Valorant cheats[.]zip

Resubmissions

25/03/2026, 16:32

260325-t2f2padv8m10

25/03/2026, 14:05

260325-rdzssaav7t10

15/01/2026, 01:46

260115-b6579ses8f10

Sharing

Copy URL Twitter E-mail

General

Target
Valorant cheats.zip
Size 130KB
Sample260325-t2f2padv8m
SHA256 ce0fd2f72ea202ed1a8a956507b195c8c9fa37b7e516e4296ea8eb70a0050442
MD5 58068e79d25aec858f8a7ad9014aecff
SHA1 21be748192d75ed7083d85cd80711383df2a56c8
SHA512 54f8cd841386a09d90872917d6e05c626c2690317fcfc5ef4706c3b19fe3768300ffbd4c64cddeec6255a74f3cacf878784a97a4e12c2e16b745b7e5f5b572ab
SSDEEP 3072:0D8TpWkoVEBpBkIG48h7zJbMWAHaCKUkkC8l2Vlj0LqelK5:K8TpxppBkI6zJbMWBPUltclOY5
TLSH
T11FD312A90FF21B019C59EB46C34737AB7F93C67053E67C4610CA62CE874C84F9E96698
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2_5197172318085843990.exe

File Explorer

Valorant cheats.zip

.zip 130KB
2_5197172318085843990.exe

.exe 225KB

Valorant cheats.zip

SHA256 ce0fd2f72ea202ed1a8a956507b195c8c9fa37b7e516e4296ea8eb70a0050442
MD5 58068e79d25aec858f8a7ad9014aecff
SHA1 21be748192d75ed7083d85cd80711383df2a56c8
SHA512 54f8cd841386a09d90872917d6e05c626c2690317fcfc5ef4706c3b19fe3768300ffbd4c64cddeec6255a74f3cacf878784a97a4e12c2e16b745b7e5f5b572ab
SSDEEP 3072:0D8TpWkoVEBpBkIG48h7zJbMWAHaCKUkkC8l2Vlj0LqelK5:K8TpxppBkI6zJbMWBPUltclOY5
TLSH
T11FD312A90FF21B019C59EB46C34737AB7F93C67053E67C4610CA62CE874C84F9E96698
MD5 SHA1 SHA512 SSDEEP TLSH

2_5197172318085843990.exe

IMPHASH 1a63922d5931d1bb8ca5188313f78eaa
SHA256 26b4699a7b9eeb16e76305d843d4ab05e94d43f3201436927e13b3ebafa90739
MD5 af2379cc4d607a45ac44d62135fb7015
SHA1 39b6d40906c7f7f080e6befa93324dddadcbd9fa
SHA512 69899c47d0b15f92980f79517384e83373242e045ca696c6e8f930ff6454219bf609e0d84c2f91d25dfd5ef3c28c9e099c4a3a918206e957be806a1c2e0d3e99
SSDEEP 6144:DCyjXhd1mialK+qoNr8PxtZE6x5v+k6f:rjXhd8ZlKOrMZE6x5b6f
TLSH
T1FF349C2276E0847DFAB306378CFD36759ABDF9714931890B33C50A0E79605E1A63A763
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

94575

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

GoogleCrashHandler_unsigned.pdb

kernel32

GetCurrentThreadId GetStdHandle GetFileType GetStartupInfoW GetModuleFileNameW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter CreateEventW Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetTickCount CreateSemaphoreW FreeLibrary LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo RtlUnwind LCMapStringW GetStringTypeW FlushFileBuffers GetConsoleCP GetConsoleMode SetStdHandle SetFilePointerEx WriteConsoleW CloseHandle CreateFileW SizeofResource LockResource LoadResource FindResourceW FindResourceExW LocalFree CreateDirectoryW DeleteFileW GetCurrentThread WaitForMultipleObjects LoadLibraryW WaitForSingleObject GetExitCodeProcess DuplicateHandle ReleaseMutex GetEnvironmentVariableW lstrcmpiW VirtualQuery GetTempPathW GetLocalTime OutputDebugStringA GetPrivateProfileIntW GetPrivateProfileStringW lstrcmpW lstrlenW SetFilePointer CreateMutexW InitializeCriticalSection TryEnterCriticalSection SetEvent ResetEvent GetFileAttributesExW SetLastError VerifyVersionInfoW VerSetConditionMask MoveFileExW GetFileTime ReadFile DeviceIoControl SetProcessWorkingSetSize OpenProcess CreateProcessW ReadProcessMemory lstrcpynW GlobalAlloc GlobalLock GlobalUnlock GlobalFree CreateThread DebugActiveProcess GetThreadContext DebugActiveProcessStop VirtualQueryEx GetProcessId GetSystemInfo ContinueDebugEvent WaitForDebugEvent WideCharToMultiByte MultiByteToWideChar GetModuleHandleExW ExitProcess IsProcessorFeaturePresent GetCommandLineW EncodePointer LeaveCriticalSection WaitNamedPipeW TransactNamedPipe SetNamedPipeHandleState RtlCaptureContext ReleaseSemaphore EnterCriticalSection OutputDebugStringW DeleteCriticalSection DecodePointer HeapSize GetProcAddress GetLastError RaiseException HeapDestroy InitializeCriticalSectionAndSpinCount GetProcessHeap GetModuleHandleW HeapFree IsDebuggerPresent GetUserDefaultLangID GetSystemDefaultLangID GetComputerNameExW GetOverlappedResult ConnectNamedPipe CreateNamedPipeW DisconnectNamedPipe UnregisterWait GetProcessTimes UnregisterWaitEx RegisterWaitForSingleObject VirtualProtect VirtualAlloc HeapAlloc RemoveDirectoryW HeapReAlloc

user32

SetClipboardData EmptyClipboard OpenClipboard GetProcessWindowStation CloseDesktop CloseClipboard CharUpperW CharLowerW PostThreadMessageW DispatchMessageW GetMessageW PeekMessageW EnumWindows IsWindowVisible GetWindowThreadProcessId SetThreadDesktop CreateWindowStationW CloseWindowStation GetThreadDesktop SetProcessWindowStation CreateDesktopW wvsprintfW wsprintfW MessageBoxW

advapi32

GetSecurityDescriptorSacl GetSecurityDescriptorDacl GetSecurityDescriptorGroup GetSecurityDescriptorOwner GetSecurityDescriptorControl GetLengthSid CopySid IsValidSid GetSidSubAuthority InitializeSid GetSidLengthRequired SetSecurityDescriptorDacl AddAce InitializeAcl GetAclInformation InitializeSecurityDescriptor MakeAbsoluteSD OpenProcessToken GetTokenInformation SetSecurityDescriptorOwner SetSecurityDescriptorGroup GetAce MakeSelfRelativeSD GetSecurityDescriptorLength EqualSid SetNamedSecurityInfoW ConvertStringSidToSidW OpenThreadToken RegQueryValueExW RegOpenKeyExW RegDeleteKeyW RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegEnumKeyExW RegQueryInfoKeyW ConvertSidToStringSidW AllocateAndInitializeSid CheckTokenMembership FreeSid SetSecurityDescriptorSacl GetTraceLoggerHandle GetTraceEnableFlags GetTraceEnableLevel RegisterTraceGuidsW UnregisterTraceGuids TraceEvent SetTokenInformation

ole32

CoCreateGuid StringFromGUID2

shell32

SHGetFolderPathW

netapi32

NetApiBufferFree NetWkstaGetInfo

rpcrt4

UuidCreate

shlwapi

PathRemoveExtensionW PathRemoveFileSpecW PathStripPathW PathCanonicalizeW PathIsRelativeW SHQueryValueExW PathAppendW

userenv

UnloadUserProfile

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW