Cheat[.]exe | Triage™

General

Target
Cheat.exe
Size 305KB
Sample240524-p5tpqsdf9y
SHA256 3974d051f1e07090bc0e0ca46f7a1268dc91e6e2bd2ceb2855ff36720d7313ba
MD5 5a54c4466bea3ff4c9b82f290f46c64c
SHA1 5065c65911b019215bb9a4b01274f2847796183e
SHA512 420c765462ec052fb41ea2ed1fb04f9db919d533359adafc75a03d91f53cc53c6e30e20cb3c9f6db8926af3b88c7bdc70e10c78c57459c8b088aa825541ce750
SSDEEP 6144:25LngjinXjXuZzmrQoO778LVcXneHDKcVAqR4NZr/SAI76MfXyHeC6up:2Zngj8kP8LVAnejKc2S2E+ipup
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Cheat.exe

File Explorer

Cheat.exe

.exe 305KB

Cheat.exe

IMPHASH f9531947707a40ed7d1e9b9b8bfcbdb8
SHA256 3974d051f1e07090bc0e0ca46f7a1268dc91e6e2bd2ceb2855ff36720d7313ba
MD5 5a54c4466bea3ff4c9b82f290f46c64c
SHA1 5065c65911b019215bb9a4b01274f2847796183e
SHA512 420c765462ec052fb41ea2ed1fb04f9db919d533359adafc75a03d91f53cc53c6e30e20cb3c9f6db8926af3b88c7bdc70e10c78c57459c8b088aa825541ce750
SSDEEP 6144:25LngjinXjXuZzmrQoO778LVcXneHDKcVAqR4NZr/SAI76MfXyHeC6up:2Zngj8kP8LVAnejKc2S2E+ipup
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

18702

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitForSingleObject CreateThread VirtualAlloc GetModuleHandleA GetProcAddress EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection MultiByteToWideChar WideCharToMultiByte LCMapStringEx GetStringTypeW GetCPInfo IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW GetCurrentProcess TerminateProcess CreateFileW RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap HeapSize WriteConsoleW

Sharing