undetek-v10.37.zip
- SHA256 25f3ce8b329826dfd76e1659cd941038df19681df19a5451afec134664c8798d
Overview
overview
9Static
static
3undetek-v10.37.zip
windows10-2004-x64
9undetek-v10.37.zip
windows11-ltsc_2024-x64
1undetek-v1...de.txt
windows10-2004-x64
1undetek-v1...de.txt
windows11-ltsc_2024-x64
1undetek-v1...de.txt
windows10-2004-x64
1undetek-v1...de.txt
windows11-ltsc_2024-x64
1undetek-v1...AC.txt
windows10-2004-x64
1undetek-v1...AC.txt
windows11-ltsc_2024-x64
8undetek-v1...37.exe
windows10-2004-x64
1undetek-v1...37.exe
windows11-ltsc_2024-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
undetek-v10.37.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
30 signatures
150 seconds
Behavioral task
behavioral2
Sample
undetek-v10.37.zip
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
undetek-v10.37/Aimbot Guide.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
undetek-v10.37/Aimbot Guide.txt
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
undetek-v10.37/Install Guide.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
undetek-v10.37/Install Guide.txt
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
undetek-v10.37/VAC.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
undetek-v10.37/VAC.txt
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
14 signatures
150 seconds
Behavioral task
behavioral9
Sample
undetek-v10.37/undetek-v10.37.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
undetek-v10.37/undetek-v10.37.exe
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target undetek-v10.37.zip
- Size 116KB
- Sample260623-m33thscs81
- SHA256 25f3ce8b329826dfd76e1659cd941038df19681df19a5451afec134664c8798d
- MD5 6ec3aeff993d1bbdb2fa58993fe32a57
- SHA1 8404a5ad22f99bc088f51f87fcc74c2aaa6924f5
- SHA512 d041cd02dc6350bd1cca94c75387b33d0635b82f11b0cf4ec159f2657baf8b621317462b4b1e91da400cb152770832f6f7a4182bbf71bb743e0bdd3a99c085cd
- SSDEEP 3072:d4MHCgbcbWJw7PSwq+LbRGk3v/S8jVTXrG3:dTRobWJqKD+3RGkycVT7u
- TLSH T167C3022024C0661579C238608787CDE32B92DBDFCBB62C09A067A4FAB767F5835741F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/undetek-v10.37/undetek-v10.37.exe
File Explorer
-
undetek-v10.37.zip.zip 116KB
-
undetek-v10.37/Aimbot Guide.txt1KB
-
undetek-v10.37/Install Guide.txt1KB
-
undetek-v10.37/VAC.txt279B
-
undetek-v10.37/undetek-v10.37.exe.exe 249KB
undetek-v10.37/Aimbot Guide.txt
- SHA256 8b25a277f4e3d687162417342550d5ab15bcbc8ac237b56c3db987771d892f54
- MD5 52c66b54a5e75f0cf811a41aa6558881
- SHA1 e20e71a36bf5978c189ebf59ada5a4254cf743a4
- SHA512 2e5e313d62dc7021f545f48ccd823464e7c30d46c4c7f06df0147d94f2d0541f557e37b710a9089d9b915dc0833f3b37f6d22bd7b1ec23da5ad73f56b7e6908c
- TLSH T1FD21B13FD20663F706B00A73B02C9AF2770F25F49316925A3E3A455C2219AB4427F4CD
- MD5 SHA1 SHA512 TLSH
undetek-v10.37/Install Guide.txt
- SHA256 c5ce94f365b46aabe6a77197e0b32a1f6a19a3efe3c09c4eda56d4e1b9aa30ed
- MD5 22bb0b4481a4520d8fd7aec8e784029c
- SHA1 17bc94e9432e7b3bc4a92619e77f422ad7323e4c
- SHA512 8efc55ef5eca8372c0294c69cfc2a1cf59e022d4397bb644a007765db83358d4e317c7f02d433078f4c298869a0d5375590824399d3f815497dd07864f963e19
- TLSH T1A121101BA66FE3F719311252425DBAA6D20A091F23364A123095803D256E7CECBEF4DC
- MD5 SHA1 SHA512 TLSH
undetek-v10.37/VAC.txt
- SHA256 c423908bd2a60cc070a999654a3cd501f6525e310005dae62664f614a4882621
- MD5 c70e3de0f2bc4e114f5a3980100e8086
- SHA1 6fae9a2f9c7e6028f141a281aa5e19ce096724b6
- SHA512 7ad6cca31d0fb81e962d5765179cc9230a7f91d496ef3cd8a3617f95f1564cd19692e41080fb4a4c76516df06c6abb09cc9a8eb69b61b9b01924ff728501a3db
- TLSH T1C3D02B5BCD9C028D1B26A0621142BA74D215F41DB3870A44189C016DDB7324AC2A603F
- MD5 SHA1 SHA512 TLSH
undetek-v10.37/undetek-v10.37.exe
- IMPHASH c21f7e17d1d746619c809b3ce642d7e8
- SHA256 97d52f54dfdbe3f2fc2171b54afa8b97647a1bc88d2bf2e387fe8f78b55c85aa
- MD5 1f122145a516407b9d7899ef9d98a7ac
- SHA1 1ea7701f291d8feba331c8b5105358492ace1d77
- SHA512 d54bf457c0af259a6402381144c4be1beec7bfaf1374238355ca9cdb4429fcb6561cb7821a558161ac061d3c47b868c29c36f8b6a030093bc577a8b60a2378fa
- SSDEEP 3072:CbwWE5nqVsRiV3nGNeGviwYap+JbdaWnnFB4Yv/X3QrVyE+gCr:AGnqasVGlMxdHNf3Q0eCr
- TLSH T1E8444946B66994F5D4B2D23AC942297AF6B17C058371D7DF03903927AF33AE0C9393A1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
42484
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
ReadProcessMemory
WriteProcessMemory
GetModuleHandleA
GetProcAddress
CreateToolhelp32Snapshot
VirtualProtectEx
Process32Next
WriteConsoleW
CreateFileW
HeapReAlloc
HeapSize
VirtualAllocEx
GetTickCount64
OpenProcess
CreateRemoteThread
Sleep
WaitForSingleObject
GetLastError
Process32First
CloseHandle
SetFilePointerEx
GetFileSizeEx
ReadConsoleW
ReadFile
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetProcessHeap
GetStringTypeW
SetStdHandle
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlPcToFileHeader
RaiseException
RtlUnwindEx
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
VirtualProtect
CompareStringW
LCMapStringW
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
RtlUnwind
user32
GetAsyncKeyState
SendInput
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
RegSetValueExW
ws2_32
socket
WSAGetLastError
recv
connect
closesocket
WSAStartup
WSACleanup
freeaddrinfo
getaddrinfo
send
Name
.text
Size
160KB
Virtual Size
159KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
49KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
28KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=149, id=261, version=33140,
count=12, id=260, version=33140,
count=9, id=259, version=33140,
count=9, id=259, version=35207,
count=17, id=260, version=35207,
count=46, id=261, version=35207,
count=9, id=257, version=33140,
count=125, id=1, productName=Unmarked objects,
count=3, id=261, version=35217,
count=1, id=258, version=35217,