General

  • Target

    blindness v2.rar

  • Size

    10.2MB

  • MD5

    d060fdd2f490ba02d406a84a4f28bb41

  • SHA1

    1c29d77fd6d13ed6971f7efeef2da26cb2d7b0ef

  • SHA256

    35ae80f3781c2af00531dbdabe71af3003662fc11faad99fd31c30ac3b34627c

  • SHA512

    8286dfb9e50f26e335541d749921b7958ca66a9b7aefe00e7a01766285258387af83baff7c0936ea052f2ba176e2de71a992552379ef59f3b2ddfa84c3099d0d

  • SSDEEP

    196608:xdK8+1eaRuGEXQ78AXHOqK6zZhFmmrBdoMXMNdjWvom9qZZesva1y9m8ZEGzOQq:xTlIuGEApXuqK6gMXMyw8mZjauXZEGql

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • blindness v2.rar
    .rar
  • Blindness/CED3D10Hook.dll
    .dll windows:5 windows x86 arch:x86

    54e6baf4a7fc30cce7ae3af2ae401782


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Blindness/CED3D10Hook64.dll
    .dll windows:5 windows x64 arch:x64

    9ecc17e8125484bf6d22b853aa6333a7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Blindness/CED3D11Hook.dll
    .dll windows:5 windows x86 arch:x86

    a3258c6ee97d726a9efc2336a95f2c30


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Blindness/CED3D11Hook64.dll
    .dll windows:5 windows x64 arch:x64

    7b490c73f6a24a175ff2ab5985e57ccc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Blindness/InjectFix.exe
    .exe windows:6 windows x64 arch:x64

    b67b812388a1094acd5db594749b4971


    Headers

    Imports

    Sections

  • Blindness/autorun/AddToNewGroup.LUA
    .js
  • Blindness/autorun/DotNetInject.lua
  • Blindness/autorun/DotNetInterface.lua
    .js
  • Blindness/autorun/JavaInfo.lua
    .js
  • Blindness/autorun/JavaSearch.lua
    .js
  • Blindness/autorun/MethodInvokeDialog.lua
    .js
  • Blindness/autorun/SpeedhackV3.lua
  • Blindness/autorun/affinity.lua
  • Blindness/autorun/andtools.lua
    .js
  • Blindness/autorun/andtools/files that should be here.txt
  • Blindness/autorun/autosave.LUA
    .js
  • Blindness/autorun/babyce.lua
    .js
  • Blindness/autorun/bigendian.lua
    .js
  • Blindness/autorun/bypass.lua
  • Blindness/autorun/celib.lua
  • Blindness/autorun/ceshare.lua
    .js
  • Blindness/autorun/ceshare/ceshare_account.lua
    .js
  • Blindness/autorun/ceshare/ceshare_comments.lua
    .js
  • Blindness/autorun/ceshare/ceshare_fulltablelist.lua
    .js
  • Blindness/autorun/ceshare/ceshare_permissions.lua
    .js
  • Blindness/autorun/ceshare/ceshare_processlistextention.lua
    .js
  • Blindness/autorun/ceshare/ceshare_publish.lua
    .js
  • Blindness/autorun/ceshare/ceshare_querycheats.lua
    .js
  • Blindness/autorun/ceshare/ceshare_requests.lua
    .js
  • Blindness/autorun/ceshare/forms/BrowseCheats.FRM
    .xml
  • Blindness/autorun/ceshare/forms/CommentsOrRequests.FRM
    .xml
  • Blindness/autorun/ceshare/forms/InitialSetup.FRM
    .xml
  • Blindness/autorun/ceshare/forms/Permissions.FRM
    .xml
  • Blindness/autorun/ceshare/forms/PublishCheat.FRM
    .xml
  • Blindness/autorun/ceshare/forms/UpdateOrNew.FRM
    .xml
  • Blindness/autorun/ceshare/images/link.png
    .png
  • Blindness/autorun/copytoclipboardastext.lua
    .js
  • Blindness/autorun/cpuid.lua
  • Blindness/autorun/custom/Lua files in this folder get executed automatically as well.txt
  • Blindness/autorun/dlls/32/CEJVMTI.dll
    .dll windows:5 windows x86 arch:x86

    f169cd83c1b5a46b223f247f34ac4096


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Blindness/autorun/dlls/64/CEJVMTI.dll
    .dll windows:5 windows x64 arch:x64

