Der GTA5 exe (Grand Theft Auto V) Rockstar Games Malware Analyse

Der GTA5.exe (Grand Theft Auto V) Scan-Bericht

Aktualisiert 1 year ago

Geprüft von Malware Check

GTA5.exe

Hash-Typ	Wert	Aktion
MD5	e008481c528d1a9573d713f3479d7016
SHA1	ebb6c144c5befe3529235deccbd8f59d6ce1a76c
SHA256	3af30164562e302f249c32b5cf4159793ee2c408749ee6cdea8adafbfc466c03
SHA512	43e01a4431f126e060dc76b4556f5af89ff633f0144556672b73ba852d791149ade06da80672efdbd12cf03cf7bcbbedbfae09baf1e7a1910e1f8d3ef552892b
ImpHash	3320e9c3535ea5b10ea6bd719c10de9f

Hash-Typ

Wert

Aktion

MD5

e008481c528d1a9573d713f3479d7016

SHA1

ebb6c144c5befe3529235deccbd8f59d6ce1a76c

SHA256

3af30164562e302f249c32b5cf4159793ee2c408749ee6cdea8adafbfc466c03

SHA512

43e01a4431f126e060dc76b4556f5af89ff633f0144556672b73ba852d791149ade06da80672efdbd12cf03cf7bcbbedbfae09baf1e7a1910e1f8d3ef552892b

ImpHash

3320e9c3535ea5b10ea6bd719c10de9f

PE-Analyse

Grundlegende Informationen

▼

Symbol	Hash: 07e59a7bd557acfb0ecb8c49faa593f9 Unscharf: 3a6a6634ab6af7dbf5d42137f2667cbb dHash: 439cdcdc6168b274
Bildbasis	`0x140000000`
Einstiegspunkt	`0x1417e67f4`
Kompilierungszeit	2022-12-08 15:31:36
Prüfsumme	0x02c913c2 (Tatsächlich: 0x02c913c2)
OS-Version	5.2
PEiD-Signaturen	`PE32+ executable (GUI) x86-64, for MS Windows`
PDB-Pfad	`X:\gta5\titleupdate\dev_ng_live\game_win64_master.pdb`
Digitale Signatur	OK
Importe	33 Bibliotheken
Exporte	0 Funktionen
Ressourcen	26 Ressourcen
Abschnitte	11 Abschnitte

Digitale Signaturen

▼

DigiCert Assured ID Root CA	DigiCert Inc (US)
DigiCert SHA2 Assured ID Code Signing CA	Rockstar Games, Inc. (US)
DigiCert Assured ID Root CA	DigiCert Inc (US)
DigiCert Trusted Root G4	DigiCert, Inc. (US)
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA	DigiCert (US)

Versionsinformationen

▼

CompanyName	Rockstar Games
FileDescription	Grand Theft Auto V
FileVersion	1.0.2802.0
InternalName	GTA5.exe
LegalCopyright	Rockstar Games Inc. (C) 2005-2022 Take Two Interactive. All rights reserved.
OriginalFilename	GTA5.exe
ProductName	Grand Theft Auto V
ProductVersion	1.0.2802.0
Translation	0x0409 0x04b0

PE-Abschnitte

▼

Name	Virtuelle Adresse	Virtuelle Größe	Rohgröße	Entropie	Eigenschaften	MD5
`.text`	`0x00001000`	26,844,160 bytes	26,844,160 bytes	8.00 (Gepackt/Verschlüsselt)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`A30B76EC7B8F7E403B34F7E194009DD0`
`BINK`	`0x0199b000`	3,072 bytes	3,072 bytes	7.94 (Gepackt/Verschlüsselt)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`9ED1E324085D08545D06F88D14C0FC1A`
`BINKBSS`	`0x0199c000`	96 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_UNINITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x0199d000`	3,583,488 bytes	3,583,488 bytes	6.10 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`FE29679B8AAEAAEB4484E85CE9668BB5`
`.data`	`0x01d08000`	19,033,096 bytes	2,084,352 bytes	4.71 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`1E5622C9C6A6065E57D8BE31FB9280FE`
`.pdata`	`0x02f2f000`	1,072,128 bytes	1,072,128 bytes	6.66 (Komprimiert)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`D928BD9F61ED29DCCC847724807792AF`
`.tls`	`0x03035000`	2,560 bytes	2,560 bytes	1.71 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`EC97EDA1A48381622E9D6B4105256861`
`BINKCONS`	`0x03036000`	512 bytes	512 bytes	7.53 (Gepackt/Verschlüsselt)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`3E8C2422B2D5FADBC31A31880DAB557B`
`.rsrc`	`0x03037000`	187,904 bytes	187,904 bytes	6.52 (Komprimiert)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`4D3AB290E24A599C3E60D5E6F3172345`
`.reloc`	`0x03065000`	514,560 bytes	514,560 bytes	4.52 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`6BD813778EC2043045B78F6766DD3CD1`
`.text`	`0x030e3000`	12,406,272 bytes	12,406,272 bytes	7.98 (Gepackt/Verschlüsselt)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`ACC8308F2AB0F0B2B401EBEA2B3052F8`

Entropie-Analyse-Warnung

4 Abschnitt(e) mit hoher Entropie (≥7.5) erkannt - mögliche Packung/Verschlüsselