cheatcitytemp[.]exe

Target
cheatcitytemp.exe
Size 20KB
Sample260818-xetaaaydnc
SHA256 b95d1bf68c6dbfd0fdfecc72453e715612a6f0dcc51c42c2e54cf5e8b51ccf9f
MD5 e4be82730c642be45ad314c16b35000c
SHA1 b320c0a64e3e1e084ac29870990bad8b609f0a50
SHA512 1986b68a3af62dc5b5925787978efc9986e7310f7579f207a5fe5969f52dbb8426d0afbfd47def77f2b12f942380bf53f715525d9f2caaab9881ebe2f3c6f7e0
SSDEEP 192:JUTBDjLsm/D1sT1l0/IyjPoBIz/G9sV7hSNlNqLIcow3wU9u7yRWJwfVSJ/hcos:JA9ND1qADoyz/gsfLICgTyRWnsc
TLSH
T13A92295AB75908E9E132D1BDC6F2251AF172750A1732D3CF2342413E0F623D1AC7BA46
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cheatcitytemp.exe

File Explorer

cheatcitytemp.exe

.exe 20KB

cheatcitytemp.exe

IMPHASH 609d127a39ad2bfd813bb8e19bd82b94
SHA256 b95d1bf68c6dbfd0fdfecc72453e715612a6f0dcc51c42c2e54cf5e8b51ccf9f
MD5 e4be82730c642be45ad314c16b35000c
SHA1 b320c0a64e3e1e084ac29870990bad8b609f0a50
SHA512 1986b68a3af62dc5b5925787978efc9986e7310f7579f207a5fe5969f52dbb8426d0afbfd47def77f2b12f942380bf53f715525d9f2caaab9881ebe2f3c6f7e0
SSDEEP 192:JUTBDjLsm/D1sT1l0/IyjPoBIz/G9sV7hSNlNqLIcow3wU9u7yRWJwfVSJ/hcos:JA9ND1qADoyz/gsfLICgTyRWnsc
TLSH
T13A92295AB75908E9E132D1BDC6F2251AF172750A1732D3CF2342413E0F623D1AC7BA46
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9328

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\xivtk\Downloads\Astryn Cheats Src\cheatcity free temp source\x64\Release\cheatcitytemp.pdb

kernel32

Sleep GetCurrentThreadId GetStdHandle SetConsoleTextAttribute QueryPerformanceCounter DeleteFileW GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetCurrentProcessId GetModuleHandleW

user32

MessageBoxW

msvcp140

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ?good@ios_base@std@@QEBA_NXZ _Query_perf_counter ?_Xlength_error@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?uncaught_exceptions@std@@YAHXZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ _Query_perf_frequency ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z

urlmon

URLDownloadToFileW

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception __current_exception_context __C_specific_handler __std_terminate __std_exception_copy __std_exception_destroy memcpy _CxxThrowException

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function _crt_atexit _c_exit _get_initial_narrow_environment _register_thread_local_exe_atexit_callback _cexit _initialize_onexit_table _configure_narrow_argv terminate _initterm _set_app_type _seh_filter_exe __p___argv __p___argc _initterm_e system _exit exit _initialize_narrow_environment

api-ms-win-crt-heap-l1-1-0

free malloc _callnewh _set_new_mode

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-string-l1-1-0

strlen

Resubmissions

Sharing

General