pipsi-nte-0.3.9.zip
- SHA256 7983374c45d6f6a3259945ce2fa44db450d30d7206f209416af6aeb4ddbcf93c
Password
123
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Global/Cheat.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Global/Launcher.exe
Resource
win11-20260513-en
windows11-21h2-x64
1 signatures
150 seconds
General
- Target pipsi-nte-0.3.9.zip
- Size 1.7MB
- Sample260808-pkd4jsdd94
- SHA256 7983374c45d6f6a3259945ce2fa44db450d30d7206f209416af6aeb4ddbcf93c
- MD5 400ecb266a997b9f28121f00d99e7aef
- SHA1 1171a2e4d681da7832e9482615b221795109959b
- SHA512 8accab539289ecdb53258e45afd10a4961fd2cbf1250a5b34d6eea5a209e6662351562fe4d20a67e83be7a6d5741d655d035c3ea41b91c2b41396775901cf00a
- SSDEEP 49152:CRsTs9mze1wA5L1+GbIjWFHG1BCVe1vpGaXXk4K+DP:aTl5L1+kIjWFm1JN3XU4r
- TLSH T1E685334ED8FC78D91654F766D9B38AFA59CD89EB13B2C07806707022E72EE518581A3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Global/Cheat.dll unpack001/Global/Launcher.exe
File Explorer
-
pipsi-nte-0.3.9.zip.zip 1.7MB
-
Global/Cheat.dll.dll 1.8MB
-
Global/Launcher.exe.exe 807KB
Global/Cheat.dll
- IMPHASH 4eaae5b36487ee954656d9a4551e2449
- SHA256 93232c56593f3597b992cf991e7283731f2b9da0e1d9729b7d48ea0ba00c3fd7
- MD5 c8dca5cbea001089212e22434b3b2f23
- SHA1 5b37d30d3116f2e2b6eb3473d52ec1839bca627f
- SHA512 063c360595805a84ef036c26ea11f28a1f4c36e39c920c0bcc989b058b30c31363f056ff9f175745902c946062ce9b29f5da142c1351f9e604ce8f41cfb5046f
- SSDEEP 49152:3kXeBQOjIut9XnfOaskaywGmsA5nhPq94A62:UXeXMuiFkaywvn9S
- TLSH T12C85BFA3E98160BAE87C903496931B5FB27A7480576086D727C8252D1FD2BF02F77F85
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
123
Minor OS version
0
Major OS version
6
Entry point
590544
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
MultiByteToWideChar
GlobalLock
WideCharToMultiByte
GlobalUnlock
GlobalAlloc
GlobalFree
WaitForSingleObject
GetModuleHandleA
LoadLibraryA
CreateEventW
GetLocaleInfoA
QueryPerformanceFrequency
QueryPerformanceCounter
FreeLibrary
IsDBCSLeadByte
GetProcessHeap
HeapAlloc
GetModuleHandleW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
LoadLibraryW
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
SetLastError
VirtualQuery
VirtualFree
VirtualProtect
VirtualAlloc
FlushInstructionCache
SetThreadContext
GetThreadContext
ResumeThread
SuspendThread
GetCurrentThreadId
GetCurrentProcess
GetLastError
ReadFile
CloseHandle
GetCurrentThread
WriteFile
CreateFileW
GetProcAddress
RtlPcToFileHeader
Sleep
GetTickCount64
user32
SetCapture
GetClipboardData
ReleaseCapture
IsWindowUnicode
TrackMouseEvent
GetMessageExtraInfo
GetClientRect
ScreenToClient
GetCursorPos
SetCursorPos
ClientToScreen
GetForegroundWindow
GetKeyState
LoadCursorW
SetCursor
GetKeyboardLayout
SetClipboardData
EmptyClipboard
CloseClipboard
GetCapture
OpenClipboard
SetWindowLongPtrW
DefWindowProcW
CallWindowProcW
shell32
ShellExecuteA
ShellExecuteW
msvcp140
?_Random_device@std@@YAIXZ
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?good@ios_base@std@@QEBA_NXZ
?uncaught_exceptions@std@@YAHXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??Bios_base@std@@QEBA_NXZ
?_Xinvalid_argument@std@@YAXPEBD@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?_Id_cnt@id@locale@std@@0HA
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
dxgi
CreateDXGIFactory1
imm32
ImmSetCandidateWindow
ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow
d3dcompiler_47
D3DCompile
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__C_specific_handler
strchr
memcpy
memset
memchr
__std_terminate
__std_exception_copy
__std_exception_destroy
memcmp
memmove
__std_type_info_destroy_list
_CxxThrowException
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
__stdio_common_vsprintf
_wfopen
fclose
ftell
_get_stream_buffer_pointers
fgetpos
_fseeki64
fsetpos
setvbuf
ungetc
fputc
fgetc
fseek
__stdio_common_vsscanf
fflush
__acrt_iob_func
fread
fwrite
api-ms-win-crt-heap-l1-1-0
free
_callnewh
malloc
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-string-l1-1-0
wcscpy_s
strcmp
wcsncmp
strncmp
strlen
strncpy
wcslen
api-ms-win-crt-convert-l1-1-0
strtof
atof
api-ms-win-crt-runtime-l1-1-0
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_errno
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
api-ms-win-crt-math-l1-1-0
logf
log
sqrt
sinf
powf
fmodf
pow
cosf
ceilf
atan2f
sqrtf
acosf
Name
.text
Size
591KB
Virtual Size
591KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
449KB
Virtual Size
448KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
27KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.detourc
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.detourd
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.@8"
Size
698KB
Virtual Size
698KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
469B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Global/Launcher.exe
- IMPHASH 2721d9b6b0980a8f1c2dbfec2fc6e6e6
- SHA256 0feb7fe2247ff1605907695a38d37c06bf35e17ed47c1175c20c540e3495a3da
- MD5 225bc793cc66916578e167e9db568a83
- SHA1 b4ca277ff5ac125844982562fb99cb7a9e2a1e1e
- SHA512 a454a7e3f77bdc212bf0c06b94aeca60d1e5cd4c553131c164b7d94c49f0d0231e976d01855974621133643a1c4454bb293ce055fc66d5679c92b08d88b94d16
- SSDEEP 24576:j3t6AFno95PfLwxLAx3H9gXJlEoJZGqj1Z8tnm7n:j9ONpiXJlDya8
- TLSH T12105F1C9478113F9C5851838D58E339DB7D076B20E5D852A2AC7DB07383396B874AFAE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
123
Minor OS version
0
Major OS version
6
Entry point
57392
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
Sleep
CloseHandle
ReadProcessMemory
HeapAlloc
GetProcessHeap
ReadFile
GetStdHandle
SetConsoleMode
WaitForSingleObject
CreateFileW
CreateToolhelp32Snapshot
GetExitCodeThread
OpenProcess
GetLastError
Process32NextW
Process32FirstW
Module32FirstW
VirtualProtectEx
VirtualAllocEx
GetFileSize
CreateRemoteThread
Module32NextW
VirtualFreeEx
GetCurrentProcessId
TerminateProcess
WriteProcessMemory
GetConsoleMode
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
advapi32
GetTokenInformation
OpenProcessToken
msvcp140
?_Xlength_error@std@@YAXPEBD@Z
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__current_exception_context
_CxxThrowException
memset
memcpy
__std_exception_copy
__C_specific_handler
__current_exception
__std_exception_destroy
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
__stdio_common_vfprintf
__acrt_iob_func
api-ms-win-crt-runtime-l1-1-0
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
__p___argv
_initterm_e
_seh_filter_exe
__p___argc
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
_set_app_type
system
_exit
exit
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
api-ms-win-crt-heap-l1-1-0
_callnewh
free
malloc
_set_new_mode
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-string-l1-1-0
wcscmp
Name
.text
Size
55KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
744B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.:ts
Size
740KB
Virtual Size
739KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
96B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