undetek-v10.53.zip
- SHA256 14945d601e12087995c7fc20685e84427a592c6ad4ab32261eb75f4adf9345d4
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
undetek-v10.53/VAC.txt
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
undetek-v10.53/VAC.txt
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
undetek-v10.53/undetek-v10.53.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
undetek-v10.53/undetek-v10.53.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target undetek-v10.53.zip
- Size 116KB
- Sample261014-mdtvbas1ev
- SHA256 14945d601e12087995c7fc20685e84427a592c6ad4ab32261eb75f4adf9345d4
- MD5 b8cfa4d10db8a9e91d4068899d6f67b9
- SHA1 18303b96cef8dfd374278a74a16a1e641316dccb
- SHA512 300a5aead888e8cc16d41416be61dfed1c330f8624f3d4382da12a911b9285271bd667e4a90dfccb8b4fea603cad08a882fd6d1f07aa0e8ec87bf70d64c85888
- SSDEEP 3072:nzgl330pGnVHbuOkudVPhpKbRGsywzsNc2Ygua0hnE:zg3I6uOvfPhSRG5egubhnE
- TLSH T1B8C312C34EE4BD1DFA2CB67028698CD63B06474B66A7918669A7412C75FBD0FB0707C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/undetek-v10.53/undetek-v10.53.exe
File Explorer
-
undetek-v10.53.zip.zip 116KB
-
undetek-v10.53/Aimbot Guide.txt1KB
-
undetek-v10.53/Install Guide.txt1KB
-
undetek-v10.53/VAC.txt279B
-
undetek-v10.53/undetek-v10.53.exe.exe 249KB
undetek-v10.53/Aimbot Guide.txt
- SHA256 8b25a277f4e3d687162417342550d5ab15bcbc8ac237b56c3db987771d892f54
- MD5 52c66b54a5e75f0cf811a41aa6558881
- SHA1 e20e71a36bf5978c189ebf59ada5a4254cf743a4
- SHA512 2e5e313d62dc7021f545f48ccd823464e7c30d46c4c7f06df0147d94f2d0541f557e37b710a9089d9b915dc0833f3b37f6d22bd7b1ec23da5ad73f56b7e6908c
- TLSH T1FD21B13FD20663F706B00A73B02C9AF2770F25F49316925A3E3A455C2219AB4427F4CD
- MD5 SHA1 SHA512 TLSH
undetek-v10.53/Install Guide.txt
- SHA256 c5ce94f365b46aabe6a77197e0b32a1f6a19a3efe3c09c4eda56d4e1b9aa30ed
- MD5 22bb0b4481a4520d8fd7aec8e784029c
- SHA1 17bc94e9432e7b3bc4a92619e77f422ad7323e4c
- SHA512 8efc55ef5eca8372c0294c69cfc2a1cf59e022d4397bb644a007765db83358d4e317c7f02d433078f4c298869a0d5375590824399d3f815497dd07864f963e19
- TLSH T1A121101BA66FE3F719311252425DBAA6D20A091F23364A123095803D256E7CECBEF4DC
- MD5 SHA1 SHA512 TLSH
undetek-v10.53/VAC.txt
- SHA256 c423908bd2a60cc070a999654a3cd501f6525e310005dae62664f614a4882621
- MD5 c70e3de0f2bc4e114f5a3980100e8086
- SHA1 6fae9a2f9c7e6028f141a281aa5e19ce096724b6
- SHA512 7ad6cca31d0fb81e962d5765179cc9230a7f91d496ef3cd8a3617f95f1564cd19692e41080fb4a4c76516df06c6abb09cc9a8eb69b61b9b01924ff728501a3db
- TLSH T1C3D02B5BCD9C028D1B26A0621142BA74D215F41DB3870A44189C016DDB7324AC2A603F
- MD5 SHA1 SHA512 TLSH
undetek-v10.53/undetek-v10.53.exe
- IMPHASH c21f7e17d1d746619c809b3ce642d7e8
- SHA256 7b878cde98be7028c3cb4571b5005c3570f2ed145cf4a49ae2140a56a3d36826
- MD5 10d0dd3f7c59fe95e82b97ab83c39842
- SHA1 26f58c1d51177fe9b1289640547b4a7996f16fed
- SHA512 ff39e39504aec211cb9b652c69c97c62e90367a04cbed2ab173c976e36949264ba1dd57f9fa6a8791c27dab0e775aaf475950606e3a08eb64fb9c71bc7f04823
- SSDEEP 3072:obwWE5nqVsRiV3nGNeGviwYap+JbdaWnnFB9Yv/xdeNp+gCr:2GnqasVGlMxdHEJdkXCr
- TLSH T1CA44390A666994F5D4B2D23AC542257AF6B17C058372E7DF03903D27AF33AE1C9393A1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
42484
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
ReadProcessMemory
WriteProcessMemory
GetModuleHandleA
GetProcAddress
CreateToolhelp32Snapshot
VirtualProtectEx
Process32Next
WriteConsoleW
CreateFileW
HeapReAlloc
HeapSize
VirtualAllocEx
GetTickCount64
OpenProcess
CreateRemoteThread
Sleep
WaitForSingleObject
GetLastError
Process32First
CloseHandle
SetFilePointerEx
GetFileSizeEx
ReadConsoleW
ReadFile
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetProcessHeap
GetStringTypeW
SetStdHandle
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlPcToFileHeader
RaiseException
RtlUnwindEx
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
VirtualProtect
CompareStringW
LCMapStringW
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
RtlUnwind
user32
GetAsyncKeyState
SendInput
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
RegSetValueExW
ws2_32
socket
WSAGetLastError
recv
connect
closesocket
WSAStartup
WSACleanup
freeaddrinfo
getaddrinfo
send
Name
.text
Size
160KB
Virtual Size
159KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
49KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
28KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=149, id=261, version=33145,
count=12, id=260, version=33145,
count=9, id=259, version=33145,
count=9, id=259, version=35207,
count=17, id=260, version=35207,
count=46, id=261, version=35207,
count=9, id=257, version=33145,
count=125, id=1, productName=Unmarked objects,
count=3, id=261, version=35229,
count=1, id=258, version=35229,