eulencheats-fivem-main.zip
- SHA256 a4ae92944b8ae51316a5cd89b1278b9bd8b7b168782ec9c3394e0c5b274097b7
Overview
overview
10Static
static
3eulencheat...in.zip
windows10-2004-x64
1eulencheat...in.zip
windows10-ltsc_2021-x64
1eulencheat...er.exe
windows10-2004-x64
7eulencheat...er.exe
windows10-ltsc_2021-x64
10eulencheat...DME.md
windows10-2004-x64
3eulencheat...DME.md
windows10-ltsc_2021-x64
3eulencheat...se.txt
windows10-2004-x64
1eulencheat...se.txt
windows10-ltsc_2021-x64
1eulencheat...se.dll
windows10-2004-x64
1eulencheat...se.dll
windows10-ltsc_2021-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
eulencheats-fivem-main.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
eulencheats-fivem-main.zip
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral3
Sample
eulencheats-fivem-main/Loader.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
6 signatures
900 seconds
Behavioral task
behavioral4
Sample
eulencheats-fivem-main/Loader.exe
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
21 signatures
900 seconds
Behavioral task
behavioral5
Sample
eulencheats-fivem-main/README.md
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
900 seconds
Behavioral task
behavioral6
Sample
eulencheats-fivem-main/README.md
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
4 signatures
900 seconds
Behavioral task
behavioral7
Sample
eulencheats-fivem-main/how_to_use.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral8
Sample
eulencheats-fivem-main/how_to_use.txt
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral9
Sample
eulencheats-fivem-main/license.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral10
Sample
eulencheats-fivem-main/license.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
General
- Target eulencheats-fivem-main.zip
- Size 5.1MB
- Sample260804-tq57favblc
- SHA256 a4ae92944b8ae51316a5cd89b1278b9bd8b7b168782ec9c3394e0c5b274097b7
- MD5 a12016444cf82fc26abf718250a67967
- SHA1 ebbbe00137c8b0f5b682f28fe648959fec60d191
- SHA512 1e2a2dcbcf3e59c338d45bd5ef0454ec5cc5fb5a9fc066a2a6a466d35ff6b258654d79c1616fee93eabee232c06c12788269df56723b154b7517e70240b1d9fd
- SSDEEP 98304:zH6k1LAo4hmehlHZ95tFXQib64+SxlviIQwi5Z0pmYEpPbTB4KaRu:zSnb5ntd5d+SxMIQwi5w0PhJaY
- TLSH T18736339BF2A83295D4F3ABA2E194850FDB1740DC83ECD994E4BFA3067602358EB50775
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/eulencheats-fivem-main/Loader.exe unpack001/eulencheats-fivem-main/license.dll
File Explorer
-
eulencheats-fivem-main.zip.zip 5.1MB
-
eulencheats-fivem-main/Loader.exe.exe 8.0MB
-
eulencheats-fivem-main/README.md378B
-
eulencheats-fivem-main/how_to_use.txt163B
-
eulencheats-fivem-main/license.dll.dll 1.2MB
eulencheats-fivem-main/Loader.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 6c2446f06869a50df82165dbbc78527186cc70e8ebb50c48634de0ab9057c00a
- MD5 53648dee77c997e3665a8c3add00eeaa
- SHA1 dfeedc4eae6c517ef1286bd041cc36de8a608f46
- SHA512 598afff16262ee75f9866a62a124407c6ef5dff8c577371ea79ea8817805be998ba6d0553497400312c1cf5c0106772696727f312bd55ac99a8c23dd6e138f65
- SSDEEP 98304:V3T2h9PPeJzgg3ty1qrMGUjEBoSMeduU8gsHZVY/YK2:VjigJMg3E1qwQFM/U8gsHCYX
- TLSH T1FC867C43EC9159E9C1A9A33089A79253BB71BC481B3223D72B90F7392F76BD06E75350
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
506368
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
2.5MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2.7MB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
300KB
Virtual Size
643KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
60KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
340B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
479KB
Virtual Size
479KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/32
Size
97KB
Virtual Size
97KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/46
Size
512B
Virtual Size
48B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/65
Size
775KB
Virtual Size
775KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/78
Size
456KB
Virtual Size
455KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/95
Size
188KB
Virtual Size
188KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/112
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
50KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
409KB
Virtual Size
409KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
eulencheats-fivem-main/README.md
- SHA256 858d9279553bc9b29f542733e7a2053bad994707f1955aa138211ebab116540e
- MD5 66f69aec7bd40a109fe67b504588bf9f
- SHA1 a28d14c4269a4ca37b04438396f59ef0b5046b7e
- SHA512 c0cdc44b9e5df2be31eaf5e5ee47cca7db3b57015afc29e4671b8b039cd6a24a80076c2e99dc42e5094b45ca94bd641de0b539f05fa551dc712716ad6cf7b3d0
- TLSH T19BE0CAF67D1517373681C837595D55CCCF1669254E45911D905C4124C2843B3557C1DD
- MD5 SHA1 SHA512 TLSH
eulencheats-fivem-main/how_to_use.txt
- SHA256 bd74ca08b854bf51daaf78affed5d31704eca55882557df1fb45848f6f93435b
- MD5 920b3ea8c5ee29bf8b051e9d6473817e
- SHA1 9830e0a658735364a74652c5d9842ff1dfbe189f
- SHA512 c798f3397c0a66a24c98b9137b05f4b7e4d0d363b89a2f49081738842b89c1c6c8728656cae4939abecec431360c2eefc0ebda17ad750cbd2661ee58bbbb0f46
- TLSH T1E2C08CA2261AA4123220D2E0A66EC21F590F4176D48E54FE3862438E62E2D23CC1AE98
- MD5 SHA1 SHA512 TLSH
eulencheats-fivem-main/license.dll
- IMPHASH af1f9e9303cddd092b1be17cc7157037
- SHA256 d960a2eac5e7f1aa04e9f8d0da4eb9bb0b097ca58d0ce83ea1bb8351baf26301
- MD5 36dea25d49b9dff21acebface8ea2044
- SHA1 5bd97162bc98e36c124811c360dbf29c6233405e
- SHA512 64f06db24297e30d7ec91d3cf9ccc33f28eb9041e463933866b09de0d138d964505aa38f32158be5e5491e4aa68d8ae77bccce9c068e5980d2281a24294bccf8
- SSDEEP 24576:1iE0l9oS0Cl/9qZPcYJZEiDO3ytIPMunHuGKFufrrH1:YE0l1ZlVsPc06i63aIPZnBX
- TLSH T11345AF5A72A841F8E0ABA078C4975A0BEBB1344503308ADF63E84A5D2F677F15F7E351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
502512
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Administrator\Desktop\MOON-PROJECT\Moon-fivem\Build\MoonFivem.pdb
kernel32
GetProcAddress
LoadLibraryA
GetSystemInfo
VirtualAlloc
VirtualFree
VirtualQuery
CloseHandle
HeapCreate
HeapAlloc
HeapReAlloc
HeapFree
Sleep
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
OpenThread
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualProtect
GetModuleHandleW
CreateToolhelp32Snapshot
Thread32First
Thread32Next
CreateDirectoryW
CreateFileW
GetFileAttributesExW
GetFullPathNameW
GetLastError
DeviceIoControl
CreateThread
DisableThreadLibraryCalls
FreeLibraryAndExitThread
GetModuleHandleA
LocalFree
FormatMessageW
CreateDirectoryExW
IsBadReadPtr
K32GetModuleFileNameExA
FreeLibrary
FindClose
FindFirstFileExW
FindNextFileW
HeapSize
GetTimeZoneInformation
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
SetStdHandle
OutputDebugStringW
GetFileSizeEx
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
WriteConsoleW
GetModuleFileNameW
GetFileType
GetStdHandle
GetModuleHandleExW
ExitProcess
ReadFile
QueryPerformanceFrequency
QueryPerformanceCounter
WideCharToMultiByte
MultiByteToWideChar
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
