URBAN CHEATS INTERNAL BASIC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
URBAN CHEATS INTERNAL BASIC.exe
Size 31.4MB
Sample260924-xy2e1azdkd
SHA256 79dea572f8b7653d135041a1645854fae6696acf5fcc2503dbd7d1c6577cdd61
MD5 06f0085c3dd87d6f59793dd568888594
SHA1 37b94d91800dc36dc109b87192281fbe5e30d9d6
SHA512 b86f191f26ba67e8e25a24c502185b8e67d510b8c1246b10f2f2c09be062e5d98cf225db5630a929c69040b79f5cce399bd46c02fc366d304d2284b85f21bb9a
SSDEEP 393216:35eddcSG4F4N6DdvhN/i18EczA7nfoPDpwQSpQoWuXtEET4JOdKVKL:JeddclNJNfSpzABX+JOEKL
TLSH
T144770107B2C60359DFA3B93DE1129313E271BC96232186D76B9C0A26DF57BE0597EB04
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
URBAN CHEATS INTERNAL BASIC.exe

File Explorer

URBAN CHEATS INTERNAL BASIC.exe

.exe 31.4MB

URBAN CHEATS INTERNAL BASIC.exe

IMPHASH 687a82ac46a058afc219a1d058c80de6
SHA256 79dea572f8b7653d135041a1645854fae6696acf5fcc2503dbd7d1c6577cdd61
MD5 06f0085c3dd87d6f59793dd568888594
SHA1 37b94d91800dc36dc109b87192281fbe5e30d9d6
SHA512 b86f191f26ba67e8e25a24c502185b8e67d510b8c1246b10f2f2c09be062e5d98cf225db5630a929c69040b79f5cce399bd46c02fc366d304d2284b85f21bb9a
SSDEEP 393216:35eddcSG4F4N6DdvhN/i18EczA7nfoPDpwQSpQoWuXtEET4JOdKVKL:JeddclNJNfSpzABX+JOEKL
TLSH
T144770107B2C60359DFA3B93DE1129313E271BC96232186D76B9C0A26DF57BE0597EB04
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1248868

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\FEARLESS\Downloads\CURSED ENGINE INTERNAL\CURSED ENGINE\EXE\RapidExternal.pdb

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile

winhttp

WinHttpQueryDataAvailable WinHttpConnect WinHttpAddRequestHeaders WinHttpQueryHeaders WinHttpReceiveResponse WinHttpSetTimeouts WinHttpSendRequest WinHttpCloseHandle WinHttpSetOption WinHttpOpenRequest WinHttpReadData WinHttpOpen

shell32

SHGetFolderPathA ShellExecuteW ShellExecuteA

advapi32

RegQueryValueExW RegOpenKeyExW GetCurrentHwProfileA RegCloseKey

bcrypt

BCryptDestroyKey BCryptDecrypt BCryptOpenAlgorithmProvider BCryptFinishHash BCryptCloseAlgorithmProvider BCryptDestroyHash BCryptHashData BCryptSetProperty BCryptCreateHash BCryptGenerateSymmetricKey BCryptVerifySignature

crypt32

CryptDecodeObjectEx CryptImportPublicKeyInfoEx2 CryptStringToBinaryA

kernel32

FindFirstFileW FindClose CreateFileW SetFileInformationByHandle AreFileApisANSI GetFileInformationByHandleEx GetLocaleInfoEx FormatMessageA MultiByteToWideChar GlobalAlloc GlobalFree GlobalLock WideCharToMultiByte GlobalUnlock GetModuleHandleA GetLocaleInfoA LoadLibraryA QueryPerformanceFrequency GetProcAddress FreeLibrary QueryPerformanceCounter GetModuleFileNameA GetFileAttributesA DeleteFileA SetFileAttributesA CreateDirectoryA SizeofResource SetConsoleTitleA GetStdHandle SetConsoleMode TerminateProcess FindResourceA OpenProcess CreateToolhelp32Snapshot Sleep GetConsoleMode GetLastError Process32NextW LockResource Process32FirstW FreeConsole CreateThread LoadResource GetTickCount AllocConsole LoadLibraryExW GetComputerNameA VirtualFree VirtualAlloc GetStartupInfoW HeapFree GetCurrentProcess GetCurrentThreadId HeapAlloc GetCurrentProcessId GetModuleHandleW FlushInstructionCache LocalFree CreateFileA GetFileSizeEx ReadFile MapViewOfFile UnmapViewOfFile CreateFileMappingA GetSystemTimeAsFileTime ReleaseSRWLockExclusive AcquireSRWLockExclusive SleepConditionVariableSRW WakeAllConditionVariable UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent IsDebuggerPresent GetFileAttributesExW CloseHandle InitializeSListHead GetVolumeInformationA VirtualProtect

user32

GetClassNameA GetWindowTextA EnumWindows DefWindowProcA CreateWindowExA UnregisterClassA RegisterClassExA DefWindowProcW DispatchMessageA GetWindowRect DestroyWindow SetWindowPos MessageBoxW SetWindowRgn CreateWindowExW GetSystemMetrics UnregisterClassW RegisterClassExW ShowWindow IsWindow SetWindowLongA GetWindowLongA SetWindowDisplayAffinity MoveWindow EnumChildWindows TranslateMessage PeekMessageA GetWindowLongPtrA PostQuitMessage SetWindowLongPtrA UpdateWindow MessageBoxA GetKeyState GetMessageExtraInfo LoadCursorA ScreenToClient GetCapture GetWindowThreadProcessId ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow SetCapture SetCursor GetClientRect SetProcessDPIAware IsWindowUnicode ReleaseCapture MapVirtualKeyA SetLayeredWindowAttributes GetAsyncKeyState SetClipboardData GetClipboardData EmptyClipboard CloseClipboard SetCursorPos GetCursorPos GetKeyNameTextA OpenClipboard

gdi32

CombineRgn CreateRectRgn CreateRoundRectRgn DeleteObject

ole32

CoCreateInstance CoUninitialize CoInitialize

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@F@Z ??Bios_base@std@@QEBA_NXZ ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z ?_Xlength_error@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z _Query_perf_frequency _Query_perf_counter ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z ?_Throw_Cpp_error@std@@YAXH@Z ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?uncaught_exception@std@@YA_NXZ ?_Id_cnt@id@locale@std@@0HA ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z _Mtx_lock _Mtx_unlock ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ?good@ios_base@std@@QEBA_NXZ ??7ios_base@std@@QEBA_NXZ ?always_noconv@codecvt_base@std@@QEBA_NXZ _Cnd_do_broadcast_at_thread_exit _Thrd_detach ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Xbad_alloc@std@@YAXXZ ?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A ?_Xinvalid_argument@std@@YAXPEBD@Z ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Winerror_map@std@@YAHH@Z ?_Xbad_function_call@std@@YAXXZ ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ?_Random_device@std@@YAIXZ ?_Syserror_map@std@@YAPEBDH@Z _Xtime_get_ticks ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z ?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z ?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ ?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ ?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ ?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ ?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ ?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z

imm32

ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmSetCandidateWindow

dwmapi

DwmExtendFrameIntoClientArea

wininet

InternetReadFile InternetConnectA HttpSendRequestA HttpOpenRequestA InternetCrackUrlA InternetOpenA InternetCloseHandle

ntdll

RtlLookupFunctionEntry RtlVirtualUnwind RtlCaptureContext

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_destroy __std_exception_copy __std_terminate strstr _CxxThrowException __C_specific_handler strrchr longjmp memcpy memmove memset memchr memcmp __current_exception __current_exception_context __intrinsic_setjmp

api-ms-win-crt-stdio-l1-1-0

fwrite fflush ftell _wfopen freopen __acrt_iob_func __stdio_common_vfprintf __stdio_common_vsprintf __p__commode _get_stream_buffer_pointers _fseeki64 fsetpos ungetc setvbuf fgetpos fgetc fseek fputc fread __stdio_common_vsscanf _set_fmode fclose __stdio_common_vsprintf_s

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _initialize_onexit_table _register_onexit_function _crt_atexit _cexit _seh_filter_exe _set_app_type _get_narrow_winmain_command_line _initterm _initterm_e _exit _wassert _c_exit _register_thread_local_exe_atexit_callback abort system _beginthreadex terminate exit _configure_narrow_argv _invoke_watson _errno

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-string-l1-1-0

_strupr_s strncmp tolower strcpy_s _wcsicmp isalnum strncpy strncpy_s strcmp

api-ms-win-crt-heap-l1-1-0

malloc _set_new_mode free _callnewh

api-ms-win-crt-convert-l1-1-0

atof strtod atoi strtoull strtoll strtoul strtol

api-ms-win-crt-filesystem-l1-1-0

_lock_file _unlock_file

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func _configthreadlocale localeconv

api-ms-win-crt-math-l1-1-0

logf pow log powf expf cosf ceilf sqrt atan2f acosf _dclass fmodf sinf sqrtf __setusermatherr

Name

.text

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

23.8MB

Virtual Size

23.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.9MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

50KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

3.9MB

Virtual Size

3.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

572KB

Virtual Size

576KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

URBAN CHEATS INTERNAL BASIC.exe

d3d11

d3dcompiler_47

winhttp

shell32

advapi32

bcrypt

crypt32

kernel32

user32

gdi32

ole32

msvcp140

imm32

dwmapi

wininet

ntdll

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

generic