ScoobyGTA4.zip
- SHA256 89745b312793e6ab4815a09e815275cbb89464b14a872983908c9a7bbc55aefc
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ScoobyGTA4.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ScoobyGTA4.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target ScoobyGTA4.zip
- Size 4.6MB
- Sample261030-mwcczsec38
- SHA256 89745b312793e6ab4815a09e815275cbb89464b14a872983908c9a7bbc55aefc
- MD5 57aa2ce64ed00e5df138b21d640415d8
- SHA1 9b6b6a9b0310fdc00af4a1d3d28dd973b889d391
- SHA512 9d66a7f5e2453f04979dea5f814e3ef6300efef15a6cc3901c5e05acffd9ad618c9189e064ca5cf6037d587b31ca8d20428eec94b8a6f639c36fbe46f7d7d05e
- SSDEEP 98304:SS1erVyN6+2ZwcBoX5gOKmEqrkr0oa6QWRTC5z9FpWpQSD1b86q0pYuIdBP807b8:ert+2ZAXqOKpr0oa3wgz9GpQE1bLp9IE
- TLSH T1BC263385E1BF0941665F600216AE96E88BFD1339C1C4C6F4B293DF67C73468A8D9B27C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ScoobyGTA4.dll
File Explorer
-
ScoobyGTA4.zip.zip 4.6MB
-
ScoobyGTA4.dll.dll 11.3MB
ScoobyGTA4.dll
- IMPHASH d9c217ba2e5205b0eb50db1bd3eb6579
- SHA256 4a7e70ce64133605c1effd1b6db9787d15a22b5b0757c6dc4f49aae17560d371
- MD5 50516a72e3220724c2feb4a5e02f0416
- SHA1 4f0782a0fbd7dac1ae8d13333b96f56cbb612a72
- SHA512 9e3f9cffda0ee276e047f893e9978ebc99622e9cf5fb2c29d1166124b6839f415710f804e33a0e2f71b8d66eb30ea206266c87c0f790614e8eb21577b973c2b5
- SSDEEP 196608:yoJS3HFLWxkx4930aLk4KrzX9AzSxxKdnNunN4gMhFgMAJSxSxkxxxxxxIxxxxxM:7Vk+RLk4KvxxKv44gMhFgMAJSxSxkxxy
- TLSH T11FC64B1B7D82CA97D55BCDFE11E8162BA974C0226BEB44D35AA80CDC87F44A13F9F901
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
1708259
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d3d9
Direct3DCreate9Ex
Direct3DCreate9
shell32
ShellExecuteW
SHGetKnownFolderPath
ole32
PropVariantClear
CoTaskMemFree
CoInitializeEx
CoCreateInstance
CoUninitialize
winhttp
WinHttpReadData
WinHttpSetOption
WinHttpOpen
WinHttpSetTimeouts
WinHttpOpenRequest
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpCloseHandle
WinHttpConnect
advapi32
GetUserNameA
CryptReleaseContext
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptAcquireContextW
kernel32
GetTimeZoneInformation
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
GetFileType
CloseHandle
CreateThread
GetModuleHandleExW
DeleteFileA
GetLastError
SetLastError
CreateMutexW
Sleep
GetCurrentProcessId
GlobalMemoryStatusEx
GetTickCount64
CreateFileMappingW
MapViewOfFile
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
MoveFileExA
CreateToolhelp32Snapshot
Module32FirstW
Module32NextW
CreateFileW
GetFileSizeEx
ReadFile
SetFilePointerEx
GetCurrentThreadId
VirtualQuery
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
GetCurrentProcess
OpenThread
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualProtect
Thread32First
Thread32Next
VirtualAlloc
VirtualFree
DeleteFileW
FlushFileBuffers
GetFileAttributesW
WriteFile
MoveFileExW
VerSetConditionMask
QueryPerformanceCounter
QueryPerformanceFrequency
FreeLibrary
GetModuleHandleA
LoadLibraryA
MultiByteToWideChar
GetLocaleInfoA
IsDBCSLeadByte
LoadResource
LockResource
SetEnvironmentVariableW
FindResourceW
OutputDebugStringA
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
