New_Loader_V[.]4[.]6[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

New_Loader_V.4.6.rar
Size

22.4MB
MD5

6edf40a3fc08002d99aa22960c3a8595
SHA1

b9fd3bf0810b02c6b3469215c31ad415149aeab7
SHA256

67085d81ee8e867418035acef15160e6a9937b03ec63e8c31ef18d1f2c405b3d
SHA512

adfdfc1f5989ab5fd6d9ec451918730c6f9fbe62577ceda2400534cee4734abd8db747312431a5b822add15a8958c77c2f55cb46fbcea0263b8d644c75770cfc
SSDEEP

393216:6CsDhryO5MqgLgojy2s88FsJptC50SQhJQiRDpBInzb2axWAvDiKLqZdi1b19D2:CDhGd288Szk50lJLp6zb2kWAuKujit10

Score

3^/10

Malware Config

Signatures

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/New_Loader_V.4.6/External Fivem/External Hack Fivem.exe
unpack001/New_Loader_V.4.6/Mw3 Call of duty/Mw3 Call of duty.exe
unpack001/New_Loader_V.4.6/Spoofer Fivem/Spoofer Fivem.exe

Files

New_Loader_V.4.6.rar
.rar
New_Loader_V.4.6/Clear Unban WichxGod.bat
New_Loader_V.4.6/External Fivem/External Hack Fivem.exe
.exe windows:6 windows x64 arch:x64

acbede83e3f896df8c4fcbf4bb3b2f6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ws2_32

recvfrom

crypt32

CertFreeCertificateChain

wldap32

ord143

normaliz

IdnToAscii

d3d11

D3D11CreateDeviceAndSwapChain

kernel32

GetCurrentThreadId
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

GetCursorPos

advapi32

ConvertSidToStringSidW

ole32

CoCreateInstance

oleaut32

SysAllocString

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z

imm32

ImmGetContext

d3dcompiler_43

D3DCompile

dwmapi

DwmExtendFrameIntoClientArea

d3dx9_43

D3DXMatrixTranspose

userenv

UnloadUserProfile

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_CxxThrowException

api-ms-win-crt-stdio-l1-1-0

_get_stream_buffer_pointers

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-string-l1-1-0

_stricmp

api-ms-win-crt-heap-l1-1-0

malloc

api-ms-win-crt-runtime-l1-1-0

_errno

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-math-l1-1-0

log

api-ms-win-crt-filesystem-l1-1-0

_unlock_file

api-ms-win-crt-locale-l1-1-0

localeconv

api-ms-win-crt-time-l1-1-0

_gmtime64

api-ms-win-crt-environment-l1-1-0

getenv

Sections

.text
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 373KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.g<y
Size: - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.zHv
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.4UG
Size: 5.2MB - Virtual size: 5.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
New_Loader_V.4.6/External Fivem/external.txt
New_Loader_V.4.6/Mw3 Call of duty/Mw3 Call of duty.exe
.exe windows:6 windows x64 arch:x64

6522c6093ba2a3cdc50a489dff9aaeca

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

HeapSize
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

GetWindowLongW

advapi32

CryptEncrypt

ole32

CoCreateInstance

oleaut32

VariantClear

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

userenv

UnloadUserProfile

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception

api-ms-win-crt-runtime-l1-1-0

_getpid

api-ms-win-crt-stdio-l1-1-0

fgets

api-ms-win-crt-heap-l1-1-0

calloc

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-math-l1-1-0

_dsign

api-ms-win-crt-string-l1-1-0

strspn

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-filesystem-l1-1-0

remove

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-environment-l1-1-0

_dupenv_s

ws2_32

htons

crypt32

CertEnumCertificatesInStore

wldap32

ord26

normaliz

IdnToAscii

Sections

.text
Size: - Virtual size: 727KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.{~L
Size: - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.`7d
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pJe
Size: 8.9MB - Virtual size: 8.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
New_Loader_V.4.6/Spoofer Fivem/Spoofer Fivem.exe
.exe windows:6 windows x64 arch:x64

ce299a41087007a1c1f9d2d9fbc0595c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

