HaxWare/include/winapi/winerror.h
  • HaxWare/include/winapi/wingdi.h
  • HaxWare/include/winapi/winnt.h
  • HaxWare/include/winapi/winreg.h
  • HaxWare/include/winapi/winuser.h
  • HaxWare/include/winapi/winver.h
  • HaxWare/include/windowslite.h
  • HaxWare/languages/CeShare.po
  • HaxWare/languages/How to add languages.txt
  • HaxWare/languages/Java.po
  • HaxWare/languages/SaveSessions.po
  • HaxWare/languages/VersionCheck.po
  • HaxWare/languages/cheatengine-x86_64.pot
  • HaxWare/languages/fr_FR/LisezMoi.md
  • HaxWare/languages/fr_FR/cheatengine-x86_64.mo
  • HaxWare/languages/fr_FR/cheatengine-x86_64.po
  • HaxWare/languages/fr_FR/lclstrconsts.mo
  • HaxWare/languages/fr_FR/lclstrconsts.po
  • HaxWare/languages/fr_FR/tutorial-x86_64.mo
  • HaxWare/languages/fr_FR/tutorial-x86_64.po
  • HaxWare/languages/it_IT/Java.po
  • HaxWare/languages/it_IT/LICENSE.MD
  • HaxWare/languages/it_IT/SaveSessions.po
  • HaxWare/languages/it_IT/VersionCheck.po
  • HaxWare/languages/it_IT/lclstrconsts.po
  • HaxWare/languages/it_IT/monoscript.po
  • HaxWare/languages/it_IT/name.txt
  • HaxWare/languages/language.ini
  • HaxWare/languages/lclstrconsts.po
  • HaxWare/languages/monoscript.po
  • HaxWare/languages/patchscan.po
  • HaxWare/languages/pseudocodediagram.po
  • HaxWare/languages/ru_RU/CeShare.po
  • HaxWare/languages/ru_RU/Java.po
  • HaxWare/languages/ru_RU/SaveSessions.po
  • HaxWare/languages/ru_RU/VersionCheck.po
  • HaxWare/languages/ru_RU/cheatengine-x86_64.po
  • HaxWare/languages/ru_RU/lclstrconsts.po
  • HaxWare/languages/ru_RU/monoscript.po
  • HaxWare/languages/ru_RU/name.txt
  • HaxWare/languages/ru_RU/patchscan.po
  • HaxWare/languages/ru_RU/pseudocodediagram.po
  • HaxWare/languages/ru_RU/tutorial-x86_64.po
  • HaxWare/languages/zh_CN/CeShare.po
  • HaxWare/languages/zh_CN/SaveSessions.po
  • HaxWare/languages/zh_CN/VersionCheck.po
  • HaxWare/languages/zh_CN/cheatengine-x86_64.po
  • HaxWare/languages/zh_CN/cheatengine.po
  • HaxWare/languages/zh_CN/java.po
  • HaxWare/languages/zh_CN/lclstrconsts.po
  • HaxWare/languages/zh_CN/monoscript.po
  • HaxWare/languages/zh_CN/patchscan.po
  • HaxWare/languages/zh_CN/pseudocodediagram.po
  • HaxWare/languages/zh_CN/tutorial-x86_64.po
  • HaxWare/languages/zh_TW/Java.po
  • HaxWare/languages/zh_TW/SaveSessions.po
  • HaxWare/languages/zh_TW/VersionCheck.po
  • HaxWare/languages/zh_TW/cheatengine-x86_64.po
  • HaxWare/languages/zh_TW/lclstrconsts.po
  • HaxWare/languages/zh_TW/monoscript.po
  • HaxWare/languages/zh_TW/patchscan.po
  • HaxWare/languages/zh_TW/pseudocodediagram.po
  • HaxWare/languages/zh_TW/tutorial-x86_64.po
  • HaxWare/libipt-32.dll
    .dll windows:5 windows x86 arch:x86

    1555e32b624d5f5e3a4b0f72821c0777


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HaxWare/libipt-64.dll
    .dll windows:6 windows x64 arch:x64

    e32e16398aad7a038ba38d4ca24cf3c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HaxWare/libmikmod32.dll
    .dll windows:6 windows x86 arch:x86

    83efea949fe36df0b049975dd492d8a8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HaxWare/libmikmod64.dll
    .dll windows:6 windows x64 arch:x64

    2620c385706125032143f584b27b115a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HaxWare/lua/lauxlib.pas
  • HaxWare/lua/lua.pas
    .js
  • HaxWare/lua/lualib.pas
  • HaxWare/lua53-32.dll
    .dll windows:5 windows x86 arch:x86

    3991c01e50953690ce06a82b4aab452d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HaxWare/lua53-64.dll
    .dll windows:5 windows x64 arch:x64

    779703c2d47ce86829a9221b077786f6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HaxWare/lua_extra/lua.exe
    .exe windows:6 windows x64 arch:x64

    305a3483275b958c6b18c492ecca8d26


    Headers

    Imports

    Sections

  • HaxWare/lua_extra/lua53-32.exp
  • HaxWare/lua_extra/lua53-32.lib
  • HaxWare/lua_extra/lua53-64.dll
    .dll windows:5 windows x64 arch:x64

    779703c2d47ce86829a9221b077786f6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HaxWare/lua_extra/lua53-64.exp
  • HaxWare/lua_extra/lua53-64.lib
  • HaxWare/lua_extra/luac32.exe
    .exe windows:6 windows x86 arch:x86

    df3bb821a427e60e03315ecf0d446170


    Headers

    Imports

    Sections

  • HaxWare/lua_extra/luac64.exe
    .exe windows:6 windows x64 arch:x64

    7c1b0e130d7d46ddb9e63b559288e6d4


    Headers

    Imports

    Sections

  • HaxWare/main.lua
  • HaxWare/nil
  • HaxWare/overlay.fx
  • HaxWare/packfiles.bat
  • HaxWare/process.exe
    .exe windows:6 windows x64 arch:x64

    321579003198ff3fdb695d3cf3016d0b


    Headers

    Imports

    Sections

  • HaxWare/robloxbb.lua
    .js
  • HaxWare/settings
  • HaxWare/standalonephase1.dat
    .exe windows:5 windows x86 arch:x86

    8d92fa1956a6a631c642190121740197


    Headers

    Imports

    Sections

  • HaxWare/tiny.dat
    .exe windows:5 windows x86 arch:x86

    eae719b7384e30dfa50a17f56fc10efb


    Headers

    Imports

    Sections

  • HaxWare/win64/dbghelp.dll
    .dll windows:10 windows x64 arch:x64

    c3c7540a73aa6487d00a1f12dd6033c8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HaxWare/win64/old/dbghelp.dll
    .dll windows:6 windows x64 arch:x64

    1070d0a734a349d697cec96febe8448f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HaxWare/win64/old/symsrv.dll
    .dll windows:6 windows x64 arch:x64

    9e212ffe0679a2b77355884e27f8770c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HaxWare/win64/sqlite3.dll
    .dll windows:6 windows x64 arch:x64

    6cc72dfd29b7bcfb61ec75e3082dfc41


    Headers

    Imports

    Exports

    Sections

  • HaxWare/win64/symsrv.dll
    .dll windows:10 windows x64 arch:x64

    05f149f096a6c7f86365ddf52ede142f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HaxWare/win64/symsrv.yes