WideCharToMultiByte
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
InterlockedFlushSList
RtlUnwind
RaiseException
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
GetStringTypeW
GetCPInfo
CompareStringEx
GetSystemTimeAsFileTime
ExitProcess
LCMapStringEx
DecodePointer
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
GetFileInformationByHandleEx
CopyFileW
AreFileApisANSI
SetFileInformationByHandle
GetFullPathNameW
GetFileInformationByHandle
GetFileAttributesExW
GetStdHandle
GetProcessHeap
SetStdHandle
HeapSize
TlsFree
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
FlsFree
FindNextFileW
FindFirstFileExW
FindFirstFileW
FindClose
LoadLibraryExW
WriteConsoleW
SetEndOfFile
SizeofResource
CreateDirectoryW
FlsSetValue
FlsGetValue
FlsAlloc
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
LocalFree
FormatMessageA
GetLocaleInfoEx
user32
CloseClipboard
OpenClipboard
EnumDisplayMonitors
GetMonitorInfoA
MonitorFromWindow
LoadCursorA
SetWindowLongA
WindowFromPoint
ClientToScreen
SetCursorPos
AdjustWindowRectEx
GetPropA
SetPropA
ReleaseDC
GetDC
SetForegroundWindow
IsWindowUnicode
ReleaseCapture
SetCapture
GetCapture
GetKeyState
BringWindowToTop
GetClipboardData
SetWindowPos
SetLayeredWindowAttributes
ShowWindow
IsChild
RegisterClassExW
GetMessageExtraInfo
TrackMouseEvent
GetKeyboardLayout
SendInput
GetWindowThreadProcessId
SetWindowLongW
GetWindowLongW
ClipCursor
ScreenToClient
GetClipCursor
GetCursorPos
SetCursor
MessageBoxA
GetClientRect
GetForegroundWindow
GetAsyncKeyState
DestroyWindow
IsWindow
CreateWindowExW
UnregisterClassW
RegisterClassW
CallWindowProcW
DefWindowProcW
EmptyClipboard
SetClipboardData
IsIconic
SetFocus
gdi32
GetDeviceCaps
bcrypt
BCryptSetProperty
BCryptOpenAlgorithmProvider
BCryptGenerateSymmetricKey
BCryptEncrypt
BCryptGenRandom
BCryptHash
BCryptDestroyKey
BCryptCloseAlgorithmProvider
BCryptDecrypt
setupapi
SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
imm32
ImmReleaseContext
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmGetContext
ScoobyAuthBuildMode
ScoobyGta4CreateMenu
ScoobyGta4CreateSpawnerBrowser
ScoobyGta4DestroyMenu
ScoobyGta4DestroySpawnerBrowser
ScoobyGta4DrawMenu
ScoobyGta4DrawSpawnerBrowser
ScoobyGta4GetAbiVersion
ScoobyGta4InspectExecutable
ScoobyGta4PrepareMenu
ScoobyGta4StopUi
ScoobyGta4UiStatus
Name
.text
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
298KB
Virtual Size
297KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.fptable
Size
512B
Virtual Size
128B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
9.1MB
Virtual Size
9.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
64KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=46, id=259, version=35222,
count=25, id=259, version=35207,
count=15, id=260, version=35207,
count=81, id=261, version=35207,
count=41, id=260, version=35222,
count=188, id=261, version=35222,
count=1, id=262, version=35222,
count=25, id=257, version=35222,
count=280, id=1, productName=Unmarked objects,
count=4, id=260, version=35228,
count=110, id=261, version=35228,
count=1, id=256, version=35228,
count=1, id=255, version=35228,
count=5, id=151,
count=1, id=258, version=35228,