PhasmoCheatV Injector[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
PhasmoCheatV Injector.exe
Size 84KB
Sample260731-c8ad2svsdw
SHA256 41feb63c1bfbefc246b5183f7f336d441b9e6538b53b13e9c81e45f1576fd33d
MD5 09135656baace7477e4c60f4fb3ea2c3
SHA1 984f99d45f6c50e960143ea66424c5958e263e20
SHA512 c7d4635f701b7cfc9abd2f4090ce90a054db4d227bae27cd0d56d67e440763f7664377f780127ce48f4d6d8ed72052e9cae211c3ea8ae9a8a20f9162edfa7c4d
SSDEEP 1536:ke7TRtIxXzII9Q98J1q5nbXtmhpayGAUvXGB5SiFzl0tExeQOBDFxnMbs1wSCRmR:5wxn9Q98J1q5nbXtmhJfUvXGbvFzl0Fc
TLSH
T16483F126F7BA48C5D53B727C42F70605D6B2BD062B259BCF1BA2D04E1F9A2F0A533641
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PhasmoCheatV Injector.exe

File Explorer

PhasmoCheatV Injector.exe

.exe 84KB

PhasmoCheatV Injector.exe

IMPHASH c03ed1cb112545a2abb7738d1f9b5b11
SHA256 41feb63c1bfbefc246b5183f7f336d441b9e6538b53b13e9c81e45f1576fd33d
MD5 09135656baace7477e4c60f4fb3ea2c3
SHA1 984f99d45f6c50e960143ea66424c5958e263e20
SHA512 c7d4635f701b7cfc9abd2f4090ce90a054db4d227bae27cd0d56d67e440763f7664377f780127ce48f4d6d8ed72052e9cae211c3ea8ae9a8a20f9162edfa7c4d
SSDEEP 1536:ke7TRtIxXzII9Q98J1q5nbXtmhpayGAUvXGB5SiFzl0tExeQOBDFxnMbs1wSCRmR:5wxn9Q98J1q5nbXtmhJfUvXGbvFzl0Fc
TLSH
T16483F126F7BA48C5D53B727C42F70605D6B2BD062B259BCF1BA2D04E1F9A2F0A533641
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

12672

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\projects\PhasmoCheatV Recode\build\PhasmoCheatV Injector.pdb

kernel32

GetFullPathNameA lstrlenA WaitForSingleObject lstrcmpA GetModuleHandleA OpenProcess CreateToolhelp32Snapshot GetTempPathA SetConsoleTitleA GetFileAttributesA Process32NextW GetSystemDirectoryA Process32FirstW CloseHandle GetProcAddress VirtualAllocEx CreateRemoteThread GetCurrentProcessId CopyFileA WriteProcessMemory GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetModuleHandleW QueryPerformanceCounter

comdlg32

GetOpenFileNameA

msvcp140

?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?_Xlength_error@std@@YAXPEBD@Z ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z ?good@ios_base@std@@QEBA_NXZ ?uncaught_exceptions@std@@YAHXZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A ?_Random_device@std@@YAIXZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ

version

GetFileVersionInfoSizeA VerQueryValueA GetFileVersionInfoA

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__C_specific_handler _CxxThrowException __current_exception __std_terminate __std_exception_destroy memcmp memcpy memmove memset __current_exception_context __std_exception_copy

api-ms-win-crt-heap-l1-1-0

_callnewh malloc free _set_new_mode

api-ms-win-crt-string-l1-1-0

strcpy_s strlen tolower

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf _set_fmode __p__commode __stdio_common_vsprintf_s

api-ms-win-crt-convert-l1-1-0

wcstombs_s

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback _set_app_type __p___argc _register_onexit_function _c_exit _initialize_onexit_table _seh_filter_exe _cexit _crt_atexit terminate _exit exit _initterm_e _initterm _get_initial_narrow_environment __p___argv _initialize_narrow_environment _configure_narrow_argv

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale