Both the cheats.rar
- SHA256 5e91c1c2f7f524fc00320d8e6d23b12a0fd4be90348011c744a959681249e669
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Infernum/infernum.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
yoea/fivem hacks.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target Both the cheats.rar
- Size 10.8MB
- Sample260930-phjagseh37
- SHA256 5e91c1c2f7f524fc00320d8e6d23b12a0fd4be90348011c744a959681249e669
- MD5 1e39c60b9ee71f8f17450fdfdd56e589
- SHA1 9dda80c6e2fed648fa1d2c1819640b4e0ce88de8
- SHA512 863699595a15b75f3542f99fa1a327aeb88590b8d8301770e1317de33244ed20094eed358743f8fe295e25d8aaa9fb8e632fdce6a1711eb71cdd5ac4a5c88252
- SSDEEP 196608:CMXZfuF1sAs7IPF1wy9Pc3cuv/CXX7LeIG+d4VG2UNcqmA+nZwnXVhhyC3mJZIip:CWA/fPF1w9GX7FG+OVwNulZwnFismzIK
- TLSH T1EDB633422FF7349DB84841E4DD331BD2AAB6870A28BB5E3CDD663D9A7F4A07094D9350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Infernum/infernum.exe unpack001/yoea/fivem hacks.exe
File Explorer
-
Both the cheats.rar.rar 10.8MB
-
Infernum/infernum.exe.exe 9.6MB
-
yoea/fivem hacks.exe.exe 7.6MB
-
yoea/image.png.png 85KB
Infernum/infernum.exe
- IMPHASH 4a346ef1e527abc303ac9805a6db79b9
- SHA256 52ecf013856b5ec13b9a11ae0f5bd15daa2c2ec555597a8cf9a2826585b58822
- MD5 4002b3ee839d2be1af577c9fe096bd6d
- SHA1 cc8a1ea46e9c6942b5a6db0d34f6baa44c77960f
- SHA512 cee7a2a715a3a65e5509f53a3200e6aae76a4924512b30e95dd7283684be7726d2c5447a1b929c5c5e81ae65cb972ba6f5eaf930124841b859e3f13874bf5605
- SSDEEP 196608:wbXAZVGDmGwyE1unzMuyfhSk8TeUhsjpzLylyYy:wb9DmNByLyJS9okJ
- TLSH T190A61246E1A786A9CF22873889555727E6B17CC603B087C7A79C8C66AB93DF05F7C700
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
1128304
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
dwmapi
DwmExtendFrameIntoClientArea
DwmUnregisterThumbnail
DwmRegisterThumbnail
DwmUpdateThumbnailProperties
d3d11
D3D11CreateDeviceAndSwapChain
advapi32
RegQueryValueExW
GetUserNameA
RegCloseKey
RegQueryInfoKeyW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
RegEnumValueW
d3dx11_43
D3DX11CreateShaderResourceViewFromMemory
winhttp
WinHttpQueryDataAvailable
WinHttpConnect
WinHttpSetTimeouts
WinHttpReceiveResponse
WinHttpOpen
WinHttpSendRequest
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpReadData
WinHttpQueryHeaders
bcrypt
BCryptEncrypt
BCryptGenerateSymmetricKey
BCryptCreateHash
BCryptSetProperty
BCryptHashData
BCryptDestroyHash
BCryptCloseAlgorithmProvider
BCryptFinishHash
BCryptGenRandom
BCryptOpenAlgorithmProvider
BCryptDecrypt
BCryptGetProperty
BCryptDestroyKey
kernel32
SleepConditionVariableSRW
GetCurrentThreadId
LocalFree
FormatMessageA
GetLocaleInfoEx
FindClose
FindFirstFileW
AreFileApisANSI
CreateFile2
GetFileAttributesExW
GetCurrentProcess
WriteFile
WaitForSingleObject
GetModuleHandleA
OpenProcess
Sleep
GetTempPathA
GetTickCount64
CreateFileA
GetCurrentThread
LoadLibraryA
DeleteFileA
CloseHandle
GetThreadContext
GetProcAddress
ExitProcess
GetCurrentProcessId
GetModuleHandleW
CreateProcessA
IsDebuggerPresent
CheckRemoteDebuggerPresent
WriteProcessMemory
VirtualAllocEx
ReadProcessMemory
CreateRemoteThread
VirtualFreeEx
GetSystemFirmwareTable
ReadFile
DeviceIoControl
GetModuleFileNameW
GetVolumeInformationA
CreateFileW
GetFileAttributesW
GetLastError
GetSystemDirectoryA
DeleteFileW
GetSystemInfo
SetUnhandledExceptionFilter
GetDiskFreeSpaceExA
MoveFileW
GetComputerNameA
MultiByteToWideChar
GlobalAlloc
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
QueryPerformanceFrequency
FreeLibrary
QueryPerformanceCounter
VirtualProtectEx
GetFileSizeEx
HeapAlloc
HeapFree
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
ReleaseSRWLockExclusive
GetStartupInfoW
GetSystemTimeAsFileTime
GetFileInformationByHandleEx
VirtualQuery
WakeAllConditionVariable
AcquireSRWLockExclusive
InitializeSListHead
MoveFileExW
user32
RegisterClassExA
EnumDisplayMonitors
ShowWindow
IsWindow
GetMonitorInfoW
EnumDisplayDevicesW
EnumDisplaySettingsW
MapWindowPoints
SetWindowDisplayAffinity
MoveWindow
SetLayeredWindowAttributes
GetKeyState
GetMessageExtraInfo
MonitorFromWindow
ScreenToClient
GetCapture
ClientToScreen
TrackMouseEvent
SetCursor
IsWindowUnicode
SetCursorPos
SetForegroundWindow
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
GetWindowRect
SetWindowPos
SetWindowRgn
CreateWindowExW
UnregisterClassW
RegisterClassExW
SetCapture
PostQuitMessage
ReleaseCapture
GetCursorPos
DefWindowProcW
DestroyWindow
FillRect
GetSystemMetrics
GetAsyncKeyState
DispatchMessageW
PeekMessageW
SetWindowTextA
GetForegroundWindow
CreateWindowExA
TranslateMessage
LoadCursorW
SetWindowLongW
GetClientRect
UnregisterClassA
FindWindowA
gdi32
SetTextColor
CreateSolidBrush
DeleteObject
SetBkColor
GetStockObject
shell32
ShellExecuteW
SHFileOperationW
msvcp140
_Xtime_get_ticks
?always_noconv@codecvt_base@std@@QEBA_NXZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
_Thrd_id
_Thrd_join
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
_Query_perf_frequency
?_Throw_Cpp_error@std@@YAXH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
_Cnd_do_broadcast_at_thread_exit
_Query_perf_counter
_Thrd_detach
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
_Mtx_lock
_Mtx_unlock
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Id_cnt@id@locale@std@@0HA
?_Winerror_map@std@@YAHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Syserror_map@std@@YAPEBDH@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
imm32
ImmSetCandidateWindow
ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow
d3dcompiler_43
D3DCompile
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__intrinsic_setjmp
__current_exception_context
__std_exception_destroy
__std_exception_copy
__std_terminate
strchr
strstr
memcpy
_CxxThrowException
memmove
strrchr
longjmp
memset
memchr
memcmp
__C_specific_handler
__current_exception
api-ms-win-crt-heap-l1-1-0
free
_set_new_mode
_callnewh
malloc
api-ms-win-crt-runtime-l1-1-0
terminate
_exit
_beginthreadex
_register_thread_local_exe_atexit_callback
_c_exit
exit
_initterm_e
abort
_initterm
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
_get_wide_winmain_command_line
_configure_wide_argv
_initialize_wide_environment
_errno
api-ms-win-crt-stdio-l1-1-0
setvbuf
fgetpos
fputc
_set_fmode
__stdio_common_vsscanf
fgetc
fclose
__stdio_common_vfprintf
__p__commode
fseek
fwrite
ungetc
__acrt_iob_func
ftell
fflush
__stdio_common_vsprintf
_wfopen
fsetpos
_get_stream_buffer_pointers
_fseeki64
fread
api-ms-win-crt-math-l1-1-0
__setusermatherr
logf
log
acosf
_dclass
powf
_dsign
pow
ceilf
cosf
fmodf
roundf
sinf
sqrtf
api-ms-win-crt-convert-l1-1-0
strtoll
strtod
strtol
strtoul
atof
strtoull
atoi
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
localeconv
___lc_codepage_func
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
api-ms-win-crt-string-l1-1-0
wcscpy_s
strcpy_s
strncmp
strcmp
strncpy
wcslen
_wcsicmp
strlen
api-ms-win-crt-utility-l1-1-0
rand
qsort
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2.2MB
Virtual Size
2.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6.2MB
Virtual Size
6.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
47KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=253, version=35403,
count=4, id=259, version=35403,
count=10, id=260, version=35403,
count=37, id=261, version=35403,
count=6, id=257, version=35403,
count=6, id=156, version=21202,
count=21, id=257, version=33145,
count=407, id=1, productName=Unmarked objects,
count=27, id=260, version=32822,
count=2, id=261, version=35727,
count=25, id=265, version=35727,
count=1, id=255, version=35727,
count=1, id=258, version=35727,
yoea/fivem hacks.exe
- IMPHASH 68aa3ddd7c720a32c1d183ba6c750734
- SHA256 0cded15d50f8c054e97c2d2fca81391f17f4270c75e9c858668af2507893c3f7
- MD5 53c1839d36298f1916e1b93c350bb39c
- SHA1 ae2fbaf0e3f3e84918dd0eb1ea5e4af250caa30b
- SHA512 87f0495bce5c1c906757bb9941aaabaac57acb245d4b3cc837cb1fc028c460e3c29902c89084d6a542c69b839c5464f2c3bbeb272f9f3d9b2cb0c709b0a1f145
- SSDEEP 98304:zv1wt19ARjVqxDmGTZ6tS1RgntRMukWcxf8/eSkZ8AVq4ycdg50Uhs/rpzMF:J+TAZVGDmGB1unzMuyfhSk8TeUhsjpz
- TLSH T197860146E29346A8DF76973885959327D2B07CC503B0C3D76BDC4961AFA3AF09ABC740
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
1144912
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
dwmapi
DwmUpdateThumbnailProperties
DwmUnregisterThumbnail
DwmRegisterThumbnail
