R6 Cheat.img
- SHA256 16cc0e285e175b7869d6c8e340c01b85c09f7b0279c579fad9dce94688950871
Static task
static1
1 signatures
General
- Target R6 Cheat.img
- Size 816.2MB
- Sample261107-txp4sses3j
- SHA256 16cc0e285e175b7869d6c8e340c01b85c09f7b0279c579fad9dce94688950871
- MD5 f84563e4aee667a3e10c8efed21efbba
- SHA1 d48bdeba91ca4597784edc7fa17cf3a7a3ccc70b
- SHA512 686321e2e3697bbb84a1ca3ebd1ecbc8e5a8e49f9e6ebdbc9c407a87a06bd4331437bf614b2faab1a7b3050c5169dcab66bc903a59a249cb457501350c767a99
- SSDEEP 12582912:IFvaIKCBKEwNMWHKN5Lduy0CIYIRi0rngdx9lud11nfYduPWyQgw6cnU:I1DXbwNLqnLbIqL+z1nfYIOyQgt
- TLSH T1D499333B72E8C25ED16EC23A8167CF85E533B0751B37C2EB919102A91F15AC49E7F621
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/R6 Cheat.exe
File Explorer
-
R6 Cheat.img.iso 816.2MB
-
out.iso.iso 816.2MB
-
R6 Cheat-0.bin528KB
-
R6 Cheat-1.bin16B
-
R6 Cheat.dat38KB
-
R6 Cheat.exe.exe 6.5MB
-
R6 Cheat.pkg.bin.zip 808.1MB
out.iso
- SHA256 16cc0e285e175b7869d6c8e340c01b85c09f7b0279c579fad9dce94688950871
- MD5 f84563e4aee667a3e10c8efed21efbba
- SHA1 d48bdeba91ca4597784edc7fa17cf3a7a3ccc70b
- SHA512 686321e2e3697bbb84a1ca3ebd1ecbc8e5a8e49f9e6ebdbc9c407a87a06bd4331437bf614b2faab1a7b3050c5169dcab66bc903a59a249cb457501350c767a99
- SSDEEP 12582912:IFvaIKCBKEwNMWHKN5Lduy0CIYIRi0rngdx9lud11nfYduPWyQgw6cnU:I1DXbwNLqnLbIqL+z1nfYIOyQgt
- TLSH T1D499333B72E8C25ED16EC23A8167CF85E533B0751B37C2EB919102A91F15AC49E7F621
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Cheat-0.bin
- SHA256 de1e30a12b46df7f81bd50608f06793cdfc1652d021d4a7fb5f0565fbb2e781f
- MD5 3a16eddfea72df98fc49e8c8d7714699
- SHA1 4eed2bc2de56c6dbbe83fa61a8a6a5380dd47590
- SHA512 dd42283dbb4c601841b31ed4144a9ae2c3990cb598136aaa1a1b62001776d55c92a4c0f618caff92092e4c09d3f1cf0663e5a47f267fcf62a4c8573575bb935b
- SSDEEP 12288:YUWRFa29l681ZM/pE3fVfHLVbtTi1Zg9Ygi9o1+GX+6qw:e79l6iZUpCtfHLFtug9YgJYw
- TLSH T1F2B42312DD9D564CFC0E8BF75524A3C835D2947F4539AF82A6CFBA27223CC4A7792842
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Cheat-1.bin
- SHA256 b78cb43349494576159625edfd2c0450c503c34679126d8afc2e12f79f294dbb
- MD5 1c544a1cac9c1de4695d9a559001e8dd
- SHA1 cf0ec50182f08773a80fd86fec10f7406efa279d
- SHA512 8ae1faec28e63630cafc1b4b89035e50b307fec7ab1b4049a9909625b0042a8460eec0f4a616aae9a9c6ec9a77235e2d51b1ea5c9e19d2cce6fcf5642ef9c48b
- MD5 SHA1 SHA512
R6 Cheat.dat
- SHA256 90bb3963c778abfc045ca9adf2e3bd128e28776b26279375acaad7ad5a6ad71c
- MD5 880e92c1b792becc652bc585f3d9073d
- SHA1 da4cd585d4c3c9de377c9cc5257692d05a11794b
- SHA512 97e1c7709bf8bb25c135133b509a59ce2dfec0201974c08bac7828299e8725a42bc6ea455264eb472687690f8e8471fd8e7c7511f95ae93114f840289accf98e
- SSDEEP 768:nhC0jO/DqkUlGn242cdIpnTGCkcNs4O/AHNHvTlWvNsE6UmvmGAGkdBfG3VyFPC/:dOWkTyCR74O/0FpW+E6vvmG96JG3VyRy
- TLSH T1B203F1A89B4D5160BE6330DF53C0E63DCBFB1F7B1B546BE6240B054C24B79A2845B56C
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Cheat.exe
- IMPHASH f10bf2f63b7751a2743b6d4e4020a56a
- SHA256 2977cd15d0fa43d9155f7b1f76d17c58755138850bd6e160d3e342b38ba9afa4
- MD5 f62e1268c0c9dbf6a907fca37daccfc8
- SHA1 7b95b9ad8907c6690adda2fd3cfaab5c6c6f573d
- SHA512 80fc51ba108c23a8108314f8bacb63fc2dfaa643872b16bc9dd5ce90b13ca61595c703ca8885d10b7750fdf5955eb4a0f2d9922e11912a75a8d8b3ded88f9fd8
- SSDEEP 49152:C7+10Qm3LAhEnMBSrrOJLN1ESEIBQEdnoE34KFLaBVd8kzvqsf8sbNW9GBDY1fcU:C7+GQtA3bidGSZcSa333s
- TLSH T1D6664B3B72A4C26DC16EC23EC1A78F84E533B1751B77C2EB519102A51F16AC89E7E670
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
5533344
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mpr
WNetEnumResourceW
WNetGetUniversalNameW
WNetGetConnectionW
WNetCloseEnum
WNetOpenEnumW
shlwapi
SHAutoComplete
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
GetDefaultPrinterW
EnumPrintersW
comdlg32
FindTextW
GetSaveFileNameW
GetOpenFileNameW
comctl32
ImageList_GetImageInfo
FlatSB_SetScrollInfo
InitCommonControls
ImageList_DragMove
ImageList_Destroy
_TrackMouseEvent
ImageList_DragShowNolock
ImageList_Add
FlatSB_SetScrollProp
ImageList_GetDragImage
ImageList_Create
ImageList_EndDrag
ImageList_DrawEx
ImageList_SetImageCount
FlatSB_GetScrollPos
FlatSB_SetScrollPos
InitializeFlatSB
ImageList_Copy
FlatSB_GetScrollInfo
ImageList_Write
ImageList_DrawIndirect
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_BeginDrag
ImageList_GetIcon
ImageList_Replace
ImageList_GetImageCount
ImageList_DragEnter
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_Read
ImageList_DragLeave
ImageList_LoadImageW
ImageList_Draw
ImageList_Remove
ImageList_ReplaceIcon
ImageList_SetOverlayImage
shell32
SHGetFileInfoW
SHChangeNotify
Shell_NotifyIconW
SHAppBarMessage
ShellExecuteW
ShellExecuteExW
user32
MoveWindow
CopyImage
SetMenuItemInfoW
GetMenuItemInfoW
DefFrameProcW
ScrollWindowEx
GetDlgCtrlID
FrameRect
RegisterWindowMessageW
GetMenuStringW
FillRect
SendMessageA
EnumWindows
ShowOwnedPopups
GetClassInfoW
GetScrollRange
SetActiveWindow
GetActiveWindow
DrawEdge
GetKeyboardLayoutList
OemToCharBuffA
LoadBitmapW
EnumChildWindows
SendNotifyMessageW
GetScrollBarInfo
UnhookWindowsHookEx
SetCapture
GetCapture
ShowCaret
CreatePopupMenu
GetMenuItemID
CharLowerBuffW
PostMessageW
IsZoomed
SetParent
DrawMenuBar
GetClientRect
IsChild
IsIconic
CallNextHookEx
ShowWindow
GetWindowTextW
SetForegroundWindow
IsDialogMessageW
DestroyWindow
RegisterClassW
EndMenu
CharNextW
GetFocus
GetDC
SetFocus
ReleaseDC
ExitWindowsEx
CharToOemBuffA
SetScrollRange
DrawTextW
PeekMessageA
MessageBeep
SetRectEmpty
RemovePropW
GetSubMenu
DestroyIcon
IsWindowVisible
DispatchMessageA
UnregisterClassW
GetTopWindow
SendMessageW
GetWindowLongPtrW
SetWindowLongPtrW
SendMessageTimeoutW
LoadStringW
CreateMenu
CharLowerW
SetWindowRgn
SetWindowPos
GetMenuItemCount
GetSysColorBrush
GetWindowDC
DrawTextExW
ReplyMessage
GetScrollInfo
SetWindowTextW
GetMessageExtraInfo
GetSysColor
EnableScrollBar
TrackPopupMenu
DrawIconEx
GetClassNameW
GetMessagePos
GetIconInfo
SetScrollInfo
GetKeyNameTextW
GetDesktopWindow
SetCursorPos
GetCursorPos
SetMenu
GetMenuState
GetMenu
SetRect
GetKeyState
ValidateRect
GetCursor
KillTimer
WaitMessage
TranslateMDISysAccel
GetWindowPlacement
CreateIconIndirect
CreateWindowExW
GetMessageW
GetDCEx
PeekMessageW
MonitorFromWindow
GetUpdateRect
SetTimer
WindowFromPoint
BeginPaint
RegisterClipboardFormatW
MapVirtualKeyW
OffsetRect
IsWindowUnicode
DispatchMessageW
CreateAcceleratorTableW
DefMDIChildProcW
WaitForInputIdle
GetSystemMenu
SetScrollPos
GetScrollPos
InflateRect
DrawFocusRect
ReleaseCapture
LoadCursorW
ScrollWindow
GetLastActivePopup
GetSystemMetrics
CharUpperBuffW
SetClassLongPtrW
GetClassLongPtrW
SetClipboardData
GetClipboardData
ClientToScreen
SetWindowPlacement
GetMonitorInfoW
CheckMenuItem
CharUpperW
DefWindowProcW
GetForegroundWindow
EnableWindow
GetWindowThreadProcessId
RedrawWindow
EndPaint
MsgWaitForMultipleObjectsEx
LoadKeyboardLayoutW
ActivateKeyboardLayout
GetParent
MonitorFromRect
InsertMenuItemW
GetPropW
MessageBoxW
SetPropW
UpdateWindow
MsgWaitForMultipleObjects
DestroyMenu
SetWindowsHookExW
EmptyClipboard
AdjustWindowRectEx
IsWindow
DrawIcon
EnumThreadWindows
InvalidateRect
GetKeyboardState
ScreenToClient
DrawFrameControl
BringWindowToTop
SetCursor
CreateIcon
RemoveMenu
AppendMenuW
GetKeyboardLayoutNameW
OpenClipboard
TranslateMessage
MapWindowPoints
EnumDisplayMonitors
CallWindowProcW
CloseClipboard
DestroyCursor
CopyIcon
PostQuitMessage
ShowScrollBar
LoadImageW
EnableMenuItem
HideCaret
FindWindowExW
MonitorFromPoint
LoadIconW
SystemParametersInfoW
GetWindow
GetWindowRect
InsertMenuW
IsWindowEnabled
IsDialogMessageA
FindWindowW
GetKeyboardLayout
DeleteMenu
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
oleaut32
SafeArrayPutElement
LoadTypeLib
GetErrorInfo
VariantInit
VariantClear
SysFreeString
SafeArrayAccessData
SysReAllocStringLen
SafeArrayCreate
SafeArrayGetElement
GetActiveObject
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayPtrOfIndex
VariantCopy
SafeArrayGetUBound
SafeArrayGetLBound
RegisterTypeLib
VariantCopyInd
VariantChangeType
wtsapi32
WTSUnRegisterSessionNotification
WTSRegisterSessionNotification
advapi32
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegSetValueExW
RegConnectRegistryW
RegDeleteKeyExW
OpenThreadToken
GetUserNameW
RegQueryInfoKeyW
RegUnLoadKeyW
RegSaveKeyW
EqualSid
RegReplaceKeyW
GetTokenInformation
RegCreateKeyExW
SetSecurityDescriptorDacl
RegLoadKeyW
RegEnumKeyExW
AdjustTokenPrivileges
RegDeleteKeyW
LookupPrivilegeValueW
RegOpenKeyExW
OpenProcessToken
AllocateAndInitializeSid
FreeSid
RegDeleteValueW
RegFlushKey
RegQueryValueExW
RegEnumValueW
ConvertSidToStringSidW
RegCloseKey
InitializeSecurityDescriptor
RegRestoreKeyW
winhttp
WinHttpGetIEProxyConfigForCurrentUser
WinHttpSetTimeouts
WinHttpSetStatusCallback
WinHttpConnect
WinHttpReceiveResponse
