Resubmissions

20/07/2026, 05:40

260720-gddkfaav8y

20/07/2026, 05:35

260720-gag4fsfx3q1

General

  • Target
    CheatMT2.exe
  • Size 547KB
  • Sample260720-gddkfaav8y
  • SHA256 84fd720a78d3ece9479d8311d5adf20be7a754f803aa6d30793ecaaa0dac591a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • CheatMT2.exe
    .exe 547KB

CheatMT2.exe

  • IMPHASH bf69b33242d4edbe1905731c1b5aa5d8
  • SHA256 84fd720a78d3ece9479d8311d5adf20be7a754f803aa6d30793ecaaa0dac591a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
73:3b:75:c0:5c:9b:2c:71:4e:89:7f:91:26:c3:d0:2b:e8:e4:1f:2c:bd:cd:66:0e:19:20:3d:91:ff:e6:ab:d8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=BYTESHIELD SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ,O=BYTESHIELD SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ,L=Kraków,ST=małopolskie,C=PL
Minor OS version
0
Major OS version
6
Entry point
161096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
/__w/anticheat/anticheat/ByteShield.launcher/../launcher-output/ByteShield.launcher.pdb