fb249c-TrainerV.rar
- SHA256 01460326f1a8e1bfb8738ae716d5825174aaac1ecead3d17c9d966d6e52be3b6
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
TrainerV.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
TrainerV.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
readme.docx
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
readme.docx
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral5
Sample
reference.vbs
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
reference.vbs
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
10 signatures
150 seconds
General
- Target fb249c-TrainerV.rar
- Size 4.3MB
- Sample260717-3fkbnacz21
- SHA256 01460326f1a8e1bfb8738ae716d5825174aaac1ecead3d17c9d966d6e52be3b6
- MD5 5717eb306913f9c093dc466f39e14002
- SHA1 ab620d8738846dfbcf88cb4416eab4dbd7862a90
- SHA512 600a584e5c3f695926e9e7faaf955f906b366d06270671c8897eca5467a3949c40c7f272acecea03ee432dd754152735f70569e99ca3c5000f21e8d116f6c5f1
- SSDEEP 98304:LNZ6zfQUbH+Agy7AEzN+1gOuWEbeIB3Wu7+XNoprKqmTLs:P6zfQ2eAJRVPb/B377+9CrVmTLs
- TLSH T12226330683D21E76F0F30F7848568F3B1C0E9E34A4A919349D299819ADF33794D6EB9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/TrainerV.asi
File Explorer
-
fb249c-TrainerV.rar.rar 4.3MB
-
TrainerV.asi.dll 25.5MB
-
changes.txt124KB
-
readme.docx.docx 40KB
-
reference.txt.vbs 48KB
-
trainerv.ini121KB
TrainerV.asi
- IMPHASH a814880ef9607312fefb462c88568903
- SHA256 48c6be95a2716fbfbf7ae350257cdf6dcc757fb5621c8b7f06977c7dc54c7c2b
- MD5 dee40ef61f439896eba5fc39363e3281
- SHA1 4c0386cbf5aab581ef7d5cb7b85c25b89a740f45
- SHA512 78622f9429a315785ac2ec2e5e5cfee73b939b2098accd31775889302e0c12f07f1e3d6baf90cae1a075289885bccee923a8529801fb8e04ed2778deb96b68d9
- SSDEEP 196608:lOVINFqwlulMSFpgV9vVRNAEE7dK8qjnmsllAimZ7pvULy:lUQulMSF8NXKIlAimZ7pvU
- TLSH T11E475B7DFC268985C47BF8B0E87F2E11CF693976C5A15719851082068FCA3E942E74EE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
6
Entry point
6761356
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\admjgent\Documents\Visual Studio 2022\Projects\TrainerV\x64\Release\TrainerV.pdb
kernel32
VirtualProtect
GetCurrentProcess
GetModuleHandleA
K32GetModuleInformation
GetTickCount64
GetPrivateProfileIntA
WritePrivateProfileStringA
VirtualAlloc
GetSystemInfo
VirtualQuery
GetTickCount
CreateThread
GetModuleFileNameA
Sleep
GetPrivateProfileStringA
FindFirstFileA
FindNextFileA
FindClose
GetLastError
GetLocalTime
GetEnvironmentVariableA
GetFileAttributesA
LoadLibraryA
DeleteFileA
GetProcAddress
FreeLibrary
CreateDirectoryA
CopyFileA
SetEndOfFile
WriteConsoleW
HeapSize
CreateFileW
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
HeapReAlloc
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
GetStringTypeW
GetCPInfo
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetDriveTypeW
GetFullPathNameW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
CloseHandle
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadFile
ReadConsoleW
GetCurrentDirectoryW
GetTimeZoneInformation
DeleteFileW
RtlUnwind
user32
GetAsyncKeyState
shlwapi
PathFindFileNameA
scripthookv
?scriptRegister@@YAXPEAUHINSTANCE__@@P6AXXZ@Z
?keyboardHandlerRegister@@YAXP6AXKGEHHHH@Z@Z
?keyboardHandlerUnregister@@YAXP6AXKGEHHHH@Z@Z