HeapFree
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

GetWindowLongW

advapi32

CryptEncrypt

ole32

CoCreateInstance

oleaut32

SysFreeString

msvcp140

??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ

urlmon

URLDownloadToFileW

userenv

UnloadUserProfile

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception

api-ms-win-crt-runtime-l1-1-0

__sys_nerr

api-ms-win-crt-stdio-l1-1-0

_lseeki64

api-ms-win-crt-heap-l1-1-0

realloc

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-string-l1-1-0

strncmp

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-filesystem-l1-1-0

remove

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-environment-l1-1-0

_dupenv_s

ws2_32

getsockname

crypt32

CertEnumCertificatesInStore

wldap32

ord27

normaliz

IdnToAscii

Sections

.text
Size: - Virtual size: 771KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.KF?
Size: - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.7y=
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SbZ
Size: 8.9MB - Virtual size: 8.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
New_Loader_V.4.6/วิธีปลดแบน.txt
New_Loader_V.4.6/วิธีใช้งาน External.txt
New_Loader_V.4.6/วิธีใช้งาน Mw3 Call of duty.txt
New_Loader_V.4.6/แก้ไขเออเร่อ Vulnerable driver/22h2fix.bat
New_Loader_V.4.6/แก้ไขเออเร่อ Vulnerable driver/3.reg
New_Loader_V.4.6/แก้ไขเออเร่อ Vulnerable driver/ALLFIX.bat
New_Loader_V.4.6/แก้ไขเออเร่อ Vulnerable driver/BSOD_FIX.bat
New_Loader_V.4.6/แก้ไขเออเร่อ Vulnerable driver/VulnerableDriverFix.bat
New_Loader_V.4.6/แก้ไขเออเร่อ Vulnerable driver/fix_error.bat
New_Loader_V.4.6/แก้ไขเออเร่อ Vulnerable driver/วิธีแก้ไข.txt

Sharing

General

Malware Config

Signatures

Files

acbede83e3f896df8c4fcbf4bb3b2f6b

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

crypt32

wldap32

normaliz

d3d11

kernel32

user32

advapi32

ole32

oleaut32

msvcp140

imm32

d3dcompiler_43

dwmapi

d3dx9_43

userenv

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-environment-l1-1-0

Sections

.text Size: - Virtual size: 1.1MB

.rdata Size: - Virtual size: 373KB

.data Size: - Virtual size: 1.3MB

.pdata Size: - Virtual size: 48KB

.g<y Size: - Virtual size: 2.6MB

.zHv Size: 5KB - Virtual size: 5KB

.4UG Size: 5.2MB - Virtual size: 5.2MB

.reloc Size: 5KB - Virtual size: 5KB

.rsrc Size: 149KB - Virtual size: 149KB

6522c6093ba2a3cdc50a489dff9aaeca

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

msvcp140

userenv

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-environment-l1-1-0

ws2_32

crypt32

wldap32

normaliz

Sections

.text Size: - Virtual size: 727KB

.text
Size: - Virtual size: 1.1MB

.rdata
Size: - Virtual size: 373KB

.data
Size: - Virtual size: 1.3MB

.pdata
Size: - Virtual size: 48KB

.g<y
Size: - Virtual size: 2.6MB

.zHv
Size: 5KB - Virtual size: 5KB

.4UG
Size: 5.2MB - Virtual size: 5.2MB

.reloc
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 149KB - Virtual size: 149KB

.text
Size: - Virtual size: 727KB

.rdata
Size: - Virtual size: 130KB

.data
Size: - Virtual size: 6.2MB

.pdata
Size: - Virtual size: 36KB

.{~L
Size: - Virtual size: 2.5MB

.`7d
Size: 5KB - Virtual size: 5KB

.pJe
Size: 8.9MB - Virtual size: 8.9MB

.reloc
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 149KB - Virtual size: 149KB

.text
Size: - Virtual size: 771KB

.rdata
Size: - Virtual size: 139KB

.data
Size: - Virtual size: 6.2MB

.pdata
Size: - Virtual size: 36KB

.KF?
Size: - Virtual size: 2.5MB

.7y=
Size: 5KB - Virtual size: 5KB

.SbZ
Size: 8.9MB - Virtual size: 8.9MB

.reloc
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 149KB - Virtual size: 149KB