General

  • Target

    LoaderCheat_v2.zip

  • Size

    10.5MB

  • MD5

    b9627e1d2aa1c437ad9db487d457efc1

  • SHA1

    1da3534396d96813916d25ecd38ae6b2fa0bb353

  • SHA256

    abcd3cc1390c21f5bdb3ee98e151d157a7379c0cb464f634171dfd56c9d45da5

  • SHA512

    468fefec4f29cd074837943867c40a2a26d0ace3ac23429807111b6959e50a0e4e0c64f4e6f728d960a9538acafa15c7c4986e42ac3374e05ecb041ff74cf170

  • SSDEEP

    196608:kb1lgcXzrCDMKp+IiLAQZ27oYgUZKnbzpwNntRwYbozpoQmrfeK/yR:k5lgcXfWptAO7oYgUZSyNngYEzpzK2

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • LoaderCheat_v2.zip
    .zip

    Password: 1337

  • Loader/Loader.exe
    .exe windows:5 windows x86 arch:x86

    Password: 1337

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections

  • Loader/cheat.dll
    .dll windows:6 windows x64 arch:x64

    Password: 1337

    50eb2533481984ae8143bde6c1a13f6d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Loader/crack.dll
    .dll windows:6 windows x64 arch:x64

    Password: 1337

    f538d409c1132f6940564e44db5e4622


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Loader/icuuc.dll
    .dll windows:5 windows x64 arch:x64

    Password: 1337

    babd503407c6dd603dd0aec6407ecb71


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Loader/inputsystem.dll
    .dll windows:6 windows x64 arch:x64

    Password: 1337

    99cc74337e572e012af50288e3e96d13


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Loader/key.txt
  • Loader/libavcodec-58.dll
    .dll windows:6 windows x64 arch:x64

    Password: 1337

    8e54dbe27749bb593c9034f453591dac


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Loader/libavutil-56.dll
    .dll windows:6 windows x64 arch:x64

    Password: 1337

    d0938fdbfa75c053ab8d526a1cb4b351


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Loader/libfbxsdk_2020_3_1.dll
    .dll windows:6 windows x64 arch:x64

    Password: 1337

    238af6d8d9533a76c2ff6d64c73f5cd8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Loader/libfontconfig-1.dll
    .dll windows:5 windows x64 arch:x64

    678c469138cf230d4824b94bbc762b4c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Loader/loader.dll
    .dll windows:5 windows x64 arch:x64

    680f199705829e43ca17613c6414c4e9


    Code Sign

    Headers

    Imports

    Exports

    Sections