GTA5-Dump[.]exe | Triage™

Resubmissions

03/09/2026, 02:43

260903-c72f5sxape8

03/09/2026, 02:43

03/09/2026, 02:43

03/09/2026, 02:43

12/08/2026, 15:58

12/08/2026, 15:57

12/08/2026, 15:31

Sharing

Copy URL Twitter E-mail

General

Target
GTA5-Dump.exe
Size 62.2MB
Sample260903-c7j7vsxang
SHA256 5ee0afe34d20f66dbed11cb9b3efe80892e8420cdbc40aad891da3829e589bbb
MD5 9ad52a5cc44982dddd108e611b7f3b32
SHA1 ced63b82b445e5bda87597238e017d78bf3b172f
SHA512 35525cae850ddc9f4d91bdcfb966c491d475c17e29d8c55700f0c19f9a56244b5418f6d6a1e476add38ff8407db1d5aa665215cf5fc8301f2588b699e2c11313
SSDEEP 786432:G/ASzJ2E1nXKQKl+nL8y3H0DiMyy4kT5M4/Hv26mlvj8:G/3J1ETXHgN8
TLSH
T153E78C4532A1C1D9DC2AE1708C16EE8FE7B1BD588C24872B32E03B5F6FB76605D9E251
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
GTA5-Dump.exe

File Explorer

GTA5-Dump.exe

.exe 62.2MB

GTA5-Dump.exe

IMPHASH 83082d726af61aa8c3daf98f64d8f7ac
SHA256 5ee0afe34d20f66dbed11cb9b3efe80892e8420cdbc40aad891da3829e589bbb
MD5 9ad52a5cc44982dddd108e611b7f3b32
SHA1 ced63b82b445e5bda87597238e017d78bf3b172f
SHA512 35525cae850ddc9f4d91bdcfb966c491d475c17e29d8c55700f0c19f9a56244b5418f6d6a1e476add38ff8407db1d5aa665215cf5fc8301f2588b699e2c11313
SSDEEP 786432:G/ASzJ2E1nXKQKl+nL8y3H0DiMyy4kT5M4/Hv26mlvj8:G/3J1ETXHgN8
TLSH
T153E78C4532A1C1D9DC2AE1708C16EE8FE7B1BD588C24872B32E03B5F6FB76605D9E251
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23057660

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetFileInformationByHandle ReadConsoleW GetModuleHandleW TlsFree TlsSetValue TlsGetValue TlsAlloc SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlCaptureContext HeapReAlloc FlushFileBuffers GetCurrentDirectoryW GetConsoleMode GetConsoleCP GetCPInfo GetOEMCP GetACP IsValidCodePage IsProcessorFeaturePresent IsDebuggerPresent PeekNamedPipe GetEnvironmentStringsW GetStartupInfoW GetFileType GetModuleFileNameW GetStdHandle SetLastError LoadLibraryExW FindFirstFileExW AreFileApisANSI GetFullPathNameW HeapSize GetFullPathNameA GetDriveTypeW GetTimeZoneInformation RtlUnwindEx RtlLookupFunctionEntry RaiseException RtlPcToFileHeader DecodePointer EncodePointer ResetEvent GetSystemTimeAsFileTime GetFileTime VerifyVersionInfoW VerSetConditionMask GetThreadContext InitializeCriticalSection LoadLibraryExA GetOverlappedResult LocalFree LocalAlloc GetSystemDefaultUILanguage VerifyVersionInfoA OutputDebugStringA SetThreadExecutionState WerSetFlags QueryPerformanceCounter CreateSemaphoreA CreateMutexA GetSystemInfo ReleaseMutex ReleaseSemaphore OutputDebugStringW LoadLibraryW GetStringTypeW GetDateFormatW SetEvent DeleteCriticalSection TryEnterCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection ResumeThread GetThreadPriority SetThreadPriorityBoost SetThreadPriority GetThreadId GetConsoleWindow GetTimeFormatW CompareStringW LCMapStringW SetStdHandle WriteConsoleW SetEnvironmentVariableA CreateProcessW GetSystemDirectoryW lstrcmpA GetModuleHandleExW FreeEnvironmentStringsW GetModuleHandleA GetCurrentThreadId GetCurrentThread CreateThread GetProcessAffinityMask GetProcessHeap HeapFree HeapAlloc OpenProcess GetCurrentProcessId ExitProcess CloseHandle GetModuleFileNameA GetCommandLineA CreateToolhelp32Snapshot Process32First Process32Next GetDiskFreeSpaceExA DeleteFileW GetFileSize WriteFile ReadFile FindClose lstrcpyA lstrcpyW lstrcatW lstrlenA CreateFileW GetFileAttributesW FindFirstFileW FindNextFileW MultiByteToWideChar WaitForMultipleObjects FindFirstChangeNotificationA FindNextChangeNotification FindCloseChangeNotification WaitForSingleObject FreeLibrary GetProcAddress GlobalMemoryStatusEx GetSystemFirmwareTable SetHandleInformation GetNativeSystemInfo CreatePipe LoadLibraryA CreateProcessA GetEnvironmentVariableA GetWindowsDirectoryA GetVolumeInformationA QueryPerformanceFrequency GetVersionExA WideCharToMultiByte GetUserDefaultUILanguage GetSystemDefaultLocaleName DeleteFileA Sleep SetFilePointer CreateEventA GetCurrentProcess TerminateProcess GetLastError SetEndOfFile SetFilePointerEx SetFileTime GetLocalTime FileTimeToLocalFileTime FileTimeToSystemTime GetTempPathA CreateDirectoryA RemoveDirectoryA CreateFileA SetFileAttributesW GetFileAttributesExW MoveFileExW VirtualAlloc VirtualFree VirtualProtect VirtualQueryEx AddVectoredExceptionHandler RemoveVectoredExceptionHandler VirtualQuery