WinHttpQueryAuthSchemes
WinHttpGetProxyForUrl
WinHttpReadData
WinHttpCloseHandle
WinHttpQueryHeaders
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpOpen
WinHttpWriteData
WinHttpSetCredentials
WinHttpQueryDataAvailable
WinHttpSetOption
WinHttpSendRequest
WinHttpQueryOption
kernel32
SetFileAttributesW
SetFileTime
RtlUnwindEx
GetACP
GetExitCodeProcess
CloseHandle
LocalFree
GetCurrentProcessId
SizeofResource
TerminateThread
QueryPerformanceFrequency
SetHandleInformation
IsDebuggerPresent
FindNextFileW
FlushInstructionCache
GetFullPathNameW
VirtualFree
GetProcessHeap
ExitProcess
HeapAlloc
WriteProfileStringW
GetCPInfoExW
CompareStringOrdinal
RtlUnwind
SetFilePointerEx
GetCPInfo
EnumSystemLocalesW
GetStdHandle
GetTimeZoneInformation
FileTimeToLocalFileTime
GetModuleHandleW
FreeLibrary
TryEnterCriticalSection
HeapDestroy
CompareFileTime
ReadFile
CreateProcessW
GetLastError
GetModuleFileNameW
SetLastError
GlobalAlloc
GlobalUnlock
FindResourceW
OpenMutexW
CreateThread
CompareStringW
CopyFileW
GetFileSizeEx
CreateMutexW
LoadLibraryA
GetVolumeInformationW
ResetEvent
MulDiv
FreeResource
GetDriveTypeW
GetVersion
RaiseException
MoveFileW
GlobalAddAtomW
GetSystemTimeAsFileTime
FormatMessageW
OpenProcess
SwitchToThread
GetExitCodeThread
GetCurrentThread
GetLogicalDrives
LocalFileTimeToFileTime
LoadLibraryExW
TerminateProcess
LockResource
FileTimeToSystemTime
GetShortPathNameW
GetCurrentThreadId
UnhandledExceptionFilter
MoveFileExW
PeekNamedPipe
GlobalFindAtomW
VirtualQuery
GlobalFree
VirtualQueryEx
Sleep
EnterCriticalSection
GetDiskFreeSpaceExW
SetFilePointer
ReleaseMutex
FlushFileBuffers
LoadResource
SuspendThread
GetTickCount
WritePrivateProfileStringW
GlobalDeleteAtom
GetStartupInfoW
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
InitializeCriticalSection
GetSystemWindowsDirectoryW
GetThreadPriority
GetCurrentProcess
GlobalLock
SetThreadPriority
VirtualAlloc
GetTempPathW
GetCommandLineW
GetSystemInfo
DuplicateHandle
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
GetWindowsDirectoryW
DeviceIoControl
LCMapStringW
GetDiskFreeSpaceW
VerSetConditionMask
FindFirstFileW
GetUserDefaultUILanguage
lstrlenW
QueryPerformanceCounter
SetEndOfFile
lstrcmpW
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
SetEvent
CreateFileW
GetLocaleInfoW
EnumResourceNamesW
GetSystemDirectoryW
DeleteFileW
FormatMessageA
GetEnvironmentVariableW
GetLocalTime
WaitForSingleObject
GetFileInformationByHandle
WriteFile
SetFileInformationByHandle
ExitThread
CreatePipe
DeleteCriticalSection
GetDateFormatW
TlsGetValue
SetErrorMode
GetComputerNameW
IsValidLocale
TlsSetValue
CreateDirectoryW
GetSystemDefaultUILanguage
EnumCalendarInfoW
GetProfileStringW
LocalAlloc
GetUserDefaultLangID
RemoveDirectoryW
CreateEventW
GetPrivateProfileStringW
WaitForMultipleObjectsEx
GetThreadLocale
SetThreadLocale
ole32
StgCreateDocfileOnILockBytes
CoCreateInstance
CLSIDFromString
