NATCHO CHEAT FREE[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
NATCHO CHEAT FREE.exe
Size 12.4MB
Sample260713-e22aasby6q
SHA256 2b96ee484b1b3813f4b6a898f46c49bdeec87b8874e2d01945287f96de8265f9
MD5 969142143b39108a9a9304fd451dd5b1
SHA1 fb0189b504a4785c56549b083503750e803dcc20
SHA512 42e04f363a25e7739e0c11605554ca54cab0b703da328d7adbc253eaedfccd8cf49a1ee52e4ed7823f4af40e0c7eb7cb6054115054fcd4934d7f11fbc1f15656
SSDEEP 196608:+HyHYpD/btkLwfbarNEfGTmEeHSnR6MxDi2OBbP1TFUNYeG9XFH9XJeaNv8IOT:+SHK/qLIfxkR6M+BFUxcET
TLSH
T11BD623D864D151ECC4D2C670E2865BF9F095785C0DB84C2ABFCA1A013F32C9AE9E6D79
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NATCHO CHEAT FREE.exe

File Explorer

NATCHO CHEAT FREE.exe

.exe 12.4MB

NATCHO CHEAT FREE.exe

IMPHASH 4f63a706dd19ac25454b1229449a7ea3
SHA256 2b96ee484b1b3813f4b6a898f46c49bdeec87b8874e2d01945287f96de8265f9
MD5 969142143b39108a9a9304fd451dd5b1
SHA1 fb0189b504a4785c56549b083503750e803dcc20
SHA512 42e04f363a25e7739e0c11605554ca54cab0b703da328d7adbc253eaedfccd8cf49a1ee52e4ed7823f4af40e0c7eb7cb6054115054fcd4934d7f11fbc1f15656
SSDEEP 196608:+HyHYpD/btkLwfbarNEfGTmEeHSnR6MxDi2OBbP1TFUNYeG9XFH9XJeaNv8IOT:+SHK/qLIfxkR6M+BFUxcET
TLSH
T11BD623D864D151ECC4D2C670E2865BF9F095785C0DB84C2ABFCA1A013F32C9AE9E6D79
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8952888

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

InitializeCriticalSectionEx

user32

GetWindowTextW

advapi32

CryptDestroyKey

shell32

ShellExecuteA

msvcp140

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z

urlmon

URLDownloadToFileA

normaliz

IdnToAscii

wldap32

ord27

crypt32

CertFreeCertificateChain

ws2_32

WSAGetLastError

shlwapi

PathFindFileNameW

rpcrt4

RpcStringFreeA

vcruntime140_1

__CxxFrameHandler4

vcruntime140

strrchr

api-ms-win-crt-stdio-l1-1-0

fsetpos

api-ms-win-crt-runtime-l1-1-0

terminate

api-ms-win-crt-string-l1-1-0

_wcsicmp

api-ms-win-crt-utility-l1-1-0

rand

api-ms-win-crt-filesystem-l1-1-0

_lock_file

api-ms-win-crt-heap-l1-1-0

_set_new_mode

api-ms-win-crt-convert-l1-1-0

strtoul

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-time-l1-1-0

strftime

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-math-l1-1-0

__setusermatherr

Name

.text

Size

Virtual Size

469KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

116KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.kL`

Size

Virtual Size

7.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.n`V

Size

512B

Virtual Size

464B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.m>x

Size

12.4MB

Virtual Size

12.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

NATCHO CHEAT FREE.exe

kernel32

user32

advapi32

shell32

msvcp140

urlmon

normaliz

wldap32

crypt32

ws2_32

shlwapi

rpcrt4

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

generic