Rockstar-Games-Launcher[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Rockstar-Games-Launcher.exe
Size 106.9MB
Sample260714-2vlbtsht3x
SHA256 c70131cb0427d146c9489297822e99ad87d4d5e141fd999d19f00975ab1a31f2
MD5 9778938d21e92e6599a97066a6b043f5
SHA1 c693952af33ba9a7a7ce4c118528e0f7f6979130
SHA512 e6bfc5695958c2b7ec6c31ed8300a370589b1841f6b0a0caee632d45f269ce62bb84f218cb77440fbedeb95424ba4c553159f1b8ca0d8068e0d68b0d32ac9258
SSDEEP 1572864:51yAvziZjlxwZRtpHgMKgy63px56Bu61eGv1pjg6pXpttD7y0/JUTAr5VBJ/:5PXrpAMKt6p6I61H5g6fDe0/Js05VBJ/
TLSH
T1BE38E00261AC1094F86791B9DA6EC652EB713C450BF1A2CB1590BD5B3F3FAF4B97A310
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

Rockstar-Games-Launcher.exe

.exe 106.9MB

Rockstar-Games-Launcher.exe

IMPHASH 9061a48b288f496fb941424ef9ad4abc
SHA256 c70131cb0427d146c9489297822e99ad87d4d5e141fd999d19f00975ab1a31f2
MD5 9778938d21e92e6599a97066a6b043f5
SHA1 c693952af33ba9a7a7ce4c118528e0f7f6979130
SHA512 e6bfc5695958c2b7ec6c31ed8300a370589b1841f6b0a0caee632d45f269ce62bb84f218cb77440fbedeb95424ba4c553159f1b8ca0d8068e0d68b0d32ac9258
SSDEEP 1572864:51yAvziZjlxwZRtpHgMKgy63px56Bu61eGv1pjg6pXpttD7y0/JUTAr5VBJ/:5PXrpAMKt6p6I61H5g6fDe0/Js05VBJ/
TLSH
T1BE38E00261AC1094F86791B9DA6EC652EB713C450BF1A2CB1590BD5B3F3FAF4B97A310
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

29:93:16:68:c6:e0:44:f8:d4:7d:9e:41:0c:00:6e:c6:0f:f7:b6:19:ae:21:eb:78:89:5b:c2:45:4f:aa:5c:61

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Rockstar Games\, Inc.,OU=Rockstar Partners,O=Rockstar Games\, Inc.,L=New York,ST=New York,C=US

Chains

Jul 9, 2026

CN=Rockstar Games\, Inc.,OU=Rockstar Partners,O=Rockstar Games\, Inc.,L=New York,ST=New York,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Rockstar Games\, Inc.,OU=Rockstar Partners,O=Rockstar Games\, Inc.,L=New York,ST=New York,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Rockstar Games\, Inc.,OU=Rockstar Partners,O=Rockstar Games\, Inc.,L=New York,ST=New York,C=US

Serial Number

05:c1:ee:f7:52:5c:83:94:28:87:4f:0c:80:df:71:be

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 1, 2025 - Aug 2, 2028

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

422960

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

RGLInstaller.pdb

kernel32

CreateDirectoryW CreateFileW DeleteFileW FindClose FindFirstFileW FindNextFileW GetDiskFreeSpaceExW GetFileAttributesW RemoveDirectoryW WriteFile GetTempPathW DecodePointer CloseHandle RaiseException GetLastError InitializeCriticalSectionEx DeleteCriticalSection ReleaseMutex WaitForSingleObject CreateMutexW Sleep TerminateProcess GetExitCodeProcess OpenProcess GetModuleFileNameW GetModuleHandleW LoadResource LockResource SizeofResource FindResourceW GlobalAlloc VerifyVersionInfoW GlobalLock LocalAlloc GetProcAddress MulDiv SetDllDirectoryW CreateToolhelp32Snapshot Process32FirstW Process32NextW K32GetModuleFileNameExW SetThreadLocale SetThreadUILanguage InitializeCriticalSection EnterCriticalSection LeaveCriticalSection GetFileSizeEx SetFilePointer SetLastError CreateEventW GetCurrentProcessId GetCurrentThreadId GetLocalTime UnregisterWaitEx FormatMessageA MoveFileW RegisterWaitForSingleObject MultiByteToWideChar WideCharToMultiByte GetCurrentDirectoryW LoadLibraryW SetSearchPathMode GetUserDefaultUILanguage FormatMessageW GlobalUnlock LoadLibraryExW RtlUnwind HeapSize GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW FreeLibrary LocalFree VerSetConditionMask GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindFirstFileExW GetTimeZoneInformation HeapReAlloc SetStdHandle GetFullPathNameW GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA GetDiskFreeSpaceExA GetDriveTypeA GetLogicalDrives GlobalMemoryStatusEx GetVersionExW GetPhysicallyInstalledSystemMemory GetModuleHandleA GetVolumePathNameA CreateProcessW QueryFullProcessImageNameW GetFileAttributesExW ReadFile SetEndOfFile SetFileAttributesW SetFilePointerEx GetSystemTime SystemTimeToFileTime RtlCaptureContext SetUnhandledExceptionFilter ReleaseSemaphore CreateSemaphoreW GetCurrentProcess CreateThread GetProcessId VirtualQueryEx FileTimeToLocalFileTime FileTimeToSystemTime IsDebuggerPresent OutputDebugStringA OutputDebugStringW GetFinalPathNameByHandleW SetNamedPipeHandleState TransactNamedPipe WaitNamedPipeW SetEvent ResetEvent WaitForMultipleObjects RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead GetStringTypeW QueryPerformanceFrequency WaitForSingleObjectEx GetExitCodeThread ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive EncodePointer LCMapStringEx WakeAllConditionVariable GetCPInfo RtlUnwindEx RtlPcToFileHeader InterlockedPushEntrySList InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetDriveTypeW GetFileInformationByHandle GetFileType PeekNamedPipe SystemTimeToTzSpecificLocalTime SetFileTime TzSpecificLocalTimeToSystemTime ExitProcess GetStdHandle WriteConsoleW HeapFree FlushFileBuffers GetConsoleOutputCP GetConsoleMode HeapAlloc FlsAlloc FlsGetValue FlsSetValue FlsFree GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadConsoleW

comdlg32

PrintDlgW

oleaut32

SetErrorInfo SysStringLen SysAllocString SysFreeString VariantInit VariantClear GetErrorInfo

comctl32

ord410 ord413

wininet

InternetReadFile InternetCrackUrlW InternetCloseHandle InternetConnectW InternetQueryDataAvailable InternetSetOptionW HttpOpenRequestW HttpAddRequestHeadersW HttpSendRequestW HttpQueryInfoW InternetOpenW

Sharing

General

Malware Config

Signatures

File Explorer

Rockstar-Games-Launcher.exe

kernel32

comdlg32

oleaut32

comctl32

wininet

generic