MecchaCheatV Injector[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
MecchaCheatV Injector.exe
Size 25KB
Sample260710-tbzfcaex2t
SHA256 18cac41a0fae633d2982c783e43180ebebb3ff0b679a10e2a6433aee6ff38dd8
MD5 155841ba046e694bb4021936e4bd6d23
SHA1 2328ebb664573a62716336e000a50df56137626c
SHA512 bab16c6e7e760737092f4225ab76a6b0031bb395094884003c1ac35e7174b0704fd82d307185b165a45dc7f6afd71e81a3fb8cb7f57ec6aae3d0dd67cc1d06df
SSDEEP 768:Zb04YaDmqrKbAI/iI8Zrz0J1qN3snbXtub:B04LD3I/iIFJ1qanbXtu
TLSH
T13BC25C56A78608C5E53B737C81F71A15E6B1BD590721EBCF07A2A01E0E6B3E0BC77941
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MecchaCheatV Injector.exe

File Explorer

MecchaCheatV Injector.exe

.exe 25KB

MecchaCheatV Injector.exe

IMPHASH c03ed1cb112545a2abb7738d1f9b5b11
SHA256 18cac41a0fae633d2982c783e43180ebebb3ff0b679a10e2a6433aee6ff38dd8
MD5 155841ba046e694bb4021936e4bd6d23
SHA1 2328ebb664573a62716336e000a50df56137626c
SHA512 bab16c6e7e760737092f4225ab76a6b0031bb395094884003c1ac35e7174b0704fd82d307185b165a45dc7f6afd71e81a3fb8cb7f57ec6aae3d0dd67cc1d06df
SSDEEP 768:Zb04YaDmqrKbAI/iI8Zrz0J1qN3snbXtub:B04LD3I/iIFJ1qanbXtu
TLSH
T13BC25C56A78608C5E53B737C81F71A15E6B1BD590721EBCF07A2A01E0E6B3E0BC77941
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

12640

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\projects\MecchaCheatV\build\MecchaCheatV Injector.pdb

kernel32

GetFullPathNameA lstrlenA WaitForSingleObject lstrcmpA GetModuleHandleA OpenProcess CreateToolhelp32Snapshot GetTempPathA SetConsoleTitleA GetFileAttributesA Process32NextW GetSystemDirectoryA Process32FirstW CloseHandle GetProcAddress VirtualAllocEx CreateRemoteThread GetCurrentProcessId CopyFileA WriteProcessMemory GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetModuleHandleW QueryPerformanceCounter

comdlg32

GetOpenFileNameA

msvcp140

?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?_Xlength_error@std@@YAXPEBD@Z ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z ?good@ios_base@std@@QEBA_NXZ ?uncaught_exceptions@std@@YAHXZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A ?_Random_device@std@@YAIXZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ

version

GetFileVersionInfoSizeA VerQueryValueA GetFileVersionInfoA

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__C_specific_handler _CxxThrowException __current_exception __std_terminate __std_exception_destroy memcmp memcpy memmove memset __current_exception_context __std_exception_copy

api-ms-win-crt-heap-l1-1-0

_callnewh malloc free _set_new_mode

api-ms-win-crt-string-l1-1-0

strcpy_s strlen tolower

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf _set_fmode __p__commode __stdio_common_vsprintf_s

api-ms-win-crt-convert-l1-1-0

wcstombs_s

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback _set_app_type __p___argc _register_onexit_function _c_exit _initialize_onexit_table _seh_filter_exe _cexit _crt_atexit terminate _exit exit _initterm_e _initterm _get_initial_narrow_environment __p___argv _initialize_narrow_environment _configure_narrow_argv

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale