Rockstar (1)[.]exe

Resubmissions

31/08/2026, 16:36

260831-t37wsshe576

31/08/2026, 16:08

260831-tk67jscp3v6

Sharing

Copy URL Twitter E-mail

General

Target
Rockstar (1).exe
Size 12.2MB
Sample260831-tk67jscp3v
SHA256 259454e68dd662ff0c5d012b117c9aa233fca776208fbef9d08f9fa160c3b392
MD5 4f9610d0a54395e0dff48cfbf6198d6d
SHA1 badf3192dc687e3f6614bdb615b77fcc7241f613
SHA512 f5c3f169c9d8d5dff6cb8d7b43af5fac72602330bafa5826dbbdca2561f5676b468ad7c585c60ba0387c36261a0e1797d53b30aa8c5a1aa79ce866690c20622d
SSDEEP 98304:6nbscPUO4N2SXtCIL6F+m+MEt9jZ7AVk8rA9L++yVE+YYKBihnB8NJtqcMxRX:Qw6F+3MEjZx91Yhn9
TLSH
T1A2D6F8117A5F99ACD19BC8B083478A674E2174DB0A36B8AF41C452393F7DBF06F28719
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Rockstar (1).exe

File Explorer

Rockstar (1).exe

.exe 12.2MB

Rockstar (1).exe

IMPHASH d6e0bbfc6dcef1de9eb56506a5a997af
SHA256 259454e68dd662ff0c5d012b117c9aa233fca776208fbef9d08f9fa160c3b392
MD5 4f9610d0a54395e0dff48cfbf6198d6d
SHA1 badf3192dc687e3f6614bdb615b77fcc7241f613
SHA512 f5c3f169c9d8d5dff6cb8d7b43af5fac72602330bafa5826dbbdca2561f5676b468ad7c585c60ba0387c36261a0e1797d53b30aa8c5a1aa79ce866690c20622d
SSDEEP 98304:6nbscPUO4N2SXtCIL6F+m+MEt9jZ7AVk8rA9L++yVE+YYKBihnB8NJtqcMxRX:Qw6F+3MEjZx91Yhn9
TLSH
T1A2D6F8117A5F99ACD19BC8B083478A674E2174DB0A36B8AF41C452393F7DBF06F28719
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9113872

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

rockstar_launcher.pdb

kernel32

FreeLibrary GetExitCodeProcess ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable GetCommandLineW FreeEnvironmentStringsW FindClose GetEnvironmentStringsW QueryPerformanceFrequency GetEnvironmentVariableW GetCurrentDirectoryW RemoveDirectoryW SetFilePointerEx RtlVirtualUnwind RtlCaptureContext OpenProcess SetEnvironmentVariableW QueryPerformanceCounter AddVectoredExceptionHandler SleepConditionVariableSRW K32GetPerformanceInfo WriteConsoleW SetLastError WaitForSingleObjectEx GetCurrentProcess GetCurrentProcessId ReleaseMutex GetFullPathNameW FindFirstFileExW SetFileInformationByHandle SleepEx GetFileInformationByHandleEx GetModuleFileNameW GetTempPathW SetHandleInformation DeleteFileW GetFinalPathNameByHandleW MoveFileExW ExitProcess GetFileAttributesW DuplicateHandle FindNextFileW FlsAlloc GetProcAddress FlsGetValue GetConsoleOutputCP GetConsoleMode GetStdHandle LoadLibraryA FlsSetValue LoadLibraryW FlsFree GetModuleHandleA EncodePointer GetSystemTimeAsFileTime RtlPcToFileHeader RaiseException InitializeSListHead SetUnhandledExceptionFilter GetCurrentThreadId RtlUnwindEx GetModuleHandleW LoadLibraryExA LoadLibraryExW OutputDebugStringW OutputDebugStringA GetSystemTimePreciseAsFileTime GetSystemInfo CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW WriteFileEx GetVolumeInformationW GetFileInformationByHandle CompareStringOrdinal CreateThread CreateDirectoryW SetFileCompletionNotificationModes InitializeCriticalSectionEx GetLastError SwitchToThread GetProcessHeap HeapFree HeapAlloc WideCharToMultiByte FormatMessageW CreateMutexA WaitForSingleObject CloseHandle RtlLookupFunctionEntry HeapReAlloc CreateWaitableTimerExW GetOverlappedResult PostQueuedCompletionStatus WriteFile ReadFile GetQueuedCompletionStatusEx CreateIoCompletionPort CancelIoEx SetWaitableTimer Sleep GetCurrentThread MultiByteToWideChar GlobalMemoryStatusEx GetUserDefaultLocaleName SetThreadStackGuarantee lstrlenW CreateFileW LCIDToLocaleName GetUserDefaultUILanguage DeviceIoControl ReadFileEx DeleteCriticalSection

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

ntdll

NtWriteFile NtOpenFile NtCreateFile NtDeviceIoControlFile NtCancelIoFileEx NtCreateNamedPipeFile NtReadFile RtlNtStatusToDosError RtlGetVersion

user32

ToUnicodeEx SetWindowRgn GetParent FindWindowExW SetPropW RegisterTouchWindow MapVirtualKeyExW GetKeyboardLayout CreateMenu GetKeyState DestroyAcceleratorTable SetWindowTextW GetWindowTextW GetWindowTextLengthW GetMenu DestroyIcon IsRectEmpty SetWindowLongW GetSystemMenu ReleaseCapture DestroyMenu CreatePopupMenu DrawMenuBar SetMenuItemInfoW CreateIcon InsertMenuW AppendMenuW GetKeyboardState GetAsyncKeyState SetCapture GetClipCursor ShowCursor RegisterWindowMessageA MapVirtualKeyW TrackMouseEvent IsWindowEnabled ReleaseDC DrawIconEx EnableWindow SetMenu RemoveMenu SystemParametersInfoA PostMessageW RegisterRawInputDevices PostQuitMessage SendMessageW ShowWindow GetClassNameW GetMenuItemInfoW GetMenuBarInfo GetActiveWindow GetWindowThreadProcessId EnumWindows TranslateAcceleratorW MsgWaitForMultipleObjectsEx GetUpdateRect ValidateRect EnumChildWindows ClipCursor SendInput VkKeyScanW GetRawInputData CreateAcceleratorTableW SetFocus SetParent GetDC DispatchMessageA GetMessageA AdjustWindowRect GetMessageW EnumDisplayDevicesW CloseTouchInputHandle GetWindow GetTouchInputInfo GetWindowPlacement SetWindowPlacement ChangeDisplaySettingsExW LoadCursorW PostThreadMessageW DispatchMessageW TranslateMessage PeekMessageW GetMonitorInfoW SetCursor DestroyWindow SystemParametersInfoW MonitorFromRect GetWindowLongW ScreenToClient DefWindowProcW SetWindowLongPtrW SetWindowDisplayAffinity GetSystemMetrics IsWindow CreateWindowExW AdjustWindowRectEx RegisterClassExW UpdateWindow InvalidateRect SetCursorPos GetForegroundWindow InvalidateRgn SetWindowPos FlashWindowEx MonitorFromPoint GetWindowLongPtrW EnumDisplayMonitors IsIconic IsWindowVisible RedrawWindow IsProcessDPIAware MonitorFromWindow TrackPopupMenu SetForegroundWindow ClientToScreen GetCursorPos EnableMenuItem CheckMenuItem DrawTextW FillRect GetWindowDC OffsetRect GetWindowRect MapWindowPoints GetClientRect

gdi32

BitBlt CombineRgn CreateCompatibleDC CreateDIBSection GetDeviceCaps SelectObject DeleteDC DeleteObject SetTextColor CreateRectRgn CreateSolidBrush SetBkMode

dwmapi

DwmGetWindowAttribute DwmSetWindowAttribute DwmEnableBlurBehindWindow

psapi

GetModuleBaseNameW GetModuleFileNameExW

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

oleaut32

SafeArrayUnaccessData VariantClear SafeArrayAccessData SysStringLen SysFreeString SetErrorInfo GetErrorInfo SysAllocStringLen

advapi32

EventRegister EventUnregister EventWriteTransfer RegOpenKeyExW RegQueryValueExW EventSetInformation RegCloseKey RegGetValueW

combase

CoTaskMemAlloc CoCreateFreeThreadedMarshaler CoTaskMemFree

bcryptprimitives

ProcessPrng

comctl32

TaskDialogIndirect SetWindowSubclass DefSubclassProc RemoveWindowSubclass

shell32

ShellExecuteW SHCreateItemFromParsingName SHGetKnownFolderPath SHAppBarMessage DragQueryFileW DragFinish

ole32

RevokeDragDrop CoUninitialize CoCreateInstance RegisterDragDrop OleInitialize CoInitializeEx CoInitializeSecurity CoSetProxyBlanket

shlwapi

SHCreateMemStream

ws2_32

recv freeaddrinfo getaddrinfo WSACleanup WSAStartup send WSASend connect bind WSAIoctl ioctlsocket WSASocketW closesocket setsockopt getsockname WSAGetLastError getpeername getsockopt shutdown

crypt32

CertOpenStore CertFreeCertificateContext CertCloseStore CertDuplicateCertificateContext CertDuplicateStore CertDuplicateCertificateChain CertVerifyCertificateChainPolicy CertFreeCertificateChain CertEnumCertificatesInStore CertAddCertificateContextToStore CertGetCertificateChain

secur32

AcceptSecurityContext FreeCredentialsHandle DeleteSecurityContext ApplyControlToken EncryptMessage QueryContextAttributesW AcquireCredentialsHandleA InitializeSecurityContextW DecryptMessage FreeContextBuffer

pdh

PdhOpenQueryA PdhAddEnglishCounterW PdhCollectQueryData PdhRemoveCounter PdhEnumObjectsA PdhCloseQuery PdhGetFormattedCounterValue

powrprof

CallNtPowerInformation

api-ms-win-crt-math-l1-1-0

pow roundf round floor __setusermatherr trunc

api-ms-win-crt-string-l1-1-0

_wcsicmp wcslen strcpy_s wcscmp

api-ms-win-crt-convert-l1-1-0

wcstol _ultow_s _wtoi

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe _set_app_type _cexit _configure_narrow_argv _c_exit _register_thread_local_exe_atexit_callback _initialize_narrow_environment abort _initialize_onexit_table _get_initial_narrow_environment _initterm _register_onexit_function _initterm_e exit _exit _crt_atexit __p___argc terminate __p___argv

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_callnewh calloc free malloc _set_new_mode