c06ce2cea34c9389ca8b11f56aff05986b1a5f85b738703f451c7c2014cbb80f
- SHA256 c06ce2cea34c9389ca8b11f56aff05986b1a5f85b738703f451c7c2014cbb80f
Behavioral task
behavioral1
Sample
GameCheat修改器/GameCheat.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
GameCheat修改器/GameCheat.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
游侠网最新单机游戏.url
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
游侠网最新单机游戏.url
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
游侠网热门MOD补丁.url
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
游侠网热门MOD补丁.url
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target c06ce2cea34c9389ca8b11f56aff05986b1a5f85b738703f451c7c2014cbb80f
- Size 1.3MB
- Sample261030-mpl9lsbv3x
- SHA256 c06ce2cea34c9389ca8b11f56aff05986b1a5f85b738703f451c7c2014cbb80f
- MD5 7bbfd9eafcaf9d4f7038aa2470637d3f
- SHA1 ed15e346f08f2f0977ed5313f32fcd5e14999ff1
- SHA512 63e4bac39c4da1fc23efdc56427a1f4bd6aa34c94d27ad324a3b159b5957a8a266830979c5faa4831c6ea10f6e22a8437c8b8bc2c6c3453c57bf13d6cda1dc5c
- SSDEEP 24576:Yg/jawEv++s7xWWudp/jJ1duQpllarFyKZharPWt3CeQVbfuCHig4Z33zAXW:bj4vROWWiZjJ1Jpl0rFTZharet3CeQVM
- TLSH T1E85533D5174A23E777EA1A26AE6671A0331166DC28BBCFBF04011FAE8923F176D05D18
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/GameCheat修改器/GameCheat.exe upx - Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/GameCheat修改器/GameCheat.exe unpack002/out.upx
File Explorer
-
c06ce2cea34c9389ca8b11f56aff05986b1a5f85b738703f451c7c2014cbb80f.zip 1.3MB
-
ALI213-.txt4KB
-
GameCheat修改器/GameCheat.exe.exe 1.4MB
-
out.upx.exe 5.3MB
-
游侠网最新单机游戏.url182B
-
游侠网热门MOD补丁.url183B
ALI213-.txt
- SHA256 46d01a4e546c8c6a75bd7a555965e4506870cc361e8949774cf8c6d2006ee15b
- MD5 75d8419461554527d17e7a69294762b2
- SHA1 7ea9a5ee1360fa29b2e704b5cc2dcb0842bb268c
- SHA512 73839790c527010f5657218419153b0f5252aa7e91d685175147a6377531cbb517849ad074054adaadeeb642cf1146e55e73094bea10e7e588893b2080617b4f
- SSDEEP 48:Ajp21Dpqp+AVIZ6Kt2dKfNSYHrgaQeHl9cZG6p5D:epWDpqpaXSJF
- TLSH T17AA18CAC963CA78005783FB76197A85CADC2071BF3544DC67A3CC7AA5B716D982F2207
- MD5 SHA1 SHA512 SSDEEP TLSH
GameCheat修改器/GameCheat.exe
- SHA256 fb3dcd5bf63004becda83c5a566b8e78f7a1dadd640f99561179cdb7ea41926f
- MD5 e84a0067f4f914cfb491a6f468956247
- SHA1 0addc489c19649bc5b12971cf8a6460126dee7c8
- SHA512 d6109d721b0e8b14f9e699f25d8ea59f9f3296393b3fda81eea4658ab76db6127cfed13046d82dbb38c7f9a687680be85b413e5cae63a62ab0642a3589266813
- SSDEEP 24576:R6r/eUjdlP1cYMQL95wdQNlbjcTXnlCIDmGOEK6KHOlsHP4riYAyH9FiH:m/eUjXOYMQ7wyR4pPy9HOlAPwHn
- TLSH T1476523BB42BCE8D3C01E50357DE4CB34549BFCA5ED89250287D9663F3EAA5824B5131B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
5770096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
UPX0
Size
Virtual Size
4.2MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
58KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
out.upx
- SHA256 23600194cba36ae720548e39e961dee5f2e88e54fdad809be72f75e85f6a4900
- MD5 b9c30b0da11a89fc58098e663942c3aa
- SHA1 6848c7ea4489952a4c18e1387d25dc48cab8528e
- SHA512 f26e6d41b395b84e9550a91ba94efe8f1bd06af5c964ed7f2849a1cb6ca806308ed714fe0ed75f12e67b0b7dc08e298b2c4848f9b8d8a334a6c72fc615ce4c4f
- SSDEEP 49152:FpdT7TgM6cZ6/YWnsMjqG4ta/OSqtg+eA5206Zag0Dar3HKD:fuMqjqNtb5gl
- TLSH T1DC46D66A37A48119C16E813A81974B61BA3370B80FFADEF70D804AA55F339D15D3FE64
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4442816
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Name
.text
Size
4.3MB
Virtual Size
4.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
372KB
Virtual Size
372KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
53KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
114B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
Virtual Size
632B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
109B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
195KB
Virtual Size
195KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.pdata
Size
220KB
Virtual Size
219KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
210KB
Virtual Size
210KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
游侠网最新单机游戏.url
- SHA256 e3706b783ec5373a70044492ff4a5ec6462fe114854c3b57b55d7ea7db0ad133
- MD5 5195a3742c3af3bfbf051ff4aef262df
- SHA1 08100c8b17705a26e6973efb147169a0a84148b9
- SHA512 5de4379e782cd805ebc982d0c975336f9a2078f0efaaf9a924a5144ff54f72c116ac5541b8368ce7e0eb478e0e4b863db6e296fd3804c63acd614f3ca6df4741
- TLSH T125C012698A5E805DD313950E2070B808E41EB5D64CF6C45D7245CD4A6EA40C0D885621
- MD5 SHA1 SHA512 TLSH
游侠网热门MOD补丁.url
- SHA256 b309f388ad3192343d775f071c46d20e2c7cfff64e757c20071f164eb46be0e5
- MD5 1240cb2f6fdcd17b166496bd17f72cb6
- SHA1 2c4e10cb34c961bd93b977f138a2b04a0fde54d0
- SHA512 3723249fb3b771aa4b2fb17d535b2aee241dcd16091c90ec55993c1821f1b29f919406ae012b8ce7bf446616acd401cd4ccedbbff254d6b90f1027364c16e690
- TLSH T136C012A94A5E805DD313850E2161BC0CE41EB0DA4DF6C49D7255DD466EA50C0D885621
- MD5 SHA1 SHA512 TLSH