DwmExtendFrameIntoClientArea
d3d11
D3D11CreateDeviceAndSwapChain
advapi32
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExW
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegEnumValueA
d3dx11_43
D3DX11CreateShaderResourceViewFromMemory
ntdll
RtlPcToFileHeader
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlUnwindEx
RtlUnwind
winhttp
WinHttpOpen
WinHttpReadData
WinHttpReceiveResponse
WinHttpCloseHandle
WinHttpQueryDataAvailable
WinHttpConnect
WinHttpSendRequest
WinHttpOpenRequest
kernel32
IsValidCodePage
GetTimeZoneInformation
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetFilePointerEx
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
SetPriorityClass
GetCurrentProcess
WriteFile
SetThreadPriority
WaitForSingleObject
OpenProcess
Sleep
GetTempPathA
CreateFileA
GetCurrentThread
LoadLibraryA
QueryPerformanceFrequency
DeleteFileA
CloseHandle
GetProcAddress
GetCurrentProcessId
CreateProcessA
QueryPerformanceCounter
GetTickCount64
WriteProcessMemory
ReadProcessMemory
VirtualFreeEx
MultiByteToWideChar
GlobalAlloc
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
FreeLibrary
GetModuleHandleW
VirtualProtectEx
GetFileSizeEx
ReadFile
HeapAlloc
GetACP
HeapFree
GetProcessHeap
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
VirtualProtect
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetStdHandle
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
RaiseException
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetStringTypeW
LCMapStringEx
DecodePointer
EncodePointer
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
WakeAllConditionVariable
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
HeapSize
SetEndOfFile
WriteConsoleW
HeapReAlloc
GetSystemTimeAsFileTime
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
GetCurrentThreadId
SleepConditionVariableSRW
WaitForSingleObjectEx
GetExitCodeThread
LocalFree
FormatMessageA
GetLocaleInfoEx
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
AreFileApisANSI
GetLastError
GetFileInformationByHandleEx
InitializeCriticalSectionEx
user32
SetCursorPos
SetForegroundWindow
SetWindowLongW
TranslateMessage
BringWindowToTop
GetForegroundWindow
PeekMessageW
DispatchMessageW
DestroyWindow
EnumDisplayMonitors
UnregisterClassW
RegisterClassExW
ShowWindow
IsWindow
GetMonitorInfoW
EnumDisplayDevicesW
EnumDisplaySettingsW
DefWindowProcW
CreateWindowExW
MapWindowPoints
SetWindowDisplayAffinity
MoveWindow
SetLayeredWindowAttributes
GetSystemMetrics
GetKeyState
GetMessageExtraInfo
MonitorFromWindow
ScreenToClient
GetCapture
ClientToScreen
TrackMouseEvent
LoadCursorW
SetCapture
SetCursor
GetClientRect
IsWindowUnicode
ReleaseCapture
GetAsyncKeyState
GetCursorPos
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
SetWindowPos
gdi32
GetStockObject
winmm
timeBeginPeriod
imm32
ImmReleaseContext
ImmGetContext
ImmSetCandidateWindow
ImmSetCompositionWindow
d3dcompiler_43
D3DCompile
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2.7MB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3.6MB
Virtual Size
3.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
57KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=184, id=261, version=33145,
count=32, id=260, version=33145,
count=24, id=259, version=33145,
count=1, id=253, version=35207,
count=12, id=259, version=35207,
count=18, id=260, version=35207,
count=97, id=261, version=35207,
count=6, id=156, version=21202,
count=19, id=257, version=33145,
count=261, id=1, productName=Unmarked objects,
count=27, id=260, version=32822,
count=2, id=261, version=35226,
count=26, id=265, version=35226,
count=1, id=255, version=35226,
count=1, id=258, version=35226,
yoea/image.png
- SHA256 680a505a37c71842b9efce54246f410bdb0c3b9634acb6e4163cd49a2e7bc7c2
- MD5 9c8c40a8bb250935c1f11748bf01c482
- SHA1 21425aba6fab5220f2078cd330cd65ffac69481e
- SHA512 54a3b4c18f07813132812a78b0f1003bace5a6e080e1abface2390eade48d33c8c87540d594f1d3ff42cbd8ac6f0d00334ea86d9eec9481b4466e02795f52295
- SSDEEP 1536:3mo/I6ljRjWYzcwEQNHR/mUWRxZT7pEBUs+9H5pJdfG9Jx:3f/I6vWYzcw/NHlfWRxJGBUs+9ZndfGR
- TLSH T1A28301DA32DE444DEA741131A0BD6C61AE3D807F4A3DA094510BA43529F9E67C7F2FAC
- MD5 SHA1 SHA512 SSDEEP TLSH