PlayGTAV[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
PlayGTAV.exe
Size 2.2MB
Sample261018-281cxada55
SHA256 fc3db6357c9c251ea349e96ca14497b8d0e624e2fdf5befd46e7cde05ac79863
MD5 b04315a6a3cfd695e0d3511908eb9e44
SHA1 83d51a8dbcb23c7e2f7babcd19ff69113c8011f8
SHA512 69959999b5b7a28a4ffadb9fff463a3842371529dc40254342dc4bacf6b217355223a4a00a7fb3bd790cc36496fd500c142676bad92a39af456bd6bb9723bfc9
SSDEEP 49152:ZV7n1D/wQIbFLdxygUoKxkYFkusyMQ2b/HlZWDgYdrQL:n5IbDxTbKxkYORyG/ODVy
TLSH
T1DCB5018535D606BED023C375C24AACBDF56BBE854D708C0F6F4669806E32A94D9F2E0D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PlayGTAV.exe

File Explorer

PlayGTAV.exe

.exe 2.2MB

PlayGTAV.exe

IMPHASH e9381f8cceb03a706f22bf729a4fe2ba
SHA256 fc3db6357c9c251ea349e96ca14497b8d0e624e2fdf5befd46e7cde05ac79863
MD5 b04315a6a3cfd695e0d3511908eb9e44
SHA1 83d51a8dbcb23c7e2f7babcd19ff69113c8011f8
SHA512 69959999b5b7a28a4ffadb9fff463a3842371529dc40254342dc4bacf6b217355223a4a00a7fb3bd790cc36496fd500c142676bad92a39af456bd6bb9723bfc9
SSDEEP 49152:ZV7n1D/wQIbFLdxygUoKxkYFkusyMQ2b/HlZWDgYdrQL:n5IbDxTbKxkYORyG/ODVy
TLSH
T1DCB5018535D606BED023C375C24AACBDF56BBE854D708C0F6F4669806E32A94D9F2E0D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3651170

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

205KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

81KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

RNE0

Size

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

RNE1

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

RNE2

Size

2.1MB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

78KB

Virtual Size

77KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

168B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

PlayGTAV.exe

shell32

kernel32

generic