FivemSpoofer[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
FivemSpoofer.exe
Size 951KB
Sample260813-tx2slaca87
SHA256 c1bba50e2a0b596c56f5c38f707a07af6308e26050260ffc288bc67739f39fde
MD5 0d609c1c0f240d7ac0bba8ca182ac1f1
SHA1 cc9d9268b607d2b57243d883bf16703a92180ad7
SHA512 a65e3cd00001c830b0febd8358940c3119aeffc0aa4ed9d19faab7e1b7d2d01ddf216fe7520362a57f50e25994d3a829285ebde624557850adddc622f1717e14
SSDEEP 12288:sJ9P+k5AGBluAfvSihRdA8o/y8k5MCgBb4YidnGWKjxFccf:sJp+oKivSQy8o/bCEPidnGWKFFccf
TLSH
T161259E49B6E800E8E0BBD674C9A1661BDA717895073097CF13D4066D2F737E05ABBB23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FivemSpoofer.exe

File Explorer

FivemSpoofer.exe

.exe 951KB

FivemSpoofer.exe

IMPHASH 3252e20955232998e6afed8b138ce483
SHA256 c1bba50e2a0b596c56f5c38f707a07af6308e26050260ffc288bc67739f39fde
MD5 0d609c1c0f240d7ac0bba8ca182ac1f1
SHA1 cc9d9268b607d2b57243d883bf16703a92180ad7
SHA512 a65e3cd00001c830b0febd8358940c3119aeffc0aa4ed9d19faab7e1b7d2d01ddf216fe7520362a57f50e25994d3a829285ebde624557850adddc622f1717e14
SSDEEP 12288:sJ9P+k5AGBluAfvSihRdA8o/y8k5MCgBb4YidnGWKjxFccf:sJp+oKivSQy8o/bCEPidnGWKFFccf
TLSH
T161259E49B6E800E8E0BBD674C9A1661BDA717895073097CF13D4066D2F737E05ABBB23
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

444836

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDeviceAndSwapChain

user32

PeekMessageA PostQuitMessage UpdateWindow ShowWindow GetKeyState GetMessageExtraInfo LoadCursorA ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow SetCapture SetCursor GetClientRect RegisterClassExW IsWindowUnicode ReleaseCapture SetCursorPos GetCursorPos OpenClipboard CloseClipboard EmptyClipboard GetClipboardData SetClipboardData DefWindowProcW DispatchMessageA DestroyWindow CreateWindowExW UnregisterClassW TranslateMessage

kernel32

EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc HeapFree HeapAlloc GetFileSizeEx SetFilePointerEx FlushFileBuffers GetConsoleOutputCP Process32First CreateToolhelp32Snapshot Sleep Process32Next CloseHandle GetModuleHandleW TerminateProcess IsValidCodePage SetEnvironmentVariableA DeviceIoControl CreateFileW GetConsoleMode WriteFile GetTempPathW DeleteFileW OutputDebugStringA MultiByteToWideChar GlobalAlloc GlobalFree GlobalLock WideCharToMultiByte GlobalUnlock GetLocaleInfoA LoadLibraryA QueryPerformanceFrequency IsDBCSLeadByte GetProcAddress FreeLibrary QueryPerformanceCounter GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle HeapReAlloc HeapSize SetEndOfFile ExitProcess WriteConsoleW GetModuleFileNameW ReadConsoleW GetTimeZoneInformation OutputDebugStringW GetLastError GetFileType GetStdHandle ReadFile GetModuleHandleExW OpenProcess ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead WaitForSingleObjectEx RtlUnwind GetExitCodeThread LocalFree FormatMessageA GetLocaleInfoEx CreateDirectoryW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW SetFileInformationByHandle AreFileApisANSI GetFileInformationByHandleEx TryAcquireSRWLockExclusive EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetCurrentProcess CreateThread ExitThread FreeLibraryAndExitThread

advapi32

ControlService RegSetValueExW CreateServiceW CloseServiceHandle OpenSCManagerW DeleteService RegOpenKeyExW StartServiceW OpenServiceW RegCloseKey RegEnumKeyExW

shell32

ShellExecuteW SHGetFolderPathA

imm32

ImmGetContext ImmSetCandidateWindow ImmSetCompositionWindow ImmReleaseContext

d3dcompiler_47

D3DCompile

Name

.text

Size

635KB

Virtual Size

634KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

241KB

Virtual Size

240KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

30KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

34KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

FivemSpoofer.exe

d3d11

user32

kernel32

advapi32

shell32

imm32

d3dcompiler_47

generic