Fivem Dumper.rar
- SHA256 815b7e862b3755d5ab8af72361b92dbd5e39c2007ac9d3c658e004c915f2ffdb
Overview
overview
7Static
static
3Fivem Dumper.rar
windows10-2004-x64
7Fivem Dumper.rar
windows11-ltsc_2024-x64
1Fivem Dump...er.exe
windows10-2004-x64
1Fivem Dump...er.exe
windows11-ltsc_2024-x64
1Fivem Dump...ed.cpp
windows10-2004-x64
3Fivem Dump...ed.cpp
windows11-ltsc_2024-x64
3Fivem Dump...ucts.h
windows10-2004-x64
3Fivem Dump...ucts.h
windows11-ltsc_2024-x64
3Fivem Dump...ts.txt
windows10-2004-x64
1Fivem Dump...ts.txt
windows11-ltsc_2024-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Fivem Dumper.rar
Resource
win10v2004-20260911-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Fivem Dumper.rar
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
Fivem Dumper/fivem_offset_dumper.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
Fivem Dumper/fivem_offset_dumper.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
Fivem Dumper/fivem_offset_dumper_reconstructed.cpp
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral6
Sample
Fivem Dumper/fivem_offset_dumper_reconstructed.cpp
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral7
Sample
Fivem Dumper/fivem_sdk_structs.h
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral8
Sample
Fivem Dumper/fivem_sdk_structs.h
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral9
Sample
Fivem Dumper/offsets.txt
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
Fivem Dumper/offsets.txt
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target Fivem Dumper.rar
- Size 140KB
- Sample261107-q146cact9y
- SHA256 815b7e862b3755d5ab8af72361b92dbd5e39c2007ac9d3c658e004c915f2ffdb
- MD5 d366d9cb600d92b1b64760419befb313
- SHA1 846d2b17eda33f1f5ae430e300925c102bd07be5
- SHA512 3a2d9a58e35c0096dce752e83ac8bf397ad9945e2cb0a99c851f1b773ac6d1793bfa7c31b885c014679d787e152ad3d19a2c95a7e26297fe34bb3fe062566c4a
- SSDEEP 3072:JFWYtQOH10zIDPpPArjWvUKChvRsacdvS2LdVH3h0:GeQNI7pPArqvUPRny/LdVHa
- TLSH T1FAE313A13494337332DC62709C4A2907CD2391F71093AEEB7DD19B640B78E68A67D9E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Fivem Dumper/fivem_offset_dumper.exe
File Explorer
-
Fivem Dumper.rar.rar 140KB
-
Fivem Dumper/fivem_offset_dumper.exe.exe 313KB
-
Fivem Dumper/fivem_offset_dumper_reconstructed.cpp18KB
-
Fivem Dumper/fivem_sdk_structs.h7KB
-
Fivem Dumper/offsets.txt1KB
Fivem Dumper/fivem_offset_dumper.exe
- IMPHASH 002f8cd87a9af8e88295ca83c81044ad
- SHA256 7ab202f16f8f8c0aa7941085bc9c8fd4b282fbd0a9b7f2d157089b24ddf502a0
- MD5 394e6999d43d39b96671a49470b01d4d
- SHA1 01f84f93c288a8d8d0ec3cccc6376ae77a6d7a18
- SHA512 ce60c9a4b97fcf7c37feec25622e1180804804677eeafb601615fe04ef54909e29fc1de03eaf50ece7ee0ad72492a7dc6a22097bf712302b5af1f9dd6248ee73
- SSDEEP 3072:KRjHknsNVYDafIGerOxhdTL+CqN0uUgwilexmu4jk849mf1vRaAQ1BuSwO2tG/hZ:KRjEsNVhL7uUg94/O3k53uSLd7
- TLSH T1C2647D19F7A918F9E577857CCE424801E672BC0647A0E6CF23A40B962F277E09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
69036
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
GetWindowThreadProcessId
FindWindowA
kernel32
GetStartupInfoW
SetEndOfFile
WriteConsoleW
GetStdHandle
CloseHandle
OpenProcess
ReadProcessMemory
GetConsoleMode
SetConsoleMode
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
SetConsoleTitleA
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
K32EnumProcessModules
K32GetModuleBaseNameA
K32GetModuleInformation
QueryPerformanceCounter
QueryPerformanceFrequency
Sleep
GetCurrentThreadId
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
GetStringTypeW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlUnwind
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
InitializeSListHead
HeapSize
RtlPcToFileHeader
RaiseException
RtlUnwindEx
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
WriteFile
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
VirtualProtect
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
FlushFileBuffers
GetConsoleOutputCP
ReadFile
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
CreateFileW
Name
.text
Size
207KB
Virtual Size
207KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
85KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=172, id=261, version=33145,
count=17, id=260, version=33145,
count=8, id=259, version=33145,
count=10, id=259, version=35207,
count=16, id=260, version=35207,
count=87, id=261, version=35207,
count=5, id=257, version=33145,
count=140, id=1, productName=Unmarked objects,
count=1, id=261, version=35229,
count=1, id=258, version=35229,
Fivem Dumper/fivem_offset_dumper_reconstructed.cpp
- SHA256 255c39cc82218e6b853bb3918463d3b3660b938a99d7ceca89f6c8d2223d6c4c
- MD5 ff870882864ba7157dc39fb0796d36e2
- SHA1 79a274f7b9d1f2338f30f7d48954b980e26c9223
- SHA512 22a74d5f8dc4edae8b37c5b6e3d92d8b43e48f5ad3902cd243154c25db68945962db4cd99e3ef69a9195def09e7e4ebc43ab8c45725bd1851f6bcbecde95d501
- SSDEEP 192:TlLZRca4YSbC6++ytKaW+s0UsJSo6sHQLgIJAykWaSCyPnqodadsjSNXZgS1jfyC:TlLXsWSSw+o7kdy2mXY
- TLSH T17A825448CCB61D9D0943EA291B5F0C01D5BC40170DB6DE2AFE8E43A82F5E31E69BD796
- MD5 SHA1 SHA512 SSDEEP TLSH
Fivem Dumper/fivem_sdk_structs.h
- SHA256 9f616cb5081b42ed6344d88557f0cf8c525f19030bef4ef2c820afbbde2d00d7
- MD5 5078747fd01c0a8c118a4259b43fab76
- SHA1 38152f12d4c54c76ea5993f0fe0b2b2c11a78460
- SHA512 7c5068981aa5d3a7af3fee6dabab1cff0f0241ed1125bc9ec4f04c344bcba3a653840d673b9dea88be134e4dff1b028c07f7bef41b76578be8261c32c5ed777f
- SSDEEP 96:v58C57ex62GmtxLaOAqtoUd4UnLs3U1PQGuu82r4DYSQPOv5ww:vapx6jeLF+UdXLs3nu0DYS4w
- TLSH T15BF19AA40D6748C16D87E1665BC43C0AE565A0A381D2E987FC0E17395F4B7AC4EBD3CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Fivem Dumper/offsets.txt
- SHA256 c5880d7302e4dce8dcecc63feef1df37a9dd904c459b48d44f6cd5c68c1119db
- MD5 99305a321e7c7abca6d6cb9b0b0b94c6
- SHA1 749f8446e5f29e36bf3613c0756cd7f13adaef03
- SHA512 83fb9b3c841d52525c4afff59f17efe86f217c0c70c1de93ad88763a1e67acdfbc6ce74c92272295ac0d752c2353ab0b02f20ab6aaa26d36bfbddced3cf8c23a
- TLSH T1F231381C47CA9B530546B8C5D0460C73BEDB8D1E4982B395F48D99115BEB7B8B8484CF
- MD5 SHA1 SHA512 TLSH