Static task
static1
Behavioral task
behavioral1
Sample
GTA_MultiHack.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
GTA_MultiHack.exe
Resource
win10v2004-20230915-en
General
-
Target
GTA_MultiHack.exe
-
Size
710KB
-
MD5
eb45b3f153b7ca6833de57bee0411f15
-
SHA1
ba22558a58915a631f43349191f562e1b1282670
-
SHA256
dee2f7d2c36ef628560285109964ae5bca05919de622ae0d96f4c1d7f5a8575f
-
SHA512
2742c24de907282ddc1d84ca69e396901e68a718427a4f263edc545f22b0713fd5c72b74d46148903f5a36153a2735000daeb315e4cdb62687d4d4d5339fd37c
-
SSDEEP
12288:5rXDCtk6lRbwuxhHyHrTYPSVCeyNT1qs7mE1e:5rR6lRCTYPSVz+1Fmq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource GTA_MultiHack.exe
Files
-
GTA_MultiHack.exe.exe windows:6 windows x86
ea581ddaab95a5822f83fd055f51f51f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle
FreeLibraryAndExitThread
CreateThread
QueryPerformanceCounter
QueryPerformanceFrequency
GlobalUnlock
GlobalLock
GlobalAlloc
ReadProcessMemory
Sleep
OpenProcess
GetCurrentThreadId
SetUnhandledExceptionFilter
WriteProcessMemory
user32
CloseClipboard
ShowWindowAsync
SetWindowPos
DispatchMessageA
SetForegroundWindow
LoadCursorA
DestroyWindow
DestroyCursor
DestroyIcon
GetWindowTextA
MoveWindow
DefWindowProcA
CreateWindowExA
SetLayeredWindowAttributes
TranslateMessage
SendMessageA
LoadIconA
PeekMessageA
GetWindowRect
BringWindowToTop
GetForegroundWindow
AttachThreadInput
GetWindowLongA
SetWindowLongA
GetAsyncKeyState
ShowWindow
UnregisterClassA
PostQuitMessage
FindWindowA
RegisterClassExA
GetKeyState
GetCapture
ClientToScreen
SetCapture
EmptyClipboard
GetClipboardData
SetClipboardData
GetActiveWindow
GetWindowThreadProcessId
SetCursorPos
ReleaseCapture
GetClientRect
SetCursor
OpenClipboard
gdi32
CreateSolidBrush
DeleteObject
advapi32
DeleteService
CloseServiceHandle
OpenServiceA
StartServiceA
ControlService
CreateServiceA
OpenSCManagerA
oleaut32
VariantClear
msvcp140
?setf@ios_base@std@@QAEHHH@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
_Query_perf_frequency
?_Xlength_error@std@@YAXPBD@Z
_Thrd_sleep
_Query_perf_counter
_Xtime_get_ticks
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
dwmapi
DwmExtendFrameIntoClientArea
d3d9
Direct3DCreate9Ex
d3dx9_43
D3DXCreateFontA
D3DXCreateLine
imm32
ImmGetContext
ImmSetCompositionWindow
vcruntime140
__current_exception
__current_exception_context
_CxxThrowException
_except_handler4_common
strstr
memcmp
__std_exception_copy
memcpy
memmove
__std_exception_destroy
__CxxFrameHandler3
memset
strchr
api-ms-win-crt-math-l1-1-0
pow
sqrt
fabs
sin
cos
ceil
floor
__setusermatherr
fmod
api-ms-win-crt-convert-l1-1-0
strtoul
api-ms-win-crt-string-l1-1-0
strcmp
strncpy
isprint
strcpy
strlen
api-ms-win-crt-runtime-l1-1-0
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
_seh_filter_exe
exit
_get_narrow_winmain_command_line
_initterm
_initterm_e
_exit
_invalid_parameter_noinfo_noreturn
_c_exit
_register_thread_local_exe_atexit_callback
_wassert
terminate
_set_app_type
_controlfp_s
api-ms-win-crt-stdio-l1-1-0
_set_fmode
fread
__p__commode
ftell
__stdio_common_vsprintf
__acrt_iob_func
__stdio_common_vsscanf
_wfopen
fwrite
fflush
fclose
fseek
__stdio_common_vfprintf
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-heap-l1-1-0
malloc
free
_set_new_mode
_callnewh
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 239KB - Virtual size: 239KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 362KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