undetek-v6[.]9[.]6[.]1[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
undetek-v6.9.6.1.zip
Size 47KB
Sample240808-nbxnvswflb
SHA256 dba31301826d1ebd42bf63dbf7b8ef5e8d32bd3249b675e028c5f7caf7b6ee4d
MD5 2194e466c5fc6b85e528bd8da16179f1
SHA1 32e5e181f797695bb6c595b5d1a7ac448f6fb365
SHA512 7d7da885ea825e9b502c087003778cead2c23ff1bca9395ac1e7fe913da1c0338dc70cd5cd04e7f5b6ec32326738b23816ab129ab1ef407dc6bbe0ef433260e8
SSDEEP 768:0nZeNVeXJ5wQIkxUuIjrun87GFD8wAWhsFOZkpKu9x22iqmvgQK1n9OdrS+bGna0:0nYQvwQIKUBfunhiWeFOZksu9E7+xjuq
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/undetek-v6.9.6.1/undetek-v6.9.6.1.exe

File Explorer

undetek-v6.9.6.1.zip

.zip 47KB
undetek-v6.9.6.1/Aimbot Guide.txt

1KB
undetek-v6.9.6.1/Cheat Troubleshooting.txt

114B
undetek-v6.9.6.1/Install Guide.txt

1KB
undetek-v6.9.6.1/undetek-v6.9.6.1.exe

.exe 90KB

undetek-v6.9.6.1.zip

SHA256 dba31301826d1ebd42bf63dbf7b8ef5e8d32bd3249b675e028c5f7caf7b6ee4d
MD5 2194e466c5fc6b85e528bd8da16179f1
SHA1 32e5e181f797695bb6c595b5d1a7ac448f6fb365
SHA512 7d7da885ea825e9b502c087003778cead2c23ff1bca9395ac1e7fe913da1c0338dc70cd5cd04e7f5b6ec32326738b23816ab129ab1ef407dc6bbe0ef433260e8
SSDEEP 768:0nZeNVeXJ5wQIkxUuIjrun87GFD8wAWhsFOZkpKu9x22iqmvgQK1n9OdrS+bGna0:0nYQvwQIKUBfunhiWeFOZksu9E7+xjuq
MD5 SHA1 SHA512 SSDEEP

undetek-v6.9.6.1/undetek-v6.9.6.1.exe

IMPHASH 5bb21d27c3aa18d239f3a8a94d0fa7eb
SHA256 f5acbf080ed8514c3ad882a711a4196ddf9e44aefcbc25e5e37eedcc26e4def6
MD5 7b30f8bd4e2b4693a3c25c4fbc105e32
SHA1 af5884aeeae68af4bd6c26839c9a33549d0d3b9f
SHA512 7631e04080dc5e7d12f062f10205b716887e9cad09d8e4ec272bc0ca5ec7fedcb8d3b8bbd46c38661debb828c075464c4cf3a20ee3c2c5e4c1f2ddb31297f3a6
SSDEEP 1536:hMgj95m++vclizVMDltmrTaCb/ywP7OY95cG+r/5KLi+de+Pe:hlo+Y2Dmna8/l7OYwGeKVc+P
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

32486

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CloseHandle WaitForSingleObject Sleep CreateRemoteThread OpenProcess GetSystemTimeAsFileTime GetTickCount64 VirtualAllocEx VirtualProtectEx ReadProcessMemory WriteProcessMemory GetModuleHandleA GetProcAddress CreateToolhelp32Snapshot Process32First Process32Next GetStartupInfoW IsDebuggerPresent InitializeSListHead GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetModuleHandleW

user32

GetAsyncKeyState SendInput

msvcp140

?_Xlength_error@std@@YAXPBD@Z

ws2_32

freeaddrinfo getaddrinfo WSAGetLastError recv socket WSACleanup WSAStartup closesocket connect send

vcruntime140

strchr strstr memset memcpy __std_exception_copy __std_exception_destroy _CxxThrowException __CxxFrameHandler3 __std_type_info_destroy_list __current_exception __current_exception_context _except_handler4_common memmove

api-ms-win-crt-string-l1-1-0

wcslen strcmp strncpy strlen

api-ms-win-crt-utility-l1-1-0

llabs

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __stdio_common_vfprintf __stdio_common_vfscanf __p__commode _set_fmode __stdio_common_vsprintf getchar

api-ms-win-crt-runtime-l1-1-0

exit _exit _initterm_e __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _initterm _set_app_type _seh_filter_exe _seh_filter_dll _initialize_onexit_table _register_onexit_function _execute_onexit_table _crt_atexit _crt_at_quick_exit _controlfp_s terminate _initialize_narrow_environment _get_initial_narrow_environment _invalid_parameter_noinfo_noreturn _configure_narrow_argv

api-ms-win-crt-heap-l1-1-0

free _set_new_mode malloc _callnewh

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale