General

  • Target
    cheatloader.exe
  • Size 1.3MB
  • Sample260706-e64k8adv8q
  • SHA256 b8bae31d3a1de08769fa38a2f942efd77f9e9ea7efa9acec2de3a2da65628925
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • cheatloader.exe
    .exe 1.3MB

cheatloader.exe

  • SHA256 b8bae31d3a1de08769fa38a2f942efd77f9e9ea7efa9acec2de3a2da65628925
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
7c:d8:58:12:0b:e8:4d:ae:f0:4b:90:8a:d8:7c:1a:36:9b:cc:b6:97:ed:14:e3:32:c1:06:54:2b:3e:f8:fe:75
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths