fishhack v4.2 (update 4.4.0)_[unknowncheats.me]_.zip
- SHA256 17159830b04d5554e1f34e528b37ee8e72efd05ec778afc28d870f5f99c29d78
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
fishhack v4.2 (update 4.4.0)_[unknowncheats.me]_.zip
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
120 seconds
Behavioral task
behavioral2
Sample
FishHAXZ v4.2.exe
Resource
win11-20260513-en
windows11-21h2-x64
2 signatures
120 seconds
Behavioral task
behavioral3
Sample
README.txt
Resource
win11-20260513-en
windows11-21h2-x64
5 signatures
120 seconds
Behavioral task
behavioral4
Sample
injection.bin
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
120 seconds
Behavioral task
behavioral5
Sample
keys.cfg
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
120 seconds
General
- Target fishhack v4.2 (update 4.4.0)_[unknowncheats.me]_.zip
- Size 101KB
- Sample260728-m3vsxavyhs
- SHA256 17159830b04d5554e1f34e528b37ee8e72efd05ec778afc28d870f5f99c29d78
- MD5 6065610277d8655edca2f4c50fffde10
- SHA1 9c3cb08e63bb28a77460fe2a8e5775ff95eac519
- SHA512 37a7f818f62226a1d089b7bec261ab6995d8f1307988eba7a7985b4da740c444bf3e40b1627becc28ba5076a1d6a1fb1231dd9a4f21ee4e9a20121a5e94b639f
- SSDEEP 3072:kjWf/l06Z/6kPi3C6amqA7i0gEqNgIZD3O6:wWf1Z/6kPi3dqA2brqIZzO6
- TLSH T1C6A302104A3833D97B66E3631EEFF7607DDC310172417D86AA2608BA7CF64BA4266F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/FishHAXZ v4.2.exe
File Explorer
-
fishhack v4.2 (update 4.4.0)_[unknowncheats.me]_.zip.zip 101KB
-
FishHAXZ v4.2.exe.exe 199KB
-
README.txt3KB
-
injection.bin6KB
-
keys.cfg2KB
FishHAXZ v4.2.exe
- IMPHASH 8dfd84a9f2dde3c5425ac14afefe2317
- SHA256 20ea5b5b8b84af788bf9d306b804128fcd8fa11fd99043c3115619fe0c89c167
- MD5 c1ce9ad6278ef7dcd7f30608c6729440
- SHA1 c7a8628c712297f2e1cceedd70df31fc9acbbf6e
- SHA512 d9090ea24cbf7ec43535b341eb2080df5be74fe7dace187ba08e6cf343153bbfd3f985a1c0ecab1be8928e271ff16b23a107e5ab22f058ce5f5f09ac9fe3211b
- SSDEEP 3072:pUJyEN9DHdRd8OQfF5jwTjhJsWJQq81BLEzzuE:pUBvDH+vtJcjSq
- TLSH T1D3142859B6A540F9D477C135C892171EE772782207238BAF03A15E2F9F236E0AD3EB54
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
21728
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
SetWindowLongPtrA
GetWindowLongPtrA
ShowScrollBar
GetAsyncKeyState
GetWindowThreadProcessId
FindWindowA
kernel32
GetProcAddress
WriteConsoleW
SetEndOfFile
HeapReAlloc
HeapSize
GetFileSizeEx
SetFilePointerEx
CloseHandle
GetLastError
Sleep
CreateToolhelp32Snapshot
Module32First
Module32Next
OpenProcess
VirtualAllocEx
ReadProcessMemory
WriteProcessMemory
GetStdHandle
SetConsoleMode
SetConsoleCursorInfo
SetConsoleTitleA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
CreateFileW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
RtlUnwind
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
WriteFile
GetCommandLineA
GetCommandLineW
HeapFree
GetFileType
ReadFile
GetConsoleMode
ReadConsoleW
HeapAlloc
CompareStringW
LCMapStringW
WaitForSingleObject
GetExitCodeProcess
CreateProcessW
GetFileAttributesExW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
GetStringTypeW
FlushFileBuffers
GetConsoleOutputCP
Name
.text
Size
113KB
Virtual Size
113KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
48KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
252B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=260, version=27412,
count=7, id=259, version=27412,
count=157, id=261, version=27412,
count=5, id=257, version=27412,
count=106, id=1, productName=Unmarked objects,
count=45, id=261, version=30034,
count=17, id=260, version=30034,
count=9, id=259, version=30034,
count=6, id=261, productName=VS2019 v16.11.6 build 30137, version=30137,
count=1, id=255, productName=VS2019 v16.11.6 build 30137, version=30137,
count=1, id=258, productName=VS2019 v16.11.6 build 30137, version=30137,
README.txt
- SHA256 06520650e590c9b524ab1b064d7476e61bc707ebc5db18832c119b780c909b4f
- MD5 c250721cbc46a693427d91c0de04b424
- SHA1 f9025b993c8b882a1eff8540687b25121930388f
- SHA512 577a09eb5a78d25894c65a4117e014677145220b7eb38efffc0c49c18fca569869bd6f1013b5dcbd97525831bd7e12d75eb43f7029baaa10eef9498ed4043883
- TLSH T12461435FD5E3EABF06A3002ED25435709B7FC0AC67612A5120DE916C365723451BF8EC
- MD5 SHA1 SHA512 TLSH
injection.bin
- SHA256 db0a6930f3b843fcfa384f4e422295e064d3d2d97e15adff1abb0da5301f32c6
- MD5 42893f2b0bfb29287e540ac51850664e
- SHA1 47984592a207b8dbaf212f78d2cb45bf7a01ac9e
- SHA512 b7f6b49e3ac9d1554d4de533e6bb8c82a4c4532b9f832c64bd7bb301beb0f122fdfeb44926a1706fc9f4a079bab78de12fb0f5472cdcbe51ff0a8c63cbd4ae32
- SSDEEP 192:tuVxpY4bbZsbZpSEDjZNRVL5DKQbxOCvU7UMWfb:tuVxmCZgZMEDZVLQQ9PX
- TLSH T183D1757F504B00934D3CC3E5F051F282B57D394E0C16ED927AF24B469BB66B456663B2
- MD5 SHA1 SHA512 SSDEEP TLSH
keys.cfg
- SHA256 2f9bb77bdd4ee2224cac8a7a9f5b0d8b09d33f56e02f81726dd027afbcdeff4e
- MD5 3a58c89945fd4a5ab0d1f6bc2c60c582
- SHA1 82e6ea07056a16758986aee771246ff4b4190c14
- SHA512 3865516b4d0310db85adc465120ac958caa0fc7bae448d03fca0fa1d5ab6bd0cfc65f949cd4fd937651e0a4aa964fc401ca588e8803fa2e45103742b7d42e87f
- TLSH T10041AB7CEB5B37FEC83861A1D37C18C4DABE053006619854582D2D675B73F864932B68
- MD5 SHA1 SHA512 TLSH