    323de1ff7655e597353e5677c1bc8a83


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Blindness/autorun/dotnetinfo.lua
    .js
  • Blindness/autorun/dotnetpatch.lua
  • Blindness/autorun/dotnetsearch.lua
    .js
  • Blindness/autorun/emurpm.frm
    .xml
  • Blindness/autorun/emurpm.lua
    .js
  • Blindness/autorun/forms/DotNetInfo.frm
    .xml
  • Blindness/autorun/forms/DotNetSearch.frm
    .xml
  • Blindness/autorun/forms/JavaInfo.frm
    .xml
  • Blindness/autorun/forms/JavaSearch.frm
    .xml
  • Blindness/autorun/forms/MonoDataCollector.frm
    .xml
  • Blindness/autorun/forms/frmUltimap2.FRM
    .xml
  • Blindness/autorun/images/export128x128.png
    .png
  • Blindness/autorun/images/import128x128.png
    .png
  • Blindness/autorun/java.lua
    .js
  • Blindness/autorun/java/androidloadagent.CEA
  • Blindness/autorun/java/cejvmtiagent.c
  • Blindness/autorun/java/jvarscan.c
  • Blindness/autorun/javaClassEditor.lua
  • Blindness/autorun/javaclass.lua
  • Blindness/autorun/luahook.lua
  • Blindness/autorun/luasymbols.lua
  • Blindness/autorun/modulelistscan.lua
    .js
  • Blindness/autorun/monoscript.lua
    .js
  • Blindness/autorun/patchscan.lua
    .js
  • Blindness/autorun/pseudocode.lua
    .js
  • Blindness/autorun/pseudocodediagram.lua
    .js
  • Blindness/autorun/roblox.lua
    .js
  • Blindness/autorun/savesession.lua
    .js
  • Blindness/autorun/splitscanintonewtab.lua
  • Blindness/autorun/threadsafegui.lua
  • Blindness/autorun/ultimap2.lua
    .js
  • Blindness/autorun/versioncheck.lua
    .js
  • Blindness/autorun/xml/xmlSimple.lua
  • Blindness/blindness.exe
    .exe windows:4 windows x64 arch:x64

    2be4009946d73b64e662d60f18501ab0


    Headers

    Imports

    Sections

  • Blindness/buildsigs.bat
  • Blindness/ced3d9hook.dll
    .dll windows:5 windows x86 arch:x86

    1918101ac90906330d7a2616375c55e0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Blindness/ced3d9hook64.dll
    .dll windows:5 windows x64 arch:x64

    4b9b84d7aa5c3523fdc75de4312d466e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Blindness/cedebug.txt
  • Blindness/celua.txt
  • Blindness/class.lua
    .js
  • Blindness/classwrapper.lua
  • Blindness/clibs64/lfs.dll
    .dll windows:6 windows x64 arch:x64

    4f96687c5feff2c3645a5c06bd5349eb


    Headers

    Imports

    Exports

    Sections

  • Blindness/commonmodulelist.txt
  • Blindness/d3dhook.dll
    .dll windows:5 windows x86 arch:x86

