OwnCheat[.]exe | Triage™

General

Target
OwnCheat.exe
Size 462KB
Sample240603-l26cksca69
SHA256 7c1dbbb9d8ad8966d07a1aff6e5e47722b25f36ecc70e64bb844019eae7ab2ed
MD5 414e4a04f59f2b451e678600e24d4f03
SHA1 04d83260a8cdf7689166a753765283f72c84c064
SHA512 fee4566868537b2f9f78c43d3fd705423683a349a81162b5164d358f45291a604ffb9645c5a92b806ff337d523edae0367b211500ac1ec932a1e77c148bb1fba
SSDEEP 12288:sY5KPstTP9fMxKTGhApYvLx/J9ZMWfdqZwWMUC:RkPwTPRKjApYNJ9x0X
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
OwnCheat.exe

File Explorer

OwnCheat.exe

.exe 462KB

OwnCheat.exe

IMPHASH fec98778e46bf1d6aed3f9ad74a5bb8d
SHA256 7c1dbbb9d8ad8966d07a1aff6e5e47722b25f36ecc70e64bb844019eae7ab2ed
MD5 414e4a04f59f2b451e678600e24d4f03
SHA1 04d83260a8cdf7689166a753765283f72c84c064
SHA512 fee4566868537b2f9f78c43d3fd705423683a349a81162b5164d358f45291a604ffb9645c5a92b806ff337d523edae0367b211500ac1ec932a1e77c148bb1fba
SSDEEP 12288:sY5KPstTP9fMxKTGhApYvLx/J9ZMWfdqZwWMUC:RkPwTPRKjApYNJ9x0X
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

25878

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

GetNumberOfEventLogRecords

kernel32

VirtualAlloc WaitForSingleObjectEx CloseHandle FreeConsole CreateThread QueryPerformanceCounter QueryPerformanceFrequency WideCharToMultiByte GetCurrentThreadId ReleaseSRWLockExclusive Sleep GetExitCodeThread InitializeCriticalSectionEx GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx WakeAllConditionVariable GetStringTypeW GetCPInfo IsProcessorFeaturePresent GetCurrentProcessId InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcess TerminateProcess CreateFileW RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap HeapSize WriteConsoleW

Sharing