Fivem_Blue[.]exe | Triage

Sharing

General

Target

Fivem_Blue.exe
Size

24KB
MD5

872f3fec86fab1e44a2e79e349c33e43
SHA1

d8e82c27798910627c425de016168f2dfc099c7f
SHA256

c3b1b059e8e114264c42bbad4abb1d591479519f299ebf30dd9af75e82d50c79
SHA512

60d0a12d04acbd7e755757795a89a6ccbb4ee6ece5e50106173fb22380ba4aba35e74c62ce703d39426ee8ff0477c864bf3b4763268264b98944199da7786d18
SSDEEP

384:gYEfZuvXGpAI4MUVT5U/FCAlB4QHcWov9DmLP+WqydNMRq4PzD6g8g66FgCPrkkl:h2Aqj6ydNMz6LrJzvt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Fivem_Blue.exe

Files

Fivem_Blue.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\maxki\source\repos\Fivem Blue\Fivem Blue\obj\x64\Release\Fivem Blue.pdb

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