Valorant AIO Cheat (2).zip
- SHA256 1ddebe75f01f72779f5288f2521f7eb63c33e182b77067955d935b536085108b
Static task
static1
2 signatures
General
- Target Valorant AIO Cheat (2).zip
- Size 312KB
- Sample260727-rrbm4svvb1
- SHA256 1ddebe75f01f72779f5288f2521f7eb63c33e182b77067955d935b536085108b
- MD5 ba3561f7e4766c82eb7226784004e01f
- SHA1 cc6340db0c26c954a0c1e62f43f589f52941ca9f
- SHA512 1f158c8aba078191c63f30106f4854e6762631330e9c941ffd605d7d1be54940200df68b491cef91afab7dfae1fa27596962b5bc9b0c7d5169ea13df506ff47a
- SSDEEP 6144:aXKN1DfeFxPFbRuwqBcMBJNZGfDwCmOVlwgyEwLJDjSyd7XU617KcYy33SOj:aXKN1be7PFb8wqusJiDlmOVlwgyzRjLX
- TLSH T175642313696A15F8EAE1152A453A0F06B275E4D1CC6A7CF13F35E1B0E2F32790B3199B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Valorant AIO Cheat/x.exe - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/Valorant AIO Cheat/vista.dll
File Explorer
-
Valorant AIO Cheat (2).zip.zip 312KB
-
Valorant AIO Cheat/vista.dll.dll 665KB
-
Valorant AIO Cheat/x.exe.exe 40KB
Valorant AIO Cheat/vista.dll
- IMPHASH f4a844635f6a580751da278d10cbc259
- SHA256 717ab4ecc7718edd49e2d4d0ab26211ca0ab98a304622fed77ba2b4b1bf5b746
- MD5 239b63913866bfd4f5a59f9fefe3d6a6
- SHA1 fc87920ef014eb23b9a8edd05f85f52d9e8263f6
- SHA512 ac3d0a858aacb4489c95eeed4d89ddde6c68091e9be287dd3ffe5a580c92cadbb8960d11c9c4c830ebc658460de57cef679c051a5ce9f4dffc363621b6af46e4
- SSDEEP 6144:z28OqueCVvPl5ALu4NsTGg0+UKekrCvUt8ah5HDEn2PhzQAuDIZtlOocnWU5eA6q:zlmfV8KLj5js2PWAfZtlOQUONooI
- TLSH T1F9E47D0693E512E8F2B3A97689735612D672BCC50B70FA5F12E04D9D6F3B3704A2B352
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
21:a2:28:5a:6a:9b:db:09:a7:08:dc:84:90:c4:63:73:e9:8f:36:ec
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=kernel
Chains
Oct 21, 2025
CN=kernel
Subject
CN=kernel
Serial Number
03:e8
Issuer
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 5, 2025 - Apr 5, 2026
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
280244
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Kyberzlocinec\Desktop\SOUREEXC\SOUREEXC\src_remaded\internal\x64\Release\gooo\VALID.pdb
kernel32
FreeLibrary
LoadLibraryA
Beep
SetEndOfFile
WriteConsoleW
HeapSize
CreateFileW
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetTickCount64
GetACP
QueryPerformanceFrequency
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
QueryPerformanceCounter
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
LoadLibraryW
GetProcAddress
VirtualProtect
IsValidCodePage
GetOEMCP
VirtualAlloc
WriteFile
FlushFileBuffers
CloseHandle
EnumSystemLocalesW
GetStringTypeW
InitializeCriticalSectionEx
GetSystemTimeAsFileTime
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
GetCurrentProcess
TerminateProcess
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ReadFile
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
GetStdHandle
GetFileType
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
RtlUnwind
user32
GetAsyncKeyState
GetKeyNameTextA
MapVirtualKeyW
CallNextHookEx
GetCursorPos
CheckForEasterEggs
Name
.text
Size
442KB
Virtual Size
442KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
188KB
Virtual Size
187KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
248B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=187, id=261, version=33140,
count=38, id=260, version=33140,
count=23, id=259, version=33140,
count=10, id=259, version=35207,
count=16, id=260, version=35207,
count=77, id=261, version=35207,
count=15, id=257, version=33140,
count=175, id=1, productName=Unmarked objects,
count=11, id=261, version=35217,
count=3, id=259, version=35217,
count=1, id=256, version=35217,
count=1, id=255, version=35217,
count=1, id=258, version=35217,
Valorant AIO Cheat/x.exe
- IMPHASH 206da5bd1cba053072334a147334c290
- SHA256 4e2410060cf366fd4e604fe5a652208f7850e2954dd50a718ac5057de7109f35
- MD5 4e00328d83d6bc593f14d188ef7f4fed
- SHA1 920045826a9fc4f66c382026a21f392e27800a36
- SHA512 25eab6ed58609aed566b076642cfe561955070f0096279e92054934f53b22a35e6fa73ece0754a50c3e91390330580b725c2401b3dfab461bed31c39b0a22481
- SSDEEP 768:B8r7U2xZYnp/dAyiu8gthfWn+2z7O4htZSvR:GrZ25iul++2zSyPSvR
- TLSH T1F313D71ACE16A17BD35E8DB4CA470E05DE72BCC7CBE175CF67405CE50960AA4AB3E602
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
16104
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\amazon\Desktop\valorant-injector-main\valorant-injector-main\build\hookloader.pdb
kernel32
RemoveDirectoryW
GetTempPathW
CreateFileW
SetFileAttributesW
DeleteFileW
CloseHandle
FreeLibrary
GetTickCount
LoadLibraryExW
WriteFile
GetProcAddress
SetConsoleTitleW
Sleep
GetLastError
CreateDirectoryW
GetCurrentThreadId
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetModuleHandleW
user32
PostThreadMessageW
UnhookWindowsHookEx
FindWindowW
GetWindowThreadProcessId
SetWindowsHookExW
msvcp140
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?good@ios_base@std@@QEBA_NXZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
_Query_perf_counter
?_Xlength_error@std@@YAXPEBD@Z
_Query_perf_frequency
?uncaught_exceptions@std@@YAHXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z
dbghelp
ImageDirectoryEntryToData
winhttp
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpReceiveResponse
WinHttpOpen
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpConnect
WinHttpSendRequest
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__current_exception_context
__std_exception_copy
__std_exception_destroy
__current_exception
_CxxThrowException
memset
__C_specific_handler
__std_terminate
memcpy
memmove
api-ms-win-crt-heap-l1-1-0
malloc
_set_new_mode
_callnewh
free
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
__stdio_common_vswprintf_s
api-ms-win-crt-utility-l1-1-0
srand
rand
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
terminate
_set_app_type
_register_thread_local_exe_atexit_callback
_register_onexit_function
_c_exit
_seh_filter_exe
_cexit
__p___wargv
__p___argc
system
_exit
exit
_invoke_watson
_initterm_e
_initterm
_get_initial_wide_environment
_configure_wide_argv
_initialize_wide_environment
_crt_atexit
api-ms-win-crt-string-l1-1-0
wcscpy_s
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
108B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=35207,
count=10, id=260, version=35207,
count=28, id=261, version=35207,
count=6, id=257, version=35207,
count=11, id=257, version=33145,
count=144, id=1, productName=Unmarked objects,
count=5, id=265, version=35217,
count=1, id=255, version=35217,
count=1, id=258, version=35217,