190cheat (1)[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
190cheat (1).exe
Size 1.4MB
Sample260628-vbxgesaw2k
SHA256 edab92178fe2eededcb98b0b5b5f5b525e55041dc3dc13a397a3e446895f699e
MD5 195721b8397e3e91d91f1b96fb57b75e
SHA1 5f212d744e6054eb360b2bbb1d84d26081c3d292
SHA512 910cf6fea9f3c7ba28ca2e95e0d9dd338b389ff200d12ed84404b1e8434b7baf0e00fff51305d73adbdfef532dfb39367e991e82175edbd16dfccc596966cc94
SSDEEP 24576:8/LfLdWWLSdv3aFPnHHYeQ5oZmkhOcEVxN6Le:Y/dFLYv3aRnYeQeJUVb6Le
TLSH
T13965B024F3E967E8D036A0789842A507F771B4581331A7CB23ED19661FD7AF01EBE285
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
190cheat (1).exe

File Explorer

190cheat (1).exe

.exe 1.4MB

190cheat (1).exe

IMPHASH ffb0d64395dd271aa6a992d1ea575d42
SHA256 edab92178fe2eededcb98b0b5b5f5b525e55041dc3dc13a397a3e446895f699e
MD5 195721b8397e3e91d91f1b96fb57b75e
SHA1 5f212d744e6054eb360b2bbb1d84d26081c3d292
SHA512 910cf6fea9f3c7ba28ca2e95e0d9dd338b389ff200d12ed84404b1e8434b7baf0e00fff51305d73adbdfef532dfb39367e991e82175edbd16dfccc596966cc94
SSDEEP 24576:8/LfLdWWLSdv3aFPnHHYeQ5oZmkhOcEVxN6Le:Y/dFLYv3aRnYeQeJUVb6Le
TLSH
T13965B024F3E967E8D036A0789842A507F771B4581331A7CB23ED19661FD7AF01EBE285
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

473284

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\mesha\Desktop\aill files\file\FiveM-MWFree-2\Build\Cheat\190cheat.pdb

ntdll

VerSetConditionMask

api-ms-win-shcore-scaling-l1-1-1

SetProcessDpiAwareness

d3d11

D3D11CreateDeviceAndSwapChain

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

kernel32

GlobalLock WideCharToMultiByte GlobalUnlock GetModuleHandleA LoadLibraryA QueryPerformanceFrequency GetProcAddress FreeLibrary QueryPerformanceCounter Process32First WriteProcessMemory SetConsoleTextAttribute SetConsoleTitleA GetStdHandle Module32Next Module32First OpenProcess CreateToolhelp32Snapshot Sleep GetLastError QueryFullProcessImageNameA Process32Next CloseHandle FreeConsole ReadProcessMemory SetConsoleCP TryAcquireSRWLockExclusive GlobalAlloc AllocConsole ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead CompareStringEx GetStringTypeW LCMapStringEx GetLocaleInfoEx DecodePointer EncodePointer DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection GetSystemTimePreciseAsFileTime GlobalFree MultiByteToWideChar GetCPInfo SetConsoleOutputCP

user32

UnregisterClassA PeekMessageA mouse_event TranslateMessage SetLayeredWindowAttributes CreateWindowExA DefWindowProcA SetWindowDisplayAffinity SetWindowLongA GetAsyncKeyState IsWindow ShowWindow GetSystemMetrics SetWindowPos DestroyWindow DispatchMessageA SetProcessDpiAwarenessContext MonitorFromPoint GetWindowThreadProcessId PostQuitMessage FindWindowA RegisterClassExA UpdateWindow GetKeyState LoadCursorA GetDC GetCapture ClientToScreen TrackMouseEvent GetForegroundWindow SetCapture SetCursor GetClientRect SetProcessDPIAware IsWindowUnicode ReleaseCapture SetClipboardData GetClipboardData EmptyClipboard CloseClipboard OpenClipboard GetCursorPos ReleaseDC SetCursorPos ScreenToClient

gdi32

GetDeviceCaps

imm32

ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmSetCandidateWindow

d3dcompiler_47

D3DCompile

dwmapi

DwmExtendFrameIntoClientArea

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memchr memcmp memcpy memmove __uncaught_exceptions memset __current_exception_context __current_exception _purecall strstr __std_terminate __std_exception_copy __std_exception_destroy __C_specific_handler _CxxThrowException

api-ms-win-crt-stdio-l1-1-0

fseek __stdio_common_vsprintf_s _set_fmode _wfopen __p__commode ungetc fflush __acrt_iob_func ftell setvbuf _fseeki64 __stdio_common_vfprintf _get_stream_buffer_pointers freopen fputc fgetpos fwrite fgetc __stdio_common_vsscanf fread __stdio_common_vsprintf fsetpos fclose

api-ms-win-crt-utility-l1-1-0

qsort rand_s rand

api-ms-win-crt-heap-l1-1-0

calloc free _set_new_mode malloc realloc _callnewh

api-ms-win-crt-string-l1-1-0

__strncnt tolower isspace islower wcsnlen isupper strcspn strcpy_s strcmp strlen _wcsdup

api-ms-win-crt-convert-l1-1-0

strtod strtof

api-ms-win-crt-runtime-l1-1-0

exit _crt_atexit _beginthreadex terminate _configure_narrow_argv abort _initialize_narrow_environment _register_thread_local_exe_atexit_callback _c_exit _errno _initialize_onexit_table _exit _initterm_e _register_onexit_function _initterm _get_narrow_winmain_command_line _set_app_type _seh_filter_exe _cexit

api-ms-win-crt-time-l1-1-0

_W_Getmonths strftime _Strftime _Gettnames _Wcsftime _W_Gettnames _localtime64_s _W_Getdays _Getmonths _Getdays

api-ms-win-crt-math-l1-1-0

sinf sqrtf powf frexp __setusermatherr cosf logf acosf ceilf fmodf

api-ms-win-crt-locale-l1-1-0

___mb_cur_max_func _lock_locales localeconv _configthreadlocale ___lc_codepage_func ___lc_locale_name_func ___lc_collate_cp_func __pctype_func setlocale _unlock_locales

api-ms-win-crt-filesystem-l1-1-0

_unlock_file _lock_file