General

  • Target
    ForeverCheats.dll
  • Size 523KB
  • Sample260817-el8z7sshkd
  • SHA256 4d518c96bd9fe3b492e0bdecb5c9a7c37425bc38c6cc99d1c729a50f6756e18b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • ForeverCheats.dll
    .dll 523KB

ForeverCheats.dll

  • IMPHASH ac4d05ed89ce11200369f0e8c3fb4165
  • SHA256 4d518c96bd9fe3b492e0bdecb5c9a7c37425bc38c6cc99d1c729a50f6756e18b
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
77:5c:40:a8:22:e0:0d:b0:26:72:56:59:71:eb:8c:2f:ee:4d:6a:1f:8d:9f:7d:7a:db:3d:a1:b4:8f:3c:2a:07
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=福建六壬网安股份有限公司,OU=IT,O=福建六壬网安股份有限公司,L=福州,ST=福建,C=CN
Minor OS version
0
Major OS version
6
Entry point
390704
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL
PDB paths
C:\Users\lamar\Desktop\valo src\Private1\forevercheats\x64\Release\son3.pdb