Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
GTAIV.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
GTAIV.exe
Resource
win10v2004-20231222-en
Target
GTAIV.exe
Size
12.8MB
MD5
9fa1c2a3f2932d46538bc14e715cfccc
SHA1
66d8cedfa46b5a0b9ae7b7c6a9651b2a6b3436d3
SHA256
8506977df430084f0b62176019b3dd57471e43957e50be7001d2d9d045ea18cc
SHA512
204c001ef910823626f73a2e35a16da146681aa8d990c849242aa136b96a42aee37e0d064a212d99106846f658bb648ea09f9dc84756ea7f51e154fa40d8d5d5
SSDEEP
196608:AXtzkFJx+iebk6ABmtxrXr+y+Wq/VXOvoX3:pFJH7mDrm9ea
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
wsprintfA
PostMessageA
CharLowerBuffA
ReleaseCapture
GetParent
GetMessageA
LoadIconA
MoveWindow
RegisterClassW
CreateWindowExW
SetWindowTextA
UpdateWindow
GetWindowInfo
GetDesktopWindow
DefWindowProcW
PeekMessageA
TranslateMessage
DispatchMessageA
LoadCursorA
RegisterClassA
SetRect
MessageBoxA
EnumDisplayDevicesA
DestroyWindow
UnregisterClassA
DefWindowProcA
AdjustWindowRect
GetSystemMetrics
GetClientRect
GetWindowRect
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
GetDC
ReleaseDC
GetKeyboardState
GetKeyboardLayoutNameA
LoadKeyboardLayoutA
IsWindow
GetWindowTextA
IsWindowVisible
IsWindowUnicode
GetTitleBarInfo
GetKeyboardLayout
MapVirtualKeyExA
ToAsciiEx
SetWindowLongA
SetWindowPos
GetForegroundWindow
GetWindow
SetFocus
EnableWindow
ShowCursor
IsWindowEnabled
GetActiveWindow
GetTopWindow
SetForegroundWindow
SetCapture
GetCapture
GetFocus
ShowWindow
SendMessageA
SystemParametersInfoA
FindWindowA
BringWindowToTop
SetWindowPlacement
SetActiveWindow
GetWindowPlacement
MessageBoxW
GetPerformanceInfo
EnumProcessModules
GetModuleFileNameExA
EnumProcesses
CryptUnprotectData
CryptProtectData
CertFreeCertificateContext
CertCloseStore
CryptMsgClose
CertGetNameStringA
CryptQueryObject
CryptMsgGetParam
CertFindCertificateInStore
HttpAddRequestHeadersA
HttpSendRequestExA
HttpEndRequestA
InternetCrackUrlA
InternetCheckConnectionA
InternetGetConnectedState
InternetWriteFile
InternetReadFile
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
InternetCloseHandle
InternetConnectA
InternetOpenA
_BinkSetMemory@8
_BinkGetError@0
_BinkClose@4
_BinkGetSummary@8
_BinkSetVolume@12
_BinkSetSoundSystem@8
_BinkRegisterFrameBuffers@8
_BinkNextFrame@4
_BinkOpenDirectSound@4
_BinkShouldSkip@4
_BinkWait@4
_BinkGoto@12
_BinkGetFrameBuffersInfo@8
_BinkGetKeyFrame@12
_BinkOpen@8
_BinkPause@8
_BinkDoFrame@4
WinVerifyTrust
ord5329
ord5317
ord5333
ord5318
ord5327
ord5300
ord5323
ord5326
ord69
ord5336
ord5322
ord5325
ord5328
ord5316
ord20
ord24
ord7
ord5332
ord57
ord5252
ord72
ord70
ord5305
ord5260
ord5215
ord5214
ord5312
ord5278
ord5280
ord5319
ord5324
ord5276
ord5277
ord5286
ord5281
ord5284
ord75
ord66
ord63
ord5254
ord5310
ord5311
ord5024
ord5315
ord5292
ord5022
ord1082
ord5262
ord5265
ord5261
ord5263
ord5030
ord51
ord1
ord5017
ord5016
ord5002
ord5007
ord5001
ord5005
ord5003
ord651
ord5270
ord27
ord15
ord52
ord5345
ord5344
ord5264
ord5314
ord5008
ord5335
ord5251
ord38
ord39
ord1083
ord6
ord4
ord12
ord3
ord22
ord73
ord58
ord5
ord5019
ord5018
ord5000
ord84
ord5331
ord5038
ord5034
ord5036
ord5037
ord5337
ord5035
ord5267
ord14
ord18
ord13
ord11
ord5295
ord5303
ord5294
ord26
ord9
ord5330
ord2
ord5256
Direct3DCreate9
DirectInput8Create
ord2
ord9
ord11
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
closesocket
socket
send
inet_ntoa
ntohs
gethostbyname
connect
recv
htons
htonl
inet_addr
ntohl
recvfrom
__WSAFDIsSet
select
gethostname
WSACleanup
getsockname
WSAGetLastError
sendto
shutdown
PathAppendA
PathFileExistsA
PathStripPathW
WMCreateSyncReader
WMCreateWriter
WMCreateProfileManager
WMCreateReader
WMCreateWriterFileSink
timeGetTime
waveOutSetVolume
waveOutReset
waveOutWrite
waveOutPrepareHeader
waveOutOpen
waveOutClose
timeEndPeriod
timeBeginPeriod
CallNtPowerInformation
GetCurrentThread
LocalAlloc
SetThreadAffinityMask
CloseHandle
OpenProcess
CreateFileMappingA
GetSystemDirectoryA
GlobalAlloc
GlobalFree
GetProcessHeap
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
VirtualQuery
VirtualProtect
SetStdHandle
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
RtlUnwind
GetConsoleMode
GetConsoleCP
LCMapStringW
LCMapStringA
RaiseException
GetModuleHandleW
HeapCreate
HeapDestroy
GetStartupInfoA
GetWindowsDirectoryA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
OutputDebugStringA
HeapSize
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetOEMCP
GetACP
GetCPInfo
GetFileType
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapFree
HeapAlloc
HeapReAlloc
GetFullPathNameA
GetCurrentDirectoryA
GetDriveTypeA
GetTimeZoneInformation
GetSystemTimeAsFileTime
ExitProcess
TerminateThread
DuplicateHandle
OpenFile
WideCharToMultiByte
LoadLibraryW
RemoveDirectoryA
SetEndOfFile
SetFilePointer
GetFileSizeEx
CreateDirectoryA
SetFileTime
FormatMessageA
ReadFile
FileTimeToSystemTime
MoveFileA
FileTimeToLocalFileTime
SetFileAttributesA
WaitForMultipleObjects
InitializeCriticalSection
TryEnterCriticalSection
InterlockedCompareExchange
WriteFile
CreateSemaphoreA
SetThreadPriorityBoost
CreateThread
ResumeThread
ReleaseSemaphore
ReleaseMutex
GetCurrentThreadId
GetDateFormatA
GetTimeFormatA
CreateFileA
CreateMutexA
GetUserDefaultLangID
VirtualFree
VirtualAlloc
VirtualQueryEx
QueryPerformanceCounter
QueryPerformanceFrequency
InterlockedDecrement
ResetEvent
InterlockedIncrement
SetEvent
GetModuleFileNameA
ExpandEnvironmentStringsA
GetCommandLineA
FreeLibrary
GetVersionExA
LocalFree
WaitForSingleObject
SetHandleCount
lstrcpyA
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
Sleep
OpenThread
GetThreadPriority
SetThreadPriority
GlobalMemoryStatus
OpenEventA
lstrcatA
FindFirstFileA
GetFileAttributesA
FindNextFileA
FindClose
lstrlenA
MultiByteToWideChar
FoldStringW
GetLocalTime
LoadLibraryA
GetProcAddress
InterlockedExchange
InterlockedExchangeAdd
CopyFileA
GetDiskFreeSpaceExA
GetModuleHandleA
GetModuleFileNameW
SetLastError
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
HeapSetInformation
GetProcessAffinityMask
DeleteFileA
GetTickCount
GetUserDefaultUILanguage
GetLastError
CreateEventA
GlobalMemoryStatusEx
GetSystemTimes
GetSystemInfo
TerminateProcess
CreateToolhelp32Snapshot
GetCurrentProcessId
CreateProcessA
Process32Next
Process32First
GetCurrentProcess
CreateDCA
ExtEscape
DeleteDC
GetDeviceCaps
GetStockObject
RegCloseKey
CryptReleaseContext
CryptHashData
RegEnumKeyA
RegOpenKeyA
RegOpenKeyExA
CryptCreateHash
CryptGetHashParam
RegQueryValueExA
CryptDestroyHash
CryptAcquireContextA
SHGetFolderPathA
SHCreateDirectoryExA
ShellExecuteA
CoUninitialize
CoSetProxyBlanket
CoCreateInstance
CoInitializeEx
CoInitialize
CLSIDFromString
OleDraw
OleUninitialize
OleInitialize
VariantInit
SysFreeString
VariantClear
SysAllocString
SafeArrayGetVartype
SafeArrayCopy
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreateVector
ord42
ord41
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