home

[www.oldschoolhack.de]_lmaoboxloader.exe

LMAOBOX

This is a setup program which is used to install the application. The file has been seen being downloaded from www.unknowncheats.me and multiple other hosts.
Product:
LMAOBOX

Version:
1.4.2.0

MD5:
b104a7ada13645de4dd513a4865046f5

SHA-1:
79b1bd5ba30b3702e7a4c3cb7fb16b23159b0c2e

SHA-256:
17155782d239ac1379b2cb38ee74060349499ec9f3738b2c982b7cac637d3c59

Scanner detections:
2 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/28/2024 12:27:19 AM UTC  (today)

Scan engine
Detection
Engine version

NANO AntiVirus
Trojan.Win32.Agent.cwybmx
0.28.0.59608

Norman
Obfuscated.gen!r
11.20140516

File size:
164.5 KB (168,448 bytes)

Product version:
1.4.2.0

Copyright:
Copyright © 2013

Original file name:
LMAOBOXLOADER.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

File PE Metadata
Compilation timestamp:
11/22/2013 7:44:38 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:/LBA/YJ35VAkilHybw5+54Pyx8QfqhEYQ8VhAFVNT7JOyO1sWUkvoutvAATpYIpv:/Lm0VFYHykQ26xxyhEYQ8VSFVNTkyO1n

Entry address:
0x2834E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.6829

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
153 KB (156,672 bytes)

The file [www.oldschoolhack.de]_lmaoboxloader.exe has been seen being distributed by the following 14 URLs.

http://www.unknowncheats.me/.../downloads.php?do=file&id=10406&act=down&actionhash=1475989826-646d90d12ff8935ce8ffacfd1dffa4e647888574

http://www.unknowncheats.me/.../downloads.php?do=file&id=10406&act=down&actionhash=1388934065-ca39cd0edf81c2e6e974db09712b99f75afef5ae

http://www.oldschoolhack.de/downloads/.../a038de52d459ee49268ece3cf664e3a9

http://www.oldschoolhack.de/downloads/.../514bd4ecf85413b1e67dff146f6d754c

http://www.oldschoolhack.de/downloads/.../25243ba1c98bf7802c35e9a4eea39672

http://www.unknowncheats.me/.../downloads.php?do=file&id=10406&act=down&actionhash=1456011308-49527a6859706d3d2e9c9811cabe5d4ed543a275

http://www.unknowncheats.me/.../downloads.php?do=file&id=10406&act=down&actionhash=1438027620-0ae46e8a46665a32f6908b21ab80acfb7fbb36d2

http://www.unknowncheats.me/.../downloads.php?do=file&id=10406&act=down&actionhash=1398518947-cedb684b3651fe089686224c3143611ccbf9031b

http://download1173.mediafire.com/hrf7mcnj2odg/.../LMAOBOXLOADER_[www.unknowncheats.me]_.exe

https://fs06n3.sendspace.com/dl/61eedd368fa1f377752a0d616d87593b/536f0d2250af983f/.../[www.OldSchoolHack.de]_LMAOBOXLOADER.exe

https://fs06n3.sendspace.com/dl/43a50cd6654acc4a6f4ecf8c4b40a861/536f09f574542ae6/.../[www.OldSchoolHack.de]_LMAOBOXLOADER.exe

http://www.unknowncheats.me/.../downloads.php?do=file&id=10406&act=down&actionhash=1397735652-270416591586fd05d7ef84b5119b9bf1577b2240

http://www.unknowncheats.me/.../downloads.php?do=file&id=10406&act=down&actionhash=1391871385-6f7211fc1eb51d8e5f08220ec0a88ed8a47f9775

http://www.unknowncheats.me/.../downloads.php?do=file&id=10406&act=down&actionhash=1404243191-66c22b4cf0ffbb4b8763f7d95e01e63d20232a84

Scan [www.oldschoolhack.de]_lmaoboxloader.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.