VAL Cheat.img
- SHA256 429a57b2947a1aefde85f1bc64b8ec3f0ddbf8ec1bbd5723f7f0333842b7ea4c
Static task
static1
1 signatures
General
- Target VAL Cheat.img
- Size 795.7MB
- Sample260930-wsm5raxeqd
- SHA256 429a57b2947a1aefde85f1bc64b8ec3f0ddbf8ec1bbd5723f7f0333842b7ea4c
- MD5 ed1f4bcb8c0f8c2355a054796c0e5c2c
- SHA1 44a463bf23e59f6eed089f0903a80acf3e419717
- SHA512 ac042148bf4efbce62c55222da944e694c4c9b9b4b66e91e17556c86571ec41042981df3f25db9728539e7c4d9b372e569320db3e53e640627ddd8fd6deb7407
- SSDEEP 25165824:bB2PkVQj4XhQvURRDqkuiUv4zea8OvkLy:bYPkgW2MvUv4S5Ov
- TLSH T11389332B72E4916CC26EC23AC1A78F80A533F1755B7BC2EB559503941F4A6C89F7F221
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/VAL Cheat.exe
File Explorer
-
VAL Cheat.img.iso 795.7MB
-
out.iso.iso 795.7MB
-
VAL Cheat-0.bin528KB
-
VAL Cheat-1.bin16B
-
VAL Cheat.dat38KB
-
VAL Cheat.exe.exe 6.5MB
-
VAL Cheat.pkg.bin.zip 787.5MB
out.iso
- SHA256 429a57b2947a1aefde85f1bc64b8ec3f0ddbf8ec1bbd5723f7f0333842b7ea4c
- MD5 ed1f4bcb8c0f8c2355a054796c0e5c2c
- SHA1 44a463bf23e59f6eed089f0903a80acf3e419717
- SHA512 ac042148bf4efbce62c55222da944e694c4c9b9b4b66e91e17556c86571ec41042981df3f25db9728539e7c4d9b372e569320db3e53e640627ddd8fd6deb7407
- SSDEEP 25165824:bB2PkVQj4XhQvURRDqkuiUv4zea8OvkLy:bYPkgW2MvUv4S5Ov
- TLSH T11389332B72E4916CC26EC23AC1A78F80A533F1755B7BC2EB559503941F4A6C89F7F221
- MD5 SHA1 SHA512 SSDEEP TLSH
VAL Cheat-0.bin
- SHA256 6ecadf8ee9e15b51b2f6ac74653e8102c70848c26629f0c9b637818cc77ff360
- MD5 713b5299a49f9bb5df29399ba9c41e23
- SHA1 7d9e848e67866c9bfaae87fe35d83fb1ee787f6a
- SHA512 45f73ad9175059be790fa3de1156d4b80eb1717f9247a40040106c22619752671fd701ab21dc50e91802bb7a314d7efbda4fb87ed2c2feb2ff25f412495556dd
- SSDEEP 12288:L47E1QvGu1ZXxBWj+YWWoHs3KoIOisG1g9xp/GCDOnRwj17B0:L4fvJ7XhCjaW5G1g9xp/GCSnRwj9y
- TLSH T1B2B4237E9E84D402D3B64BCBACD96D9A0AC66037117EB730251D7B070E24EBD936813E
- MD5 SHA1 SHA512 SSDEEP TLSH
VAL Cheat-1.bin
- SHA256 b78cb43349494576159625edfd2c0450c503c34679126d8afc2e12f79f294dbb
- MD5 1c544a1cac9c1de4695d9a559001e8dd
- SHA1 cf0ec50182f08773a80fd86fec10f7406efa279d
- SHA512 8ae1faec28e63630cafc1b4b89035e50b307fec7ab1b4049a9909625b0042a8460eec0f4a616aae9a9c6ec9a77235e2d51b1ea5c9e19d2cce6fcf5642ef9c48b
- MD5 SHA1 SHA512
VAL Cheat.dat
- SHA256 90bb3963c778abfc045ca9adf2e3bd128e28776b26279375acaad7ad5a6ad71c
- MD5 880e92c1b792becc652bc585f3d9073d
- SHA1 da4cd585d4c3c9de377c9cc5257692d05a11794b
- SHA512 97e1c7709bf8bb25c135133b509a59ce2dfec0201974c08bac7828299e8725a42bc6ea455264eb472687690f8e8471fd8e7c7511f95ae93114f840289accf98e
- SSDEEP 768:nhC0jO/DqkUlGn242cdIpnTGCkcNs4O/AHNHvTlWvNsE6UmvmGAGkdBfG3VyFPC/:dOWkTyCR74O/0FpW+E6vvmG96JG3VyRy
- TLSH T1B203F1A89B4D5160BE6330DF53C0E63DCBFB1F7B1B546BE6240B054C24B79A2845B56C
- MD5 SHA1 SHA512 SSDEEP TLSH
VAL Cheat.exe
- IMPHASH f10bf2f63b7751a2743b6d4e4020a56a
- SHA256 fa993ed539145453ec6bf40dfe7013d97f6b49c67243ea6295cae0fe871413f7
- MD5 aebe1bf508e49985f1207bc351185b03
- SHA1 f2b8ac92fd39a49f7bf04d7b0e135edfa74ee0cd
- SHA512 6ec518821d4a63e2de0dbfd2aadf1a00ae76373a07db07a8c1cb41930babc7d33ea4cb8eca748fdcfdb06bd5440a86adca0d44b21e1851cbb2d4243a814cfa58
- SSDEEP 49152:C7+10Qm3LAhEnMBSrrOJLN1ESEIBQEdnoE34KFLaBVd8kzvqsf8sbNW9GBDY1fc3:C7+GQtA3bidGSZcS7333s
- TLSH T11E664B3B72A4C26DC16EC23EC1A78F84E533B1751B77C2EB519102A51F16AC89E7E670
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
5533344
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mpr
WNetEnumResourceW
WNetGetUniversalNameW
WNetGetConnectionW
WNetCloseEnum
WNetOpenEnumW
shlwapi
SHAutoComplete
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
GetDefaultPrinterW
EnumPrintersW
comdlg32
FindTextW
GetSaveFileNameW
GetOpenFileNameW
comctl32
ImageList_GetImageInfo
FlatSB_SetScrollInfo
InitCommonControls
ImageList_DragMove
ImageList_Destroy
_TrackMouseEvent
ImageList_DragShowNolock
ImageList_Add
FlatSB_SetScrollProp
ImageList_GetDragImage
ImageList_Create
ImageList_EndDrag
ImageList_DrawEx
ImageList_SetImageCount
FlatSB_GetScrollPos
FlatSB_SetScrollPos
InitializeFlatSB
ImageList_Copy
FlatSB_GetScrollInfo
ImageList_Write
ImageList_DrawIndirect
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_BeginDrag
ImageList_GetIcon
ImageList_Replace
ImageList_GetImageCount
ImageList_DragEnter
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_Read
ImageList_DragLeave
ImageList_LoadImageW
ImageList_Draw
ImageList_Remove
ImageList_ReplaceIcon
ImageList_SetOverlayImage
shell32
SHGetFileInfoW
SHChangeNotify
Shell_NotifyIconW
SHAppBarMessage
ShellExecuteW
ShellExecuteExW
user32
MoveWindow
CopyImage
SetMenuItemInfoW
GetMenuItemInfoW
DefFrameProcW
ScrollWindowEx
GetDlgCtrlID
FrameRect
RegisterWindowMessageW
GetMenuStringW
FillRect
SendMessageA
EnumWindows
ShowOwnedPopups
GetClassInfoW
GetScrollRange
SetActiveWindow
GetActiveWindow
DrawEdge
GetKeyboardLayoutList
OemToCharBuffA
LoadBitmapW
EnumChildWindows
SendNotifyMessageW
GetScrollBarInfo
UnhookWindowsHookEx
SetCapture
GetCapture
ShowCaret
CreatePopupMenu
GetMenuItemID
CharLowerBuffW
PostMessageW
IsZoomed
SetParent
DrawMenuBar
GetClientRect
IsChild
IsIconic
CallNextHookEx
ShowWindow
GetWindowTextW
SetForegroundWindow
IsDialogMessageW
DestroyWindow
RegisterClassW
EndMenu
CharNextW
GetFocus
GetDC
SetFocus
ReleaseDC
ExitWindowsEx
CharToOemBuffA
SetScrollRange
DrawTextW
PeekMessageA
MessageBeep
SetRectEmpty
RemovePropW
GetSubMenu
DestroyIcon
IsWindowVisible
DispatchMessageA
UnregisterClassW
GetTopWindow
SendMessageW
GetWindowLongPtrW
SetWindowLongPtrW
SendMessageTimeoutW
LoadStringW
CreateMenu
CharLowerW
SetWindowRgn
SetWindowPos
GetMenuItemCount
GetSysColorBrush
GetWindowDC
DrawTextExW
ReplyMessage
GetScrollInfo
SetWindowTextW
GetMessageExtraInfo
GetSysColor
EnableScrollBar
TrackPopupMenu
DrawIconEx
GetClassNameW
GetMessagePos
GetIconInfo
SetScrollInfo
GetKeyNameTextW
GetDesktopWindow
SetCursorPos
GetCursorPos
SetMenu
GetMenuState
GetMenu
SetRect
GetKeyState
ValidateRect
GetCursor
KillTimer
WaitMessage
TranslateMDISysAccel
GetWindowPlacement
CreateIconIndirect
CreateWindowExW
GetMessageW
GetDCEx
PeekMessageW
MonitorFromWindow
GetUpdateRect
SetTimer
WindowFromPoint
BeginPaint
RegisterClipboardFormatW
MapVirtualKeyW
OffsetRect
IsWindowUnicode
DispatchMessageW
CreateAcceleratorTableW
DefMDIChildProcW
WaitForInputIdle
GetSystemMenu
SetScrollPos
GetScrollPos
InflateRect
DrawFocusRect
ReleaseCapture
LoadCursorW
ScrollWindow
GetLastActivePopup
GetSystemMetrics
CharUpperBuffW
SetClassLongPtrW
GetClassLongPtrW
SetClipboardData
GetClipboardData
ClientToScreen
SetWindowPlacement
GetMonitorInfoW
CheckMenuItem
CharUpperW
DefWindowProcW
GetForegroundWindow
EnableWindow
GetWindowThreadProcessId
RedrawWindow
EndPaint
MsgWaitForMultipleObjectsEx
LoadKeyboardLayoutW
ActivateKeyboardLayout
GetParent
MonitorFromRect
InsertMenuItemW
GetPropW
MessageBoxW
SetPropW
UpdateWindow
MsgWaitForMultipleObjects
DestroyMenu
SetWindowsHookExW
EmptyClipboard
AdjustWindowRectEx
IsWindow
DrawIcon
EnumThreadWindows
InvalidateRect
GetKeyboardState
ScreenToClient
DrawFrameControl
BringWindowToTop
SetCursor
CreateIcon
RemoveMenu
AppendMenuW
GetKeyboardLayoutNameW
OpenClipboard
TranslateMessage
MapWindowPoints
EnumDisplayMonitors
CallWindowProcW
CloseClipboard
DestroyCursor
CopyIcon
PostQuitMessage
ShowScrollBar
LoadImageW
EnableMenuItem
HideCaret
FindWindowExW
MonitorFromPoint
LoadIconW
SystemParametersInfoW
GetWindow
GetWindowRect
InsertMenuW
IsWindowEnabled
IsDialogMessageA
FindWindowW
GetKeyboardLayout
DeleteMenu
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
oleaut32
SafeArrayPutElement
LoadTypeLib
GetErrorInfo
VariantInit
VariantClear
SysFreeString
SafeArrayAccessData
SysReAllocStringLen
SafeArrayCreate
SafeArrayGetElement
GetActiveObject
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayPtrOfIndex
VariantCopy
SafeArrayGetUBound
SafeArrayGetLBound
RegisterTypeLib
VariantCopyInd
VariantChangeType
wtsapi32
WTSUnRegisterSessionNotification
WTSRegisterSessionNotification
advapi32
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegSetValueExW
RegConnectRegistryW
RegDeleteKeyExW
OpenThreadToken
GetUserNameW
RegQueryInfoKeyW
RegUnLoadKeyW
RegSaveKeyW
EqualSid
RegReplaceKeyW
GetTokenInformation
RegCreateKeyExW
SetSecurityDescriptorDacl
RegLoadKeyW
RegEnumKeyExW
AdjustTokenPrivileges
RegDeleteKeyW
LookupPrivilegeValueW
RegOpenKeyExW
OpenProcessToken
AllocateAndInitializeSid
FreeSid
RegDeleteValueW
RegFlushKey
RegQueryValueExW
RegEnumValueW
ConvertSidToStringSidW
RegCloseKey
InitializeSecurityDescriptor
RegRestoreKeyW
winhttp
WinHttpGetIEProxyConfigForCurrentUser
WinHttpSetTimeouts
WinHttpSetStatusCallback
WinHttpConnect
WinHttpReceiveResponse
WinHttpQueryAuthSchemes
WinHttpGetProxyForUrl
WinHttpReadData
WinHttpCloseHandle
WinHttpQueryHeaders
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpOpen
WinHttpWriteData
WinHttpSetCredentials
WinHttpQueryDataAvailable
WinHttpSetOption
WinHttpSendRequest
WinHttpQueryOption
kernel32
SetFileAttributesW
SetFileTime
RtlUnwindEx
GetACP
GetExitCodeProcess
CloseHandle
LocalFree
GetCurrentProcessId
SizeofResource
TerminateThread
QueryPerformanceFrequency
SetHandleInformation
IsDebuggerPresent
FindNextFileW
FlushInstructionCache
GetFullPathNameW
VirtualFree
GetProcessHeap
ExitProcess
HeapAlloc
WriteProfileStringW
GetCPInfoExW
CompareStringOrdinal
RtlUnwind
SetFilePointerEx
GetCPInfo
EnumSystemLocalesW
GetStdHandle
GetTimeZoneInformation
FileTimeToLocalFileTime
GetModuleHandleW
FreeLibrary
TryEnterCriticalSection
HeapDestroy
CompareFileTime
ReadFile
CreateProcessW
GetLastError
GetModuleFileNameW
SetLastError
GlobalAlloc
GlobalUnlock
FindResourceW
OpenMutexW
CreateThread
CompareStringW
CopyFileW
GetFileSizeEx
CreateMutexW
LoadLibraryA
GetVolumeInformationW
ResetEvent
MulDiv
FreeResource
GetDriveTypeW
GetVersion
RaiseException
MoveFileW
GlobalAddAtomW
GetSystemTimeAsFileTime
FormatMessageW
OpenProcess
SwitchToThread
GetExitCodeThread
GetCurrentThread
GetLogicalDrives
LocalFileTimeToFileTime
LoadLibraryExW
TerminateProcess
LockResource
FileTimeToSystemTime
GetShortPathNameW
GetCurrentThreadId
UnhandledExceptionFilter
MoveFileExW
PeekNamedPipe
GlobalFindAtomW
VirtualQuery
GlobalFree
VirtualQueryEx
Sleep
EnterCriticalSection
GetDiskFreeSpaceExW
SetFilePointer
ReleaseMutex
FlushFileBuffers
LoadResource
SuspendThread
GetTickCount
WritePrivateProfileStringW
GlobalDeleteAtom
GetStartupInfoW
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
InitializeCriticalSection
GetSystemWindowsDirectoryW
GetThreadPriority
GetCurrentProcess
GlobalLock
SetThreadPriority
VirtualAlloc
GetTempPathW
GetCommandLineW
GetSystemInfo
DuplicateHandle
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
GetWindowsDirectoryW
DeviceIoControl
LCMapStringW
GetDiskFreeSpaceW
VerSetConditionMask
FindFirstFileW
GetUserDefaultUILanguage
lstrlenW
QueryPerformanceCounter
SetEndOfFile
lstrcmpW
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
SetEvent
CreateFileW
GetLocaleInfoW
EnumResourceNamesW
GetSystemDirectoryW
DeleteFileW
FormatMessageA
GetEnvironmentVariableW
GetLocalTime
WaitForSingleObject
GetFileInformationByHandle
WriteFile
SetFileInformationByHandle
ExitThread
CreatePipe
DeleteCriticalSection
GetDateFormatW
TlsGetValue
SetErrorMode
GetComputerNameW
IsValidLocale
TlsSetValue
CreateDirectoryW
GetSystemDefaultUILanguage
EnumCalendarInfoW
GetProfileStringW
LocalAlloc
GetUserDefaultLangID
RemoveDirectoryW
CreateEventW
GetPrivateProfileStringW
WaitForMultipleObjectsEx
GetThreadLocale
SetThreadLocale
ole32
StgCreateDocfileOnILockBytes
CoCreateInstance
CLSIDFromString