?scriptUnregister@@YAXP6AXXZ@Z
?getGlobalPtr@@YAPEA_KH@Z
?worldGetAllVehicles@@YAHPEAHH@Z
?scriptWait@@YAXK@Z
?nativePush64@@YAX_K@Z
?nativeCall@@YAPEA_KXZ
?nativeInit@@YAX_K@Z
?worldGetAllObjects@@YAHPEAHH@Z
?worldGetAllPeds@@YAHPEAHH@Z
?getGameVersion@@YA?AW4eGameVersion@@XZ
?Menu1@@3_NA
Casinomod
cleanemitter
cleanemitterVMP
disablempmap
Name
.text
Size
6.6MB
Virtual Size
6.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
15.9MB
Virtual Size
15.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1.4MB
Virtual Size
3.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
45KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=183, id=261, version=33145,
count=20, id=260, version=33145,
count=15, id=259, version=33145,
count=10, id=259, version=35207,
count=14, id=260, version=35207,
count=2, id=221, productName=VS2013 UPD4 build 31101, version=31101,
count=80, id=261, version=35207,
count=7, id=257, version=33145,
count=146, id=1, productName=Unmarked objects,
count=38, id=265, version=35225,
count=1, id=256, version=35225,
count=1, id=255, version=35225,
count=1, id=151,
count=1, id=258, version=35225,
changes.txt
- SHA256 8c0b2a603607d38d8df390029fc11cc80bbdd9236ef0e2475266610aa7e1fe42
- MD5 60280875f69803f7827a640f9c71a38e
- SHA1 fd38d3a954643a4cd173577f470464f464184ce6
- SHA512 4e84c7ca0b05b89a7c936370b292adb382b58faede534555e49da0e3389a42d3427e0dba6a11a5063f9167c419167d02c17500c511f12d6565385b15508a57be
- SSDEEP 1536:JNzm0j3YGa6LaYZ2b4J7qVb1kC/8ZKxPvhxvS5uINXyBAjeScQcNSB:xIGnLF2b4Kb1kXavhxwXPCQcN0
- TLSH T15DC3956F374BF37244E38192630E70A69B2D80E9A36B166131AD919C234106D77BF6FD
- MD5 SHA1 SHA512 SSDEEP TLSH
readme.docx
- SHA256 2f8fb817ff198f06ff6fe01dc6b17adc6f8bab827045d1e9c25817f3d35d5ec0
- MD5 3eb061401614dfce204d0fe9ad88efd6
- SHA1 380611bcbe03e68aadba144f20a84c585eaf1965
- SHA512 f2ae2f8a80ca8b69c8e80138f07cf6158614f02e0321a7bbae924cb1317e2690fdb37c088dee9f850dbe259c7f9249d3a7595af91feb51230591bd4d2b45b4db
- SSDEEP 768:sKrW7IxgL2qcadQDTWjpk6H0uH56t6QB+48G4XFurmJZd0:XWYK2qcad4KjpkmH5OxBD4ArmZ0
- TLSH T18C13F124DEC4FC81C4A69A3C13284A2A78889782D6580FD13F91E39D9B54F63A71CFDD
- MD5 SHA1 SHA512 SSDEEP TLSH
reference.txt
- SHA256 f6072fc668e9fec6220e82de8731b690e6bc176700b0ccc8d4b8e08ddc1359f7
- MD5 a335b04ae4ad4b88b2bec4684823625f
- SHA1 e5cf8d90127b884980f9ec0ee8781a46929c8983
- SHA512 4732bcfeca6faa8810b71168889d6392a5c532611a178bde05b797d519242911d4bd969397f1a7f3e383003b977e7e3e8ed80936beef7a0af076e52ecad835c5
- SSDEEP 768:0C9WZV5SjIFZnSk3sx7iNggutl670mTqE5bICFY05sr4fxpK39:fW/5JFxSk34OYP6YmWIkCFYGvps9
- TLSH T18523D768209681B8F7DCF51EA3FD0C0EA4285E03F50174661AA5FF9B7B9B706F252C52
- MD5 SHA1 SHA512 SSDEEP TLSH
trainerv.ini
- SHA256 9f18051b30468cfa8c45a4fbea8727ff3286f9f822cf5b1b43916869b1e6f5de
- MD5 8287195f6120f6da471a7e50991e979c
- SHA1 1abdf4d4e1f05cb2ac178ba92c73639e51324978
- SHA512 ad1b249bc8713ed777851c8ac39cd2b9eb189288fa04461a7d28bd06a37ed06b32245bb1449180a979f42cf60bcf2c989e2fb0198c19efa13bebf659d862f76d
- SSDEEP 3072:OIGv6g2baMvnUb6MGDXNnlf1D95XBnJXpH9HzJLNvZ7lLZVvlH1Ht/Z/7N1FoAnZ:OxDb4n
- TLSH T1FEC3F319191B69BA1181F6F35C3E120728E8D904701573F1F9A8E86D097F467F2BEAE3
- MD5 SHA1 SHA512 SSDEEP TLSH