vip fivem 999[.]rar

Sharing

Copy URL Twitter E-mail

General

Target
vip fivem 999.rar
Size 2.2MB
Sample261104-2bb9taf17q
SHA256 71b3fde88fe9ed90f19ac39cb57944af376cf106c75ca70dc723582ca3f7e0b6
MD5 25b58a4b32c1f2055a91bead1bd54f00
SHA1 8c09e9dc78ec063a2636e24ce9f4e5838690d037
SHA512 23ef6af4638d7ef83fb369e7dc34a2eed06ae73f348c57c1055c0d5af4c96b16df652c78ab5780e2a94d70eed1df32e5b75a5f80b0490750dc7f9b1666606c87
SSDEEP 49152:TvcG6/h98mJc1zySF8lhQUWlWqEqOwWqQ0DzGTfEnt+jDem9NDHOjI:TvcGkPO1zyAohQflQqNWu3GTf/2mfHOU
TLSH
T171B533D63909A02DFDFB8CE83593CB33C06D6D8C593870DAB0823B676D06E651965FA0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/vip fivem 999/999/Y999.exe

File Explorer

vip fivem 999.rar

.rar 2.2MB
vip fivem 999/999/Y999.exe

.exe 4.1MB

vip fivem 999.rar

SHA256 71b3fde88fe9ed90f19ac39cb57944af376cf106c75ca70dc723582ca3f7e0b6
MD5 25b58a4b32c1f2055a91bead1bd54f00
SHA1 8c09e9dc78ec063a2636e24ce9f4e5838690d037
SHA512 23ef6af4638d7ef83fb369e7dc34a2eed06ae73f348c57c1055c0d5af4c96b16df652c78ab5780e2a94d70eed1df32e5b75a5f80b0490750dc7f9b1666606c87
SSDEEP 49152:TvcG6/h98mJc1zySF8lhQUWlWqEqOwWqQ0DzGTfEnt+jDem9NDHOjI:TvcGkPO1zyAohQflQqNWu3GTf/2mfHOU
TLSH
T171B533D63909A02DFDFB8CE83593CB33C06D6D8C593870DAB0823B676D06E651965FA0
MD5 SHA1 SHA512 SSDEEP TLSH

Password

123

vip fivem 999/999/Y999.exe

IMPHASH bdca1117486680acfa28548f80b8b2ea
SHA256 f4e4f215951fea71d4c245dc553cf2b51a8484a374c666a11722e3d0cb771f09
MD5 80482a5cceb879435be2db5ab97b5e65
SHA1 ad3335bdd1280e7606ba6aaab9ed28d205ccdbf7
SHA512 ead42408ee0d5ea66edcf7e634b3593c28aeb0504728d51dc255e679a60b342d6816f7610ee3290c0a62d978178d321b7d1896f1e6f5b5cb4632ade755a1dae0
SSDEEP 98304:gUVkXrZ9iWjVqxdpGTZI0tWAbxAWtrf3ttYzPi:gUG+AVGdpGi+WKAWBHYu
TLSH
T1AE16F056E29B4698CF66973859459337D6B07CC943B0DBD32AAC4E206F53AF42E7C380
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Password

123

Minor OS version

Major OS version

Entry point

1024500

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\jferr\Desktop\Fivem-External--master\x64\Release\nvidia.pdb

dwmapi

DwmExtendFrameIntoClientArea

d3d11

D3D11CreateDeviceAndSwapChain

advapi32

GetTokenInformation RevertToSelf PrivilegeCheck SetTokenInformation OpenProcessToken SetThreadToken CreateProcessAsUserW RegQueryValueExW LookupPrivilegeValueW DuplicateTokenEx