user32

DispatchMessageW ShowWindow SetWindowsHookExA UnhookWindowsHookEx CallNextHookEx DefWindowProcW RegisterRawInputDevices GetRawInputData ClientToScreen GetCursorPos SetCursorPos ShowCursor MapVirtualKeyExW MapVirtualKeyW MapVirtualKeyA GetKeyState GetDoubleClickTime SendMessageW GetKeyboardLayout GetKeyboardLayoutList UnloadKeyboardLayout ActivateKeyboardLayout LoadKeyboardLayoutW LockSetForegroundWindow LoadIconA LoadCursorA GetParent ClipCursor GetForegroundWindow GetSystemMetrics KillTimer SetTimer ReleaseCapture SetCapture GetCapture SetFocus CreateWindowExW RegisterClassW PostMessageA PeekMessageW TranslateMessage GetCursorInfo SetWindowLongPtrA UpdateWindow SetWindowPos GetDesktopWindow SystemParametersInfoA GetWindowLongPtrA GetClientRect GetWindowRect AdjustWindowRect GetWindowLongA MessageBoxW

steam_api64

SteamAPI_RestartAppIfNecessary SteamAPI_Init SteamUser SteamUtils SteamUserStats SteamAPI_RegisterCallback SteamAPI_UnregisterCallback SteamApps SteamAPI_RunCallbacks SteamFriends

gfsdk_shadowlib.win64

?NV_ShadowLib_AddBuffer@@YA?AW4NV_ShadowLib_Status@@QEIAUNV_ShadowLib_Ctx@@PEAUNV_ShadowLib_BufferDesc@@PEAPEAI@Z ?NV_ShadowLib_RemoveBuffer@@YA?AW4NV_ShadowLib_Status@@QEIAUNV_ShadowLib_Ctx@@PEAPEAI@Z ?NV_ShadowLib_ClearBuffer@@YA?AW4NV_ShadowLib_Status@@QEIAUNV_ShadowLib_Ctx@@PEAI@Z ?NV_ShadowLib_OpenDX@@YA?AW4NV_ShadowLib_Status@@PEAUNV_ShadowLib_Version@@QEIAUNV_ShadowLib_Ctx@@QEIAUID3D11Device@@QEIAUID3D11DeviceContext@@PEAUgfsdk_new_delete_t@@@Z ?NV_ShadowLib_GetVersion@@YA?AW4NV_ShadowLib_Status@@PEAUNV_ShadowLib_Version@@@Z ?NV_ShadowLib_DevModeToggleDebugEyeViewZShader@@YA?AW4NV_ShadowLib_Status@@QEIAUNV_ShadowLib_Ctx@@PEAI_N@Z ?NV_ShadowLib_DevModeToggleDebugCascadeShader@@YA?AW4NV_ShadowLib_Status@@QEIAUNV_ShadowLib_Ctx@@PEAI_N@Z ?NV_ShadowLib_RenderBufferUsingExternalMap@@YA?AW4NV_ShadowLib_Status@@QEIAUNV_ShadowLib_Ctx@@PEAUNV_ShadowLib_ExternalMapDesc@@PEAUID3D11ShaderResourceView@@PEAIPEAUNV_ShadowLib_BufferRenderParams@@@Z ?NV_ShadowLib_FinalizeBuffer@@YA?AW4NV_ShadowLib_Status@@QEIAUNV_ShadowLib_Ctx@@PEAIPEAPEAUID3D11ShaderResourceView@@@Z ?NV_ShadowLib_ModulateBuffer@@YA?AW4NV_ShadowLib_Status@@QEIAUNV_ShadowLib_Ctx@@PEAIPEAUID3D11RenderTargetView@@Ugfsdk_float3@@@Z

