R6OnlineCheat_[unknowncheats[.]me]_[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
R6OnlineCheat_[unknowncheats.me]_.zip
Size 1.1MB
Sample260620-rm44vsgy3v
SHA256 c5a9d531a0ce954bf126895a3872ac1104f45cc816cd78465d719bacf903cb43
MD5 2d21bd509f12b9ba2e16c36678fc9ae5
SHA1 7bc51d40786f72a097cc67df33fdd6370f477646
SHA512 d57e757dc14dcaf9094b568c9790c9af121dd02af945a7288649586c06c6dde4bd5b29ff4a0ab7913ef5a8c4a5eb89a72727cfa8bf186651e43eced2ace01f14
SSDEEP 24576:vR9PbfjxlcDfcMoVdRWpuWA4ajdZDDeLDmUBnPjNOaR:vR9PbjPI0MoxyahpCPh/R
TLSH
T1173533A4DE6CC389A2F2466C8A72FFC5F47FA6F60F64E5524C2DC04E40957E96A2CC05
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Free Cheat by Cedy.exe

File Explorer

R6OnlineCheat_[unknowncheats.me]_.zip

.zip 1.1MB
Free Cheat by Cedy.exe

.exe 1.5MB

R6OnlineCheat_[unknowncheats.me]_.zip

SHA256 c5a9d531a0ce954bf126895a3872ac1104f45cc816cd78465d719bacf903cb43
MD5 2d21bd509f12b9ba2e16c36678fc9ae5
SHA1 7bc51d40786f72a097cc67df33fdd6370f477646
SHA512 d57e757dc14dcaf9094b568c9790c9af121dd02af945a7288649586c06c6dde4bd5b29ff4a0ab7913ef5a8c4a5eb89a72727cfa8bf186651e43eced2ace01f14
SSDEEP 24576:vR9PbfjxlcDfcMoVdRWpuWA4ajdZDDeLDmUBnPjNOaR:vR9PbjPI0MoxyahpCPh/R
TLSH
T1173533A4DE6CC389A2F2466C8A72FFC5F47FA6F60F64E5524C2DC04E40957E96A2CC05
MD5 SHA1 SHA512 SSDEEP TLSH

Free Cheat by Cedy.exe

IMPHASH 64b7dfe3ed2f7b3d6adebbc49d40b5cb
SHA256 86802863fcc9346ef902c2a6afa626793806d4dd6af5db0c4b45c58a2a275d2c
MD5 263420f84fe8b58a39cc849857aaa49b
SHA1 8a74169ae0708f495fad96ca27bd2e08d36a1b0d
SHA512 cbd5f896ba8f14f09629bf363997c8e68c0a25379e608f2b405c52e543fc15ea2941dbc8db1fdba2b5225f66c2e7a1255205b4d2557760a218fcbb88b2bf2997
SSDEEP 24576:L9pcodCusCK4EjF0nVJuF3Fo9J/0HJ+SdPcRwQAP777nMyIysIWEOHyLuXk/fk0M:v/CvMnIQJwJ+YP/QAPYTysIWEOifkTR
TLSH
T18075BFBD62542668C41AC5389423BD49F1F2741A0FB586FF72E6E6C02F6F9D0D925F02
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

60876

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetTempPathA GetLastError CreateFileA WriteConsoleW HeapSize SetStdHandle GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP DeviceIoControl IsValidCodePage DeleteFileW ReadConsoleW ReadFile GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetFileSizeEx HeapReAlloc CreateProcessW GetExitCodeProcess WaitForSingleObject CloseHandle GetProcAddress Process32Next CreateToolhelp32Snapshot VirtualAlloc VirtualFree Process32First GetModuleHandleA SetUnhandledExceptionFilter Sleep GetACP SetConsoleTitleA GetFileType EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW FormatMessageA WideCharToMultiByte GetCurrentThreadId WaitForSingleObjectEx GetExitCodeThread LocalFree CreateFileW FindClose FindFirstFileExW FindNextFileW GetFileAttributesExW SetEndOfFile SetFilePointerEx AreFileApisANSI GetFileInformationByHandleEx MultiByteToWideChar EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx QueryPerformanceCounter FlsAlloc FlsGetValue FlsSetValue FlsFree GetSystemTimeAsFileTime GetModuleHandleW GetStringTypeW GetCPInfo IsDebuggerPresent UnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentProcessId InitializeSListHead GetCurrentProcess TerminateProcess RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW CreateThread ExitThread FreeLibraryAndExitThread GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapAlloc HeapFree RtlUnwind

user32

FindWindowA GetDesktopWindow GetForegroundWindow MessageBoxA GetAsyncKeyState ShowWindow GetSystemMetrics GetDC LoadCursorA SetWindowPos GetWindowLongA DefWindowProcA CreateWindowExA SetLayeredWindowAttributes GetClientRect SetWindowLongPtrA RegisterClassExA GetWindowRect

gdi32

GetDeviceCaps

advapi32

OpenSCManagerA StartServiceA CreateServiceA CloseServiceHandle OpenServiceA DeleteService ControlService

dwrite

DWriteCreateFactory

dwmapi

DwmExtendFrameIntoClientArea

d2d1

ord1

ntdll

NtQuerySystemInformation RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind