Static task
static1
Behavioral task
behavioral1
Sample
FIVEM OSINT.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
FIVEM OSINT.exe
Resource
win10v2004-20240508-en
General
-
Target
FIVEM OSINT.exe
-
Size
367KB
-
MD5
d60d644007cbaa4ff9e5d2c0f64ccfae
-
SHA1
bc4b268e974ae116848ccf968bf4cbf127a143c5
-
SHA256
91efb4af569d3ace768a859262fb37f0b7ba2fcf3f4ae6609689631379f09dbc
-
SHA512
e251282f1a928676f80061cbd833245c931ea27a6b9ebd66055cccc462be20964818910c3436e369a54bfddb8795b23e580160f46525bce02db96cd38d1629fa
-
SSDEEP
6144:ELUvazRZVLlfh7rZthO+JjkuHEEAt/wz/60baxHUXQk1:EwvaFZdfrXg+JwuKt/S/605Xl1
Malware Config
Signatures
Files
-
FIVEM OSINT.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
39:93:65:d4:db:d9:b4:97:4f:64:b1:4c:ee:f9:04:e6Certificate
IssuerCN=DESKTOP-36KTTVI\\mlawaNot Before07/04/2024, 10:11Not After07/04/2025, 16:11SubjectCN=DESKTOP-36KTTVI\\mlawaa3:27:76:37:18:78:52:9f:69:dc:e0:3b:2e:88:e0:d5:6f:22:ab:fa:99:17:77:0e:1e:da:5f:31:44:ab:5e:18Signer
Actual PE Digesta3:27:76:37:18:78:52:9f:69:dc:e0:3b:2e:88:e0:d5:6f:22:ab:fa:99:17:77:0e:1e:da:5f:31:44:ab:5e:18Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\Users\mlawa\Desktop\FiveM-Server-Lookup-main - Copy\FiveM-Server-Lookup-main\obj\Debug\FiveM Server Lookup.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 360KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