GTAVLauncher[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

GTAVLauncher.exe
Size

18.1MB
MD5

46d03c21e1e86348d8c20c04413eb927
SHA1

a53db678db684770ffbfb62e4e8b3085ae9c1a4c
SHA256

4e505d404450e6febed347fe768b1f205304af91bdc563ebb9ad27ad5715b33b
SHA512

fe4244699196bc77ab794a1d5a78d45a6099891f1b673dec2a39fc79130d8373b6d8cd5d725e34c5a24d7ec94d0489b503e2ab333870c63c4242e6e37dd58b7d
SSDEEP

393216:jCy9EjsYS5Vw+AxpIShA3k/UJHofch1fCAOAbzHiDv:jhGjtShAXISAk/CoY1fv7Q

Score

1^/10

Malware Config

Signatures

Files

GTAVLauncher.exe
.exe windows x64

e6d43f0bfc7752a24a151f58168d685e

Code Sign

4c:17:93:4d
Certificate

Issuer

CN=Entrust Code Signing Certification Authority - L1D,OU=www.entrust.net/rpa is incorporated by reference+OU=(c) 2009 Entrust\, Inc.,O=Entrust\, Inc.,C=US

Not Before

09/12/2014, 20:07

Not After

10/12/2017, 07:56

Subject

CN=Entrust Time Stamping Authority,O=Entrust\, Inc.,L=Ottawa,ST=Ontario,C=CA

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

38:63:e2:e2
Certificate

Issuer

CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net

Not Before

10/09/2009, 21:59

Not After

10/09/2019, 22:29

Subject

CN=Entrust Code Signing Certification Authority - L1D,OU=www.entrust.net/rpa is incorporated by reference+OU=(c) 2009 Entrust\, Inc.,O=Entrust\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4c:0e:8c:3a
Certificate

Issuer

CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net

Not Before

11/11/2011, 15:41

Not After

12/11/2021, 08:51

Subject

CN=Entrust Code Signing Certification Authority - L1D,OU=www.entrust.net/rpa is incorporated by reference+OU=(c) 2009 Entrust\, Inc.,O=Entrust\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4c:17:77:2e
Certificate

Issuer

CN=Entrust Code Signing Certification Authority - L1D,OU=www.entrust.net/rpa is incorporated by reference+OU=(c) 2009 Entrust\, Inc.,O=Entrust\, Inc.,C=US

Not Before

08/05/2014, 19:03

Not After

09/05/2015, 05:38

Subject

CN=Take-Two Interactive Software\, Inc.,OU=Rockstar Games,O=Take-Two Interactive Software\, Inc.,L=New York,ST=New York,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

c8:17:97:09:0e:9a:fc:24:55:f5:69:a4:73:7d:54:a2:45:06:38:d2
Signer

Actual PE Digest

c8:17:97:09:0e:9a:fc:24:55:f5:69:a4:73:7d:54:a2:45:06:38:d2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

xinput1_3

ord2

kernel32

GetStdHandle
GetProcessHeap
GetStartupInfoW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetFileInformationByHandle
PeekNamedPipe
GetStringTypeW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
WriteConsoleW
SetConsoleCtrlHandler
GetFileType
OutputDebugStringW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
SetEnvironmentVariableA
AreFileApisANSI
SetConsoleMode
ReadConsoleInputA
lstrlenA
LoadLibraryA
FlushConsoleInputBuffer
GlobalMemoryStatus
GetVersion
ExitProcess
SetStdHandle
HeapQueryInformation
GetTimeZoneInformation
GetProcAddress
GetModuleHandleW
InitializeCriticalSection
EnterCriticalSection
ExitThread
CreateThread
GetConsoleCP
ReadConsoleW
GetConsoleMode
LeaveCriticalSection
DeleteCriticalSection
GetLocalTime
CreateDirectoryW
GetFileAttributesW
GetLastError
Sleep
GetSystemTimeAsFileTime
MultiByteToWideChar
LockResource
LoadResource
SizeofResource
FormatMessageA
FindResourceW
WideCharToMultiByte
OpenProcess
FindClose
CloseHandle
QueryFullProcessImageNameW
DeleteFileW
FindFirstFileW
FindNextFileW
GetTickCount64
LocalFree
GetCommandLineW
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
ResumeThread
WaitForSingleObject
GetModuleFileNameW
GetVersionExW
SetEndOfFile
SetFilePointerEx
FileTimeToSystemTime
CreateFileW
MoveFileW
FreeLibrary
LoadLibraryExW
CreateProcessW
GetFileSizeEx
IsProcessorFeaturePresent
IsDebuggerPresent
VirtualQuery
VirtualAlloc
GetSystemInfo
HeapAlloc
HeapReAlloc
GetDriveTypeW
FindFirstFileExW
HeapFree
RtlUnwindEx
RtlLookupFunctionEntry
RaiseException
RtlPcToFileHeader
GetUserDefaultLCID
VirtualProtect
SearchPathW
GetProfileIntW
GetTempFileNameW
GetWindowsDirectoryW
SetErrorMode
VerifyVersionInfoW
lstrcpyW
VerSetConditionMask
GetFileTime
WriteFile
ReadFile
GetExitCodeProcess
GetFileAttributesExW
FileTimeToLocalFileTime
lstrcmpiW
GetCurrentProcess
DuplicateHandle
UnlockFile
SetFilePointer
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
GetCurrentDirectoryW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GlobalGetAtomNameW
GlobalFlags
CopyFileW
FormatMessageW
GlobalSize
GetTickCount
GetCurrentProcessId
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
GetCurrentThread
SuspendThread
SetThreadPriority
SetEvent
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
GlobalFindAtomW
GlobalAddAtomW
LoadLibraryW
lstrcmpW
GlobalDeleteAtom
GetModuleHandleExW
FreeResource
GetSystemDirectoryW
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
SetLastError
DecodePointer
EncodePointer
OutputDebugStringA
MulDiv
CreateSemaphoreW
ReleaseSemaphore
GetVolumeInformationA
GetWindowsDirectoryA
GetEnvironmentVariableA
CreateProcessA
CreatePipe
SetHandleInformation
GetSystemFirmwareTable
LocalAlloc
CreateNamedPipeW
CreateEventW
DisconnectNamedPipe
ConnectNamedPipe
WaitForMultipleObjects
GetOverlappedResult
SetFileAttributesW
GetDiskFreeSpaceExW
GetTempPathW
GetModuleHandleA
SystemTimeToFileTime
GetUserDefaultLocaleName
FindResourceExW
LoadLibraryExA
HeapSize
AddVectoredExceptionHandler
RemoveVectoredExceptionHandler

user32

TranslateAcceleratorW
ModifyMenuW
SetMenuDefaultItem
CopyIcon
GetDoubleClickTime
SetClassLongPtrW
LockWindowUpdate
BringWindowToTop
SetParent
SetCursorPos
GetSystemMenu
IsZoomed
TrackMouseEvent
CopyAcceleratorTableW
DestroyAcceleratorTable
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
NotifyWinEvent
InvertRect
HideCaret
MessageBeep
GetMenuDefaultItem
CreatePopupMenu
MonitorFromPoint
EnableScrollBar
GetAsyncKeyState
UpdateLayeredWindow
IsMenu
UnionRect
SetWindowRgn
DrawFrameControl
DrawEdge
DrawStateW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
UnregisterClassW
PostThreadMessageW
CharUpperW
DeleteMenu
LoadCursorW
GetSysColorBrush
RealChildWindowFromPoint
SystemParametersInfoW
GetMenuItemInfoW
DestroyMenu
GetIconInfo
DrawIconEx
CopyImage
LoadImageW
DestroyIcon
IsRectEmpty
OffsetRect
SetRectEmpty
DrawFocusRect
WindowFromPoint
GetNextDlgGroupItem
MapVirtualKeyW
GetKeyNameTextW
SendDlgItemMessageA
IntersectRect
InflateRect
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuState
GetMenuStringW
GetDesktopWindow
GetNextDlgTabItem
InsertMenuItemW
CreateDialogIndirectParamW
WaitMessage
RegisterClipboardFormatW
GetWindowThreadProcessId
SetCursor
ShowOwnedPopups
GetCursorPos
GetActiveWindow
GetMessageW
IsDialogMessageW
SetWindowTextW
IsWindowEnabled
CheckDlgButton
SetDlgItemTextW
MoveWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongPtrW
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowLongW
GetWindowLongW
PtInRect
EqualRect
SetWindowPlacement
GetWindowPlacement
SetWindowPos
EnableWindow
GetProcessWindowStation
CopyRect
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
SetActiveWindow
UpdateWindow
TrackPopupMenu
GetMenuItemCount
GetMenuItemID
SetMenu
GetMenu
GetCapture
GetKeyState
GetDlgCtrlID
GetDlgItem
IsWindowVisible
EndDeferWindowPos
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
IsCharLowerW
MapVirtualKeyExW
CharUpperBuffW
FrameRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsClipboardFormatAvailable
GetUpdateRect
SubtractRect
CreateMenu
DeferWindowPos
BeginDeferWindowPos
MapDialogRect
DestroyCursor
GetWindowRgn
EndDialog
DestroyWindow
IsChild
IsWindow
CreateWindowExW
GetClassInfoExW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
RegisterWindowMessageW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetUserObjectInformationW
TranslateMessage
DispatchMessageW
ShowWindowAsync
GetForegroundWindow
BeginPaint
EndPaint
EnableMenuItem
GetClientRect
SendMessageW
SetForegroundWindow
RegisterClassW
GetClassInfoW
ShowWindow
FindWindowW
PostMessageW
PostQuitMessage
CallWindowProcW
AnimateWindow
IsIconic
SetFocus
GetFocus
SetCapture
ReleaseCapture
GetSystemMetrics
DrawIcon
DrawTextW
GetDC
ReleaseDC
InvalidateRect
RedrawWindow
GetWindowRect
ClientToScreen
GetWindowLongPtrA
LoadIconW
SetTimer
KillTimer
SetRect
MessageBoxW
LoadMenuW
GetSubMenu
GetParent
DrawTextExW
GrayStringW
TabbedTextOutW
GetWindowDC
ScreenToClient
GetSysColor
FillRect
CheckMenuItem

gdi32

SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CopyMetaFileW
CreateDCW
CombineRgn
CreateFontIndirectW
CreateRectRgnIndirect
PatBlt
SetRectRgn
DPtoLP
SaveDC
GetTextMetricsW
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
RealizePalette
CreateEllipticRgn
Ellipse
GetBkColor
GetTextColor
CreatePolygonRgn
Polygon
Polyline
Rectangle
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
CreateRoundRectRgn
GetRgnBox
OffsetRgn
EnumFontFamiliesExW
RoundRect
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
SetPixelV
GetTextFaceW
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateBitmap
BitBlt
SetPixel
CreateRectRgn
GetObjectW
SetDIBColorTable
CreateDIBSection
StretchBlt
SelectObject
GetStockObject
GetDeviceCaps
DeleteObject
DeleteDC
CreateSolidBrush
GetTextExtentPoint32W
CreateCompatibleDC
CreateFontW

msimg32

TransparentBlt
AlphaBlend

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegDeleteKeyW
FreeSid
CheckTokenMembership
RegisterEventSourceW
ReportEventW
DeregisterEventSource
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
AllocateAndInitializeSid
RegCreateKeyExW
GetUserNameA
CryptDecrypt
CryptEncrypt
CryptImportKey
CryptGenRandom
CryptSetKeyParam
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW
RegQueryValueExA
RegOpenKeyExA

shell32

SHAppBarMessage
ShellExecuteA
ShellExecuteW
CommandLineToArgvW
SHGetFolderPathW
ShellExecuteExW
SHBrowseForFolderW
DragFinish
DragQueryFileW
SHGetKnownFolderPath
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetFileInfoW

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionW
PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathRemoveFileSpecW
PathFileExistsW
StrFormatKBSizeW

uxtheme

DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
GetWindowTheme
GetThemeSysColor
IsAppThemed
GetCurrentThemeName
GetThemeColor
DrawThemeText
CloseThemeData
OpenThemeData
DrawThemeParentBackground
SetWindowTheme

ole32

RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
DoDragDrop
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
CoTaskMemFree
CoUninitialize
CoInitializeEx
CoCreateInstance
CreateStreamOnHGlobal
CoInitializeSecurity
ReleaseStgMedium
OleDuplicateData
CoTaskMemAlloc
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoCreateGuid
CoSetProxyBlanket
CoInitialize

oleaut32

VariantInit
VariantClear
VariantChangeType
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringLen
VarBstrFromDate
SysAllocStringByteLen
SysStringLen
SysAllocString
SysFreeString

oledlg

OleUIBusyW

ws2_32

WSASetLastError
WSACleanup
WSAStartup

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipGetImageGraphicsContext
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipCloneImage
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc

d3d9

Direct3DCreate9

steam_api64

SteamAPI_RunCallbacks
SteamApps
SteamUtils
SteamAPI_RegisterCallback
SteamUser
SteamAPI_Init
SteamAPI_RestartAppIfNecessary
SteamAPI_Shutdown
SteamAPI_UnregisterCallback
SteamFriends

wininet

HttpSendRequestW
InternetCloseHandle
InternetConnectW
InternetReadFileExW
InternetTimeToSystemTimeA
HttpQueryInfoW
InternetGetLastResponseInfoA
InternetGetConnectedState
InternetOpenW
HttpAddRequestHeadersW
HttpOpenRequestW
InternetSetStatusCallbackW
InternetSetOptionW

crypt32

CertFindCertificateInStore
CertGetNameStringW
CryptMsgGetParam
CryptQueryObject

wintrust

WinVerifyTrust

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

Exports

Exports

OPENSSL_Applink

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 405KB - Virtual size: 557KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 483KB - Virtual size: 483KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 12.7MB - Virtual size: 12.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e6d43f0bfc7752a24a151f58168d685e

Code Sign

4c:17:93:4dCertificate

Extended Key Usages

Key Usages

38:63:e2:e2Certificate

Key Usages

4c:0e:8c:3aCertificate

Key Usages

4c:17:77:2eCertificate

Extended Key Usages

Key Usages

c8:17:97:09:0e:9a:fc:24:55:f5:69:a4:73:7d:54:a2:45:06:38:d2Signer

Headers

DLL Characteristics

File Characteristics

Imports

version

xinput1_3

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

ws2_32

gdiplus

d3d9

steam_api64

wininet

crypt32

wintrust

oleacc

imm32

winmm

Exports

Exports

Sections

.text Size: 3.1MB - Virtual size: 3.1MB

.rdata Size: 1.1MB - Virtual size: 1.1MB

.data Size: 405KB - Virtual size: 557KB

.pdata Size: 136KB - Virtual size: 136KB

.tls Size: 512B - Virtual size: 512B

.rsrc Size: 483KB - Virtual size: 483KB

.reloc Size: 100KB - Virtual size: 100KB

.text Size: 12.7MB - Virtual size: 12.7MB

4c:17:93:4d
Certificate

38:63:e2:e2
Certificate

4c:0e:8c:3a
Certificate

4c:17:77:2e
Certificate

c8:17:97:09:0e:9a:fc:24:55:f5:69:a4:73:7d:54:a2:45:06:38:d2
Signer

.text
Size: 3.1MB - Virtual size: 3.1MB

.rdata
Size: 1.1MB - Virtual size: 1.1MB

.data
Size: 405KB - Virtual size: 557KB

.pdata
Size: 136KB - Virtual size: 136KB

.tls
Size: 512B - Virtual size: 512B

.rsrc
Size: 483KB - Virtual size: 483KB

.reloc
Size: 100KB - Virtual size: 100KB

.text
Size: 12.7MB - Virtual size: 12.7MB