    a4cee279203b8eef2b26aa769c0003a5


    Code Sign

    Headers

    Imports

    Sections

  • Blindness/d3dhook64.dll
    .dll windows:5 windows x64 arch:x64

    e1df8870766f8039f1e65ca890989bfe


    Code Sign

    Headers

    Imports

    Sections

  • Blindness/defines.lua
  • Blindness/donottrace.txt
  • Blindness/include/_mingw.h
  • Blindness/include/assert.h
  • Blindness/include/celib.h
  • Blindness/include/celog.h
  • Blindness/include/cepipelib.c
  • Blindness/include/cesocket.h
  • Blindness/include/conio.h
  • Blindness/include/ctype.h
  • Blindness/include/dir.h
  • Blindness/include/direct.h
  • Blindness/include/dirent.h
  • Blindness/include/dos.h
  • Blindness/include/errno.h
  • Blindness/include/excpt.h
  • Blindness/include/fcntl.h
  • Blindness/include/fenv.h
  • Blindness/include/float.h
  • Blindness/include/inttypes.h
  • Blindness/include/io.h
  • Blindness/include/jni.h
  • Blindness/include/limits.h
  • Blindness/include/locale.h
  • Blindness/include/malloc.h
  • Blindness/include/math.h
  • Blindness/include/mem.h
  • Blindness/include/memory.h
  • Blindness/include/process.h
  • Blindness/include/sec_api/conio_s.h
  • Blindness/include/sec_api/crtdbg_s.h
  • Blindness/include/sec_api/io_s.h
  • Blindness/include/sec_api/mbstring_s.h
  • Blindness/include/sec_api/search_s.h
  • Blindness/include/sec_api/stdio_s.h
  • Blindness/include/sec_api/stdlib_s.h
  • Blindness/include/sec_api/stralign_s.h
  • Blindness/include/sec_api/string_s.h
  • Blindness/include/sec_api/sys/timeb_s.h
  • Blindness/include/sec_api/tchar_s.h
  • Blindness/include/sec_api/time_s.h
  • Blindness/include/sec_api/wchar_s.h
  • Blindness/include/setjmp.h
  • Blindness/include/share.h
  • Blindness/include/signal.h
  • Blindness/include/stdarg.h
  • Blindness/include/stdbool.h
  • Blindness/include/stddef.h
  • Blindness/include/stdint.h
  • Blindness/include/stdio.h
  • Blindness/include/stdlib.h
  • Blindness/include/string.h
  • Blindness/include/sys/fcntl.h
  • Blindness/include/sys/file.h
  • Blindness/include/sys/locking.h
  • Blindness/include/sys/stat.h
  • Blindness/include/sys/time.h
  • Blindness/include/sys/timeb.h
  • Blindness/include/sys/types.h
  • Blindness/include/sys/unistd.h
  • Blindness/include/sys/utime.h
  • Blindness/include/tccdefs.h
  • Blindness/include/tchar.h
  • Blindness/include/time.h
  • Blindness/include/vadefs.h
  • Blindness/include/values.h
  • Blindness/include/varargs.h
  • Blindness/include/wchar.h
  • Blindness/include/wctype.h
  • Blindness/include/winapi/basetsd.h
  • Blindness/include/winapi/basetyps.h
  • Blindness/include/winapi/guiddef.h
  • Blindness/include/winapi/poppack.h
  • Blindness/include/winapi/pshpack1.h
  • Blindness/include/winapi/pshpack2.h
  • Blindness/include/winapi/pshpack4.h
  • Blindness/include/winapi/pshpack8.h
  • Blindness/include/winapi/winbase.h
  • Blindness/include/winapi/wincon.h
  • Blindness/include/winapi/windef.h
  • Blindness/include/winapi/windows.h
  • Blindness/include/winapi/winerror.h
  • Blindness/include/winapi/wingdi.h
  • Blindness/include/winapi/winnt.h
  • Blindness/include/winapi/winreg.h
  • Blindness/include/winapi/winuser.h
  • Blindness/include/winapi/winver.h
  • Blindness/include/windowslite.h
  • Blindness/languages/CeShare.po
  • Blindness/languages/How to add languages.txt
  • Blindness/languages/Java.po
  • Blindness/languages/SaveSessions.po
  • Blindness/languages/VersionCheck.po
  • Blindness/languages/cheatengine-x86_64.pot
  • Blindness/languages/fr_FR/LisezMoi.md
  • Blindness/languages/fr_FR/cheatengine-x86_64.mo
  • Blindness/languages/fr_FR/cheatengine-x86_64.po
  • Blindness/languages/fr_FR/lclstrconsts.mo
  • Blindness/languages/fr_FR/lclstrconsts.po
  • Blindness/languages/fr_FR/tutorial-x86_64.mo
  • Blindness/languages/fr_FR/tutorial-x86_64.po
  • Blindness/languages/it_IT/Java.po
  • Blindness/languages/it_IT/LICENSE.MD
  • Blindness/languages/it_IT/SaveSessions.po
  • Blindness/languages/it_IT/VersionCheck.po
  • Blindness/languages/it_IT/lclstrconsts.po
  • Blindness/languages/it_IT/monoscript.po
  • Blindness/languages/it_IT/name.txt
  • Blindness/languages/language.ini
  • Blindness/languages/lclstrconsts.po
  • Blindness/languages/monoscript.po
  • Blindness/languages/patchscan.po
  • Blindness/languages/pseudocodediagram.po
  • Blindness/languages/ru_RU/CeShare.po
  • Blindness/languages/ru_RU/Java.po
  • Blindness/languages/ru_RU/SaveSessions.po
  • Blindness/languages/ru_RU/VersionCheck.po
  • Blindness/languages/ru_RU/cheatengine-x86_64.po
  • Blindness/languages/ru_RU/lclstrconsts.po
  • Blindness/languages/ru_RU/monoscript.po
  • Blindness/languages/ru_RU/name.txt
  • Blindness/languages/ru_RU/patchscan.po
  • Blindness/languages/ru_RU/pseudocodediagram.po
  • Blindness/languages/ru_RU/tutorial-x86_64.po
  • Blindness/languages/zh_CN/CeShare.po
  • Blindness/languages/zh_CN/SaveSessions.po
  • Blindness/languages/zh_CN/VersionCheck.po
  • Blindness/languages/zh_CN/cheatengine-x86_64.po
  • Blindness/languages/zh_CN/cheatengine.po
  • Blindness/languages/zh_CN/java.po
  • Blindness/languages/zh_CN/lclstrconsts.po
  • Blindness/languages/zh_CN/monoscript.po
  • Blindness/languages/zh_CN/patchscan.po
  • Blindness/languages/zh_CN/pseudocodediagram.po
  • Blindness/languages/zh_CN/tutorial-x86_64.po
  • Blindness/languages/zh_TW/Java.po
  • Blindness/languages/zh_TW/SaveSessions.po
  • Blindness/languages/zh_TW/VersionCheck.po
  • Blindness/languages/zh_TW/cheatengine-x86_64.po
  • Blindness/languages/zh_TW/lclstrconsts.po
  • Blindness/languages/zh_TW/monoscript.po
  • Blindness/languages/zh_TW/patchscan.po
  • Blindness/languages/zh_TW/pseudocodediagram.po
  • Blindness/languages/zh_TW/tutorial-x86_64.po
  • Blindness/libipt-32.dll
    .dll windows:5 windows x86 arch:x86

    1555e32b624d5f5e3a4b0f72821c0777


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Blindness/libipt-64.dll
    .dll windows:6 windows x64 arch:x64

    e32e16398aad7a038ba38d4ca24cf3c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Blindness/libmikmod32.dll
    .dll windows:6 windows x86 arch:x86

    83efea949fe36df0b049975dd492d8a8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Blindness/libmikmod64.dll
    .dll windows:6 windows x64 arch:x64

    2620c385706125032143f584b27b115a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Blindness/lua/lauxlib.pas
  • Blindness/lua/lua.pas
    .js
  • Blindness/lua/lualib.pas
  • Blindness/lua53-32.dll
    .dll windows:5 windows x86 arch:x86

    3991c01e50953690ce06a82b4aab452d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Blindness/lua53-64.dll
    .dll windows:5 windows x64 arch:x64

    779703c2d47ce86829a9221b077786f6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Blindness/lua_extra/lua.exe
    .exe windows:6 windows x64 arch:x64

    305a3483275b958c6b18c492ecca8d26


    Headers

    Imports

    Sections

  • Blindness/lua_extra/lua53-32.exp
  • Blindness/lua_extra/lua53-32.lib
  • Blindness/lua_extra/lua53-64.dll
    .dll windows:5 windows x64 arch:x64

    779703c2d47ce86829a9221b077786f6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Blindness/lua_extra/lua53-64.exp
  • Blindness/lua_extra/lua53-64.lib
  • Blindness/lua_extra/luac32.exe
    .exe windows:6 windows x86 arch:x86

    df3bb821a427e60e03315ecf0d446170


    Headers

    Imports

    Sections

  • Blindness/lua_extra/luac64.exe
    .exe windows:6 windows x64 arch:x64

    7c1b0e130d7d46ddb9e63b559288e6d4


    Headers

    Imports

    Sections

  • Blindness/main.lua
  • Blindness/nil
  • Blindness/overlay.fx
  • Blindness/packfiles.bat
  • Blindness/process.exe
    .exe windows:6 windows x64 arch:x64

    321579003198ff3fdb695d3cf3016d0b


    Headers

    Imports

    Sections

  • Blindness/robloxbb.lua
    .js
  • Blindness/run.exe
    .exe windows:6 windows x64 arch:x64

    61cdc111e7101e7b3a062ae5a6f976c5


    Headers

    Imports

    Sections

  • Blindness/settings
  • Blindness/standalonephase1.dat
    .exe windows:5 windows x86 arch:x86

    8d92fa1956a6a631c642190121740197


    Headers

    Imports

    Sections

  • Blindness/tiny.dat
    .exe windows:5 windows x86 arch:x86

    eae719b7384e30dfa50a17f56fc10efb


    Headers

    Imports

    Sections

  • Blindness/win64/dbghelp.dll
    .dll windows:10 windows x64 arch:x64

    c3c7540a73aa6487d00a1f12dd6033c8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Blindness/win64/old/dbghelp.dll
    .dll windows:6 windows x64 arch:x64

    1070d0a734a349d697cec96febe8448f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Blindness/win64/old/symsrv.dll
    .dll windows:6 windows x64 arch:x64

    9e212ffe0679a2b77355884e27f8770c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Blindness/win64/sqlite3.dll
    .dll windows:6 windows x64 arch:x64

    6cc72dfd29b7bcfb61ec75e3082dfc41


    Headers

    Imports

    Exports

    Sections

  • Blindness/win64/symsrv.dll
    .dll windows:10 windows x64 arch:x64

    05f149f096a6c7f86365ddf52ede142f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Blindness/win64/symsrv.yes