Static task
static1
Behavioral task
behavioral1
Sample
R2Cheats.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral2
Sample
R2Cheats.exe
Resource
win11-20240802-en
General
-
Target
R2Cheats.rar
-
Size
3.4MB
-
MD5
5ca2e15ba62c5aeab034380202402e35
-
SHA1
5e026d75304dcc89a2756869b49f98609d98e5bb
-
SHA256
8238c0e44b0aeaec3a111a4551187543cd13eca2de26afd8f84e9e950d11d06b
-
SHA512
de011eb8b0be98063dab8f1a026b6c4397b0997aa60acefa71382cd54640a6bec23ae5a6f9a880f111ce98b79dcc56a684761ebc0afada1f285047d4e5809aef
-
SSDEEP
98304:89c9MnM5z4m1DUAPExWt2Nj2Yw0yrMYH47j:89y5z4m/Pw42Y70oMYHej
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/R2Cheats.exe
Files
-
R2Cheats.rar.rar
Password: 1234
-
R2Cheats.exe.exe windows:4 windows x64 arch:x64
Password: 1234
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