Overview
overview
3Static
static
3SA_-_Wides...Fix.7z
windows7-x64
3SA_-_Wides...Fix.7z
windows10-2004-x64
3Leiame (ou morra).txt
windows7-x64
1Leiame (ou morra).txt
windows10-2004-x64
1Readme (or die).txt
windows7-x64
1Readme (or die).txt
windows10-2004-x64
1Widescreen...ix.dll
windows7-x64
1Widescreen...ix.dll
windows10-2004-x64
3Widescreen...ix.ini
windows7-x64
1Widescreen...ix.ini
windows10-2004-x64
1Widescreen...a).txt
windows7-x64
1Widescreen...a).txt
windows10-2004-x64
1Widescreen...e).txt
windows7-x64
1Widescreen...e).txt
windows10-2004-x64
1Widescreen...a).txt
windows7-x64
1Widescreen...a).txt
windows10-2004-x64
1Widescreen...e).txt
windows7-x64
1Widescreen...e).txt
windows10-2004-x64
1Widescreen...ps.dll
windows7-x64
1Widescreen...ps.dll
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
SA_-_Widescreen_Fix.7z
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SA_-_Widescreen_Fix.7z
Resource
win10v2004-20230221-en
Behavioral task
behavioral3
Sample
Leiame (ou morra).txt
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
Leiame (ou morra).txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
Readme (or die).txt
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
Readme (or die).txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
Widescreen Fix by ThirteenAG/GTASA.WidescreenFix.dll
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
Widescreen Fix by ThirteenAG/GTASA.WidescreenFix.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
Widescreen Fix by ThirteenAG/GTASA.WidescreenFix.ini
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
Widescreen Fix by ThirteenAG/GTASA.WidescreenFix.ini
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
Widescreen Fix by ThirteenAG/Leiame (ou morra).txt
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
Widescreen Fix by ThirteenAG/Leiame (ou morra).txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
Widescreen Fix by ThirteenAG/Readme (or die).txt
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
Widescreen Fix by ThirteenAG/Readme (or die).txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral15
Sample
Widescreen HOR+ Support by Wesser/Leiame (ou morra).txt
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
Widescreen HOR+ Support by Wesser/Leiame (ou morra).txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
Widescreen HOR+ Support by Wesser/Readme (or die).txt
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
Widescreen HOR+ Support by Wesser/Readme (or die).txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral19
Sample
Widescreen HOR+ Support by Wesser/wshps.dll
Resource
win7-20230220-en
Behavioral task
behavioral20
Sample
Widescreen HOR+ Support by Wesser/wshps.dll
Resource
win10v2004-20230221-en
General
-
Target
SA_-_Widescreen_Fix.7z
-
Size
156KB
-
MD5
c05e2c9c48889eaf048fee2d80d8ab85
-
SHA1
c0e41aaa324c9a9f084f3dea084d74946ed35e5e
-
SHA256
87e2f95b873020d7d15ece6f5d2a2be539415997413ff45a51b23d0cef197e4c
-
SHA512
687e5056230364b56808a62a99007f878de989b49a337dbe7a3e238fe88ff83cd89d26f967d9bd79b960b7818708a9df1b6b4171fc7952e18789fdc6f046eb1f
-
SSDEEP
3072:NJfK6N4vLbkisUOkERi3B/wDvzzYUdd5BhqLQ/Ddv/Ks0j5PoFB:NJfTN4vLzOkEs32rzzYUn5yo6s88
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Widescreen Fix by ThirteenAG/GTASA.WidescreenFix.asi unpack001/Widescreen HOR+ Support by Wesser/wshps.asi
Files
-
SA_-_Widescreen_Fix.7z.7z
-
Leiame (ou morra).txt
-
Readme (or die).txt
-
Widescreen Fix by ThirteenAG/GTASA.WidescreenFix.asi.dll windows x86
f6d1c89726150a3fa26d3f59b922d55a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GetModuleHandleExA
Sleep
VirtualProtect
GetModuleHandleA
SetEndOfFile
CreateThread
CreateFileW
WriteConsoleW
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
CloseHandle
HeapSize
GetModuleHandleW
GetLastError
WideCharToMultiByte
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
MultiByteToWideChar
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetProcAddress
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
SetEvent
ResetEvent
WaitForSingleObjectEx
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RaiseException
RtlUnwind
InterlockedFlushSList
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetACP
HeapFree
HeapAlloc
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
ReadFile
ReadConsoleW
SetFilePointerEx
HeapReAlloc
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
user32
MonitorFromWindow
GetWindowLongW
GetDesktopWindow
GetMonitorInfoW
Sections
.text Size: 207KB - Virtual size: 207KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Widescreen Fix by ThirteenAG/GTASA.WidescreenFix.ini
-
Widescreen Fix by ThirteenAG/Leiame (ou morra).txt
-
Widescreen Fix by ThirteenAG/Readme (or die).txt
-
Widescreen HOR+ Support by Wesser/Leiame (ou morra).txt
-
Widescreen HOR+ Support by Wesser/Readme (or die).txt
-
Widescreen HOR+ Support by Wesser/wshps.asi.dll windows x86
47840d12135e9d96be25da3f603bcd73
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
GetLastError
GetModuleFileNameW
InterlockedFlushSList
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
HeapReAlloc
GetStdHandle
GetFileType
LCMapStringW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetCommandLineA
GetCommandLineW
GetStringTypeW
SetStdHandle
HeapSize
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
DecodePointer
WriteConsoleW
CloseHandle
RaiseException
CreateFileW
GetACP
VirtualProtect
advapi32
SystemFunction036
Sections
.text Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