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

ntdll

RtlVirtualUnwind RtlCaptureContext RtlLookupFunctionEntry

winhttp

WinHttpCloseHandle WinHttpQueryDataAvailable WinHttpOpen WinHttpReceiveResponse WinHttpSendRequest WinHttpOpenRequest WinHttpConnect WinHttpReadData

kernel32

GetFileAttributesExW GetConsoleScreenBufferInfo SetConsoleTextAttribute GetStdHandle Sleep GetStartupInfoW GetCommandLineW GetCurrentProcess OpenProcess CreateToolhelp32Snapshot GetLastError Process32NextW Process32FirstW CloseHandle ExitProcess MultiByteToWideChar GlobalAlloc GlobalFree GlobalLock WideCharToMultiByte GlobalUnlock GetTickCount GetLocaleInfoA LoadLibraryA QueryPerformanceFrequency GetProcAddress FreeLibrary QueryPerformanceCounter FindFirstFileExW InitializeSListHead ReadProcessMemory CreateFileA GetFileSizeEx ReadFile HeapAlloc HeapFree MapViewOfFile UnmapViewOfFile CreateFileMappingA FindFirstFileW AreFileApisANSI GetFileInformationByHandleEx ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime GetLocaleInfoEx FindNextFileW FindClose CreateFileW GetModuleHandleW CreateDirectoryW FormatMessageA LocalFree WriteProcessMemory

user32

FindWindowA TranslateMessage DefWindowProcW CreateWindowExW MapWindowPoints MoveWindow SetWindowLongW SetForegroundWindow GetKeyState GetMessageExtraInfo ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout PeekMessageW DispatchMessageW GetAsyncKeyState SetClipboardData GetClipboardData EmptyClipboard CloseClipboard OpenClipboard GetCursorPos GetDC SetCursorPos ReleaseCapture IsWindowUnicode GetClientRect SetCursor SetCapture LoadCursorW GetForegroundWindow

gdi32

GetPixel

shell32

SHGetPathFromIDListA SHGetSpecialFolderLocation

ole32

CoTaskMemFree

msvcp140

??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ _Query_perf_frequency ?_Throw_Cpp_error@std@@YAXH@Z ?uncaught_exceptions@std@@YAHXZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Xlength_error@std@@YAXPEBD@Z _Mtx_destroy_in_situ _Mtx_init_in_situ _Cnd_do_broadcast_at_thread_exit _Thrd_sleep _Query_perf_counter _Thrd_detach _Xtime_get_ticks ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?good@ios_base@std@@QEBA_NXZ ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?_Xout_of_range@std@@YAXPEBD@Z ?_Winerror_map@std@@YAHH@Z ?_Xbad_function_call@std@@YAXXZ ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?_Syserror_map@std@@YAPEBDH@Z _Mtx_lock _Mtx_unlock ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z ?always_noconv@codecvt_base@std@@QEBA_NXZ ??Bid@locale@std@@QEAA_KXZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ

imm32

ImmGetContext ImmReleaseContext ImmSetCandidateWindow ImmSetCompositionWindow

d3dcompiler_43

D3DCompile

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_destroy __std_exception_copy _CxxThrowException __intrinsic_setjmp __current_exception_context __current_exception __C_specific_handler memcmp memchr memset memmove __std_terminate strstr memcpy strrchr longjmp

api-ms-win-crt-heap-l1-1-0

_set_new_mode _callnewh free malloc

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode _set_fmode __stdio_common_vsprintf fputc freopen fflush fclose __stdio_common_vsprintf_s fgetc fwrite __stdio_common_vsscanf __stdio_common_vfprintf fgetpos setvbuf _get_stream_buffer_pointers _fseeki64 fread fsetpos ungetc

api-ms-win-crt-runtime-l1-1-0

_get_wide_winmain_command_line _initterm _initterm_e exit _exit abort _c_exit _register_thread_local_exe_atexit_callback _configure_wide_argv _set_app_type _seh_filter_exe _cexit _crt_atexit _beginthreadex _initialize_onexit_table _initialize_wide_environment system terminate _invalid_parameter_noinfo_noreturn _register_onexit_function _errno

api-ms-win-crt-convert-l1-1-0

atoi strtoll strtod strtol atof strtoull

api-ms-win-crt-filesystem-l1-1-0

rename _lock_file _unlock_file

api-ms-win-crt-locale-l1-1-0

localeconv _configthreadlocale ___lc_codepage_func

api-ms-win-crt-string-l1-1-0

_wcsicmp strncpy strncmp strcpy_s tolower strcmp

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-math-l1-1-0

cosf powf sinf ceilf fmodf atan2f acosf _dclass __setusermatherr sqrtf