FormatMessageA
SetEndOfFile
SetFilePointerEx
AreFileApisANSI
GetFileInformationByHandleEx
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
CompareStringEx
GetCPInfo
GetLocaleInfoEx
GetStringTypeW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
SetLastError
TlsAlloc
RtlUnwind
user32
OpenClipboard
CloseClipboard
SetClipboardData
GetMonitorInfoA
GetActiveWindow
GetWindowThreadProcessId
GetClassNameA
FindWindowA
SetWindowLongPtrA
GetWindowRect
GetWindowTextA
mouse_event
DestroyWindow
CreateWindowExA
RegisterClassExA
UnregisterClassA
CallWindowProcA
DefWindowProcA
MonitorFromWindow
LoadCursorA
ScreenToClient
ClientToScreen
GetCursorPos
SetCursor
SetCursorPos
GetClientRect
GetForegroundWindow
ReleaseCapture
SetCapture
GetCapture
GetKeyState
IsChild
EmptyClipboard
GetClipboardData
imm32
ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow
d3dcompiler_43
D3DCompile
?CloseBulk@Device@vfs@@UEAA_N_K@Z
?Create@Device@vfs@@UEAA_KAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?CreateDirectoryA@Device@vfs@@UEAA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?ExtensionCtl@Device@vfs@@UEAA_NHPEAX_K@Z
?GetAttributes@Device@vfs@@UEAAIAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetDevice@vfs@@YA?AV?$fwRefContainer@VDevice@vfs@@@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetLength@Device@vfs@@UEAA_KAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetLength@Device@vfs@@UEAA_K_K@Z
?GetModifiedTime@Device@vfs@@UEAA_JAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetNativeDevice@Manager@vfs@@UEAA?AV?$fwRefContainer@VDevice@vfs@@@@PEAX@Z
?GetNativeDevice@vfs@@YA?AV?$fwRefContainer@VDevice@vfs@@@@PEAX@Z
?Mount@vfs@@YAXV?$fwRefContainer@VDevice@vfs@@@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?OpenBulk@Device@vfs@@UEAA_KAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEA_K@Z
?OpenRead@Manager@vfs@@UEAA?AV?$fwRefContainer@VStream@vfs@@@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?OpenRead@vfs@@YA?AV?$fwRefContainer@VStream@vfs@@@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?ReadBulk@Device@vfs@@UEAA_K_K0PEAX0@Z
?RemoveDirectoryA@Device@vfs@@UEAA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?RemoveFile@Device@vfs@@UEAA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?RenameFile@Device@vfs@@UEAA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?SetPathPrefix@Device@vfs@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?Unmount@vfs@@YAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?Write@Device@vfs@@UEAA_K_KPEBX0@Z
?WriteBulk@Device@vfs@@UEAA_K_K0PEBX0@Z
Name
.text
Size
859KB
Virtual Size
858KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
321KB
Virtual Size
321KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
13KB
Virtual Size
9.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
248B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=26, id=260, version=27412,
count=23, id=259, version=27412,
count=187, id=261, version=27412,
count=2, id=156, version=21202,
count=79, id=261, productName=VS2022 v17.1.0 pre 1.0 build 30818, version=30818,
count=16, id=260, productName=VS2022 v17.1.0 pre 1.0 build 30818, version=30818,
count=10, id=259, productName=VS2022 v17.1.0 pre 1.0 build 30818, version=30818,
count=11, id=257, version=27412,
count=241, id=1, productName=Unmarked objects,
count=5, id=260, version=31104,
count=16, id=261, version=31104,
count=1, id=256, version=31104,
count=1, id=255, version=31104,
count=1, id=258, version=31104,