CoUninitialize
IsEqualGUID
OleInitialize
CoFreeUnusedLibraries
CreateILockBytesOnHGlobal
CLSIDFromProgID
CoInitializeEx
OleUninitialize
CoDisconnectObject
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
api-ms-win-crt-string-l1-1-0
memset
gdi32
Pie
SetBkMode
CreateCompatibleBitmap
GetEnhMetaFileHeader
RectVisible
AngleArc
ResizePalette
SetAbortProc
SetTextColor
StretchBlt
RoundRect
SelectClipRgn
RestoreDC
SetRectRgn
GetTextMetricsW
RemoveFontResourceW
GetWindowOrgEx
CreatePalette
PolyBezierTo
CreateICW
CreateDCW
GetStockObject
CreateSolidBrush
Polygon
MoveToEx
PlayEnhMetaFile
Ellipse
StartPage
GetBitmapBits
StartDocW
AbortDoc
GetSystemPaletteEntries
GetEnhMetaFileBits
AddFontResourceW
GetEnhMetaFilePaletteEntries
CreatePenIndirect
CreateFontIndirectW
PolyBezier
EndDoc
GetObjectW
GetWinMetaFileBits
SetROP2
GetEnhMetaFileDescriptionW
ArcTo
Arc
SelectPalette
ExcludeClipRect
MaskBlt
SetWindowOrgEx
EndPage
DeleteEnhMetaFile
Chord
SetDIBits
SetViewportOrgEx
CreateRectRgn
RealizePalette
SetDIBColorTable
GetDIBColorTable
CreateBrushIndirect
PatBlt
LineDDA
SetEnhMetaFileBits
Rectangle
SaveDC
DeleteDC
BitBlt
FrameRgn
GetDeviceCaps
GetTextExtentPoint32W
GetClipBox
IntersectClipRect
Polyline
CreateBitmap
SetWinMetaFileBits
CombineRgn
GetStretchBltMode
CreateDIBitmap
SetStretchBltMode
GetDIBits
CreateDIBSection
LineTo
GetRgnBox
EnumFontsW
CreateHalftonePalette
SelectObject
DeleteObject
ExtFloodFill
UnrealizeObject
CopyEnhMetaFileW
SetBkColor
CreateCompatibleDC
GetBrushOrgEx
GetCurrentPositionEx
GetNearestPaletteIndex
GetTextExtentPointW
ExtTextOutW
SetBrushOrgEx
GetPixel
GdiFlush
SetPixel
EnumFontFamiliesExW
StretchDIBits
GetPaletteEntries
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Name
.text
Size
5.3MB
Virtual Size
5.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
472KB
Virtual Size
472KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
72KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
110B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
Virtual Size
656B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
109B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
243KB
Virtual Size
242KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.pdata
Size
292KB
Virtual Size
291KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
103KB
Virtual Size
102KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
VAL Cheat.pkg.bin
- SHA256 cc53e34441297c9988aad48cb8a7f23f797a78fef4cc0ef84e766de836f89079
- MD5 7f5817a6c4f0eb0e5df4204bf1759395
- SHA1 ac07ebf484fa234ea9b2c028057824e2fb234d14
- SHA512 c5a6e08cee71aef834238be9bf4e4ebe276beedd93b977b87e0c6a6c74a9f35d44213410c6e21ecf32d41984eacdc5969f7df15c9a040f96116345d1260aff51
- SSDEEP 25165824:DB2PkVQj4XhQvURRDqkuiUv4zea8OvkLyD:DYPkgW2MvUv4S5OvD
- TLSH T1C08933927DF834E447EC27469964DCC4257BE7B2DE8D7BA49D4EBBC04DCC28A038A116
- MD5 SHA1 SHA512 SSDEEP TLSH