CoUninitialize
IsEqualGUID
OleInitialize
CoFreeUnusedLibraries
CreateILockBytesOnHGlobal
CLSIDFromProgID
CoInitializeEx
OleUninitialize
CoDisconnectObject
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
api-ms-win-crt-string-l1-1-0
memset
gdi32
Pie
SetBkMode
CreateCompatibleBitmap
GetEnhMetaFileHeader
RectVisible
AngleArc
ResizePalette
SetAbortProc
SetTextColor
StretchBlt
RoundRect
SelectClipRgn
RestoreDC
SetRectRgn
GetTextMetricsW
RemoveFontResourceW
GetWindowOrgEx
CreatePalette
PolyBezierTo
CreateICW
CreateDCW
GetStockObject
CreateSolidBrush
Polygon
MoveToEx
PlayEnhMetaFile
Ellipse
StartPage
GetBitmapBits
StartDocW
AbortDoc
GetSystemPaletteEntries
GetEnhMetaFileBits
AddFontResourceW
GetEnhMetaFilePaletteEntries
CreatePenIndirect
CreateFontIndirectW
PolyBezier
EndDoc
GetObjectW
GetWinMetaFileBits
SetROP2
GetEnhMetaFileDescriptionW
ArcTo
Arc
SelectPalette
ExcludeClipRect
MaskBlt
SetWindowOrgEx
EndPage
DeleteEnhMetaFile
Chord
SetDIBits
SetViewportOrgEx
CreateRectRgn
RealizePalette
SetDIBColorTable
GetDIBColorTable
CreateBrushIndirect
PatBlt
LineDDA
SetEnhMetaFileBits
Rectangle
SaveDC
DeleteDC
BitBlt
FrameRgn
GetDeviceCaps
GetTextExtentPoint32W
GetClipBox
IntersectClipRect
Polyline
CreateBitmap
SetWinMetaFileBits
CombineRgn
GetStretchBltMode
CreateDIBitmap
SetStretchBltMode
GetDIBits
CreateDIBSection
LineTo
GetRgnBox
EnumFontsW
CreateHalftonePalette
SelectObject
DeleteObject
ExtFloodFill
UnrealizeObject
CopyEnhMetaFileW
SetBkColor
CreateCompatibleDC
GetBrushOrgEx
GetCurrentPositionEx
GetNearestPaletteIndex
GetTextExtentPointW
ExtTextOutW
SetBrushOrgEx
GetPixel
GdiFlush
SetPixel
EnumFontFamiliesExW
StretchDIBits
GetPaletteEntries
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Name
.text
Size
5.3MB
Virtual Size
5.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
472KB
Virtual Size
472KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
72KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
110B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
Virtual Size
656B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
109B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
243KB
Virtual Size
242KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.pdata
Size
292KB
Virtual Size
291KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
103KB
Virtual Size
102KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
R6 Cheat.pkg.bin
- SHA256 0d708813cfa0d21471b546eee80b5b6e42a87ae0accaf895c8c6d471cb2868b5
- MD5 623ebd145702801b8f66b4947882730f
- SHA1 b5f077f662650df56ee0facae636dc940a92f52e
- SHA512 57a7e0e6f1c1e5d411de462fd80746b30a2ce43baaa5c51448b516e5075d7864e4fdd4072b8f6561428561193028bc82a539104fee4030103697f36b400432e7
- SSDEEP 12582912:dFvaIKCBKEwNMWHKN5Lduy0CIYIRi0rngdx9lud11nfYduPWyQgw6cnUr:d1DXbwNLqnLbIqL+z1nfYIOyQgtn
- TLSH T1FE99332435CD5AEFAA62571A1718EAE6B31490009B155198F1F628FF0F58E93FCF3C1A
- MD5 SHA1 SHA512 SSDEEP TLSH