popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

riotloader.exe

Generic Malware Malicious Library UPX ftp PE64 PE File OS Processor Check
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us March 30, 2025, 2:10 p.m. March 30, 2025, 2:15 p.m.
Size 2.6MB
Type PE32+ executable (GUI) x86-64, for MS Windows
MD5 7e2f48566d2ecb1223567928b6e95c79
SHA256 cb80abcdbee3558eee4334c52eca2edf78ab8c5b82616a702f58281fa226cfeb
CRC32 AF728C00
ssdeep 49152:Y+j+hPEzZwvSTA5fXz98CQTT8+HEFn0+di1KZSBGSr:PqdE69aB
PDB Path C:\Users\Jakob\Desktop\RIOT CHEAT\Riot Cheat loader\x64\Release\riotloader.pdb
Yara
  • PE_Header_Zero - PE File Signature
  • Malicious_Library_Zero - Malicious_Library
  • IsPE64 - (no description)
  • ftp_command - ftp command
  • Generic_Malware_Zero - Generic Malware
  • OS_Processor_Check_Zero - OS Processor Check
  • UPX_Zero - UPX packed file

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path C:\Users\Jakob\Desktop\RIOT CHEAT\Riot Cheat loader\x64\Release\riotloader.pdb
section {u'size_of_data': u'0x000b9a00', u'virtual_address': u'0x0011c000', u'entropy': 6.834494257768558, u'name': u'.rdata', u'virtual_size': u'0x000b9918'} entropy 6.83449425777 description A section with a high entropy has been found
section {u'size_of_data': u'0x000b5000', u'virtual_address': u'0x001d6000', u'entropy': 7.365089363233614, u'name': u'.data', u'virtual_size': u'0x000b5df8'} entropy 7.36508936323 description A section with a high entropy has been found
entropy 0.552458090036 description Overall entropy of this PE file is high
Bkav W64.AIDetectMalware
Lionic Trojan.Win32.GameHack.4!c
Cynet Malicious (score: 100)
CAT-QuickHeal Trojan.GameHack
Skyhigh BehavesLike.Win64.Generic.vc
ALYac Adware.GenericKD.61047156
Cylance Unsafe
VIPRE Adware.GenericKD.61047156
CrowdStrike win/malicious_confidence_100% (W)
BitDefender Adware.GenericKD.61047156
K7GW Trojan ( 005b5bc11 )
K7AntiVirus Trojan ( 005b5bc11 )
Arcabit Adware.Generic.D3A38174
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of Win64/Riskware.GameHack.AK
APEX Malicious
Avast FileRepMalware
Kaspersky UDS:DangerousObject.Multi.Generic
MicroWorld-eScan Adware.GenericKD.61047156
Rising Hacktool.GameHack!8.59E (CLOUD)
Emsisoft Adware.GenericKD.61047156 (B)
F-Secure Heuristic.HEUR/AGEN.1366470
McAfeeD ti!CB80ABCDBEE3
CTX exe.trojan.agen
Sophos Mal/Generic-S
SentinelOne Static AI - Suspicious PE
FireEye Adware.GenericKD.61047156
Google Detected
Avira HEUR/AGEN.1366470
Antiy-AVL Trojan/Win32.Caynamer
Microsoft Trojan:Win32/Sabsik.RD.A!ml
GData Adware.GenericKD.61047156
Varist W64/Agent.IIK.gen!Eldorado
McAfee Artemis!7E2F48566D2E
DeepInstinct MALICIOUS
Malwarebytes Generic.Malware/Suspicious
Ikarus Trojan.Win32.Generic
TrendMicro-HouseCall Trojan.Win32.VSX.PE04C9V
Tencent Malware.Win32.Gencirc.1458db80
MaxSecure Trojan.Malware.1728101.susgen
Fortinet Riskware/GameHack
AVG FileRepMalware
Paloalto generic.ml