ArchiveFix gtaworldtr[.]rar | Triage

Sharing

General

Target

ArchiveFix gtaworldtr.rar
Size

902KB
MD5

76c30c41fd787771e85a9f522843bf21
SHA1

647022535e3008c2e1597ddfd19658fdf01b905a
SHA256

bbf572988bcbcc20068998e6e5f7a9c0f0903a8899b21ea0b98f07ed8fc5cea0
SHA512

affd99f29cc17def8eb3245354a7e00adbaf84ce28adb9308b19319ef4dcbcc08ef16c5c76eac935ce65720bda96c48f6b33002102ad953ae948048b2cda47bd
SSDEEP

24576:UK93TFJJkqIud1iZ+CwtghABF7IMU4ax80FwAAAAAAAusLAW:UK93TFiufo+Cwtg2BF7S4ax8HAAAAAAI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ArchiveFix/ArchiveFix.exe

Files

ArchiveFix gtaworldtr.rar
.rar
ArchiveFix/ArchiveFix.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

L:\tools\gta-toolkit\Tools\ArchiveFix\obj\Release\ArchiveFix.pdb

Sections

.text
Size: 302KB - Virtual size: 302KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ArchiveFix/NOTICES.txt
ArchiveFix/gtav_aes_key.dat
ArchiveFix/gtav_hash_lut.dat
ArchiveFix/gtav_ng_decrypt_tables.dat
ArchiveFix/gtav_ng_encrypt_luts.dat
ArchiveFix/gtav_ng_encrypt_tables.dat
ArchiveFix/gtav_ng_key.dat