version

VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoA

dsound

ord3 ord6 ord8 ord9 ord1

bink2w64

BinkSetIO BinkDoFrameAsync BinkShouldSkip BinkSetFrameRate BinkDoFrameAsyncWait BinkSetSoundTrack BinkSetSoundSystem BinkStartAsyncThread BinkRequestStopAsyncThread BinkWaitStopAsyncThread BinkOpen BinkGetFrameBuffersInfo BinkOpenDirectSound BinkSetMemory BinkSetVolume BinkGetKeyFrame BinkGoto BinkPause BinkClose BinkWait BinkNextFrame BinkRegisterFrameBuffers

ws2_32

freeaddrinfo getaddrinfo shutdown sendto select recvfrom __WSAFDIsSet WSAGetLastError WSACleanup WSAStartup htons ntohs accept bind closesocket connect ioctlsocket getpeername getsockname inet_addr listen recv send setsockopt socket gethostbyname gethostname

winmm

timeGetTime timeEndPeriod timeBeginPeriod

psapi

EnumProcessModules GetModuleFileNameExA

mf

MFCreateASFProfile MFCreateSourceResolver MFGetService MFCreatePresentationClock MFCreateASFMediaSinkActivate MFCreateASFContentInfo MFShutdownObject

mfplat

MFGetSystemTime MFCreateSample MFCreateAttributes MFShutdown MFCreateMediaType MFStartup MFTEnum MFCreateSystemTimeSource MFInitAMMediaTypeFromMFMediaType MFCreateMemoryBuffer

msdmo

MoFreeMediaType

mfreadwrite

MFCreateSourceReaderFromMediaSource MFCreateSinkWriterFromURL

propsys

PropVariantToUInt64 PropVariantToInt64 PropVariantGetStringElem PSStringFromPropertyKey PropVariantToStringWithDefault

crypt32

CryptQueryObject CertFindCertificateInStore CryptMsgGetParam CertGetNameStringA

wintrust

WTHelperGetProvCertFromChain WTHelperProvDataFromStateData WTHelperGetProvSignerFromChain WinVerifyTrust

wtsapi32

WTSUnRegisterSessionNotification WTSRegisterSessionNotification

d3d9

D3DPERF_EndEvent D3DPERF_BeginEvent

d3dcompiler_43

D3DReflect

gfsdk_txaa_alpharesolve.win64

TxaaOpenDX TxaaResolveDX

imm32

ImmReleaseContext ImmGetCompositionStringW ImmSetCompositionStringW ImmGetCandidateListW ImmSetConversionStatus ImmGetConversionStatus ImmGetContext

dinput8

DirectInput8Create

xinput1_3

ord2 ord3

rpcrt4

UuidCreateSequential

shlwapi

SHStrDupW

gdi32

CreateDCA DeleteDC GetStockObject ExtEscape

advapi32

RegOpenKeyExA RegQueryValueExA GetUserNameA RegQueryValueExW RegOpenKeyExW CryptAcquireContextA RegCloseKey

shell32

SHCreateDirectoryExA SHGetSpecialFolderPathA SHGetFolderPathA ShellExecuteExA ShellExecuteA ShellExecuteW

ole32

CoInitialize CoUninitialize CoCreateInstance CoInitializeEx CoInitializeSecurity CoSetProxyBlanket PropVariantClear CoLockObjectExternal CoTaskMemFree

oleaut32

SysAllocStringByteLen VariantInit VariantClear SysStringLen SysFreeString SysAllocString

Name

.text

Size

23.1MB

Virtual Size

23.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BINK

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

BINKBSS

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

3.4MB

Virtual Size

3.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16.0MB

Virtual Size

16.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

964KB

Virtual Size

968KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BINKCONS

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

183KB

Virtual Size

184KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

854KB

Virtual Size

856KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

17.7MB

Virtual Size

17.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

generic

count=2, id=211, version=51106,

count=2, id=156, productName=VS2010 build 30319, version=30319,

count=4, id=156, version=21202,

count=2, id=171, productName=VS2010 SP1 build 40219, version=40219,

count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=2, id=123, productName=VS2005 build 50727, version=50727,

count=1, productName=Unmarked objects (old),

count=35, id=206, productName=VS2012 UPD3 build 60610, version=60610,

count=2, id=173, version=30319,

count=5, id=207, productName=VS2012 UPD4 build 61030, version=61030,

count=6, id=156, productName=VS2010 SP1 build 40219, version=40219,

count=2, id=203, version=50929,

count=2, id=199, version=41118,

count=35, id=205, version=50929,

count=87, id=207, version=50929,

count=281, id=206, version=50929,

count=51, id=206, productName=VS2012 UPD1 build 51106, version=51106,

count=2, id=136, version=30729,

count=7, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=8, id=135, version=30729,

count=53, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=453, id=1, productName=Unmarked objects,

count=145, id=207, productName=VS2012 UPD1 build 51106, version=51106,

count=1, id=201, productName=VS2012 UPD1 build 51106, version=51106,

count=1, id=204, productName=VS2012 UPD1 build 51106, version=51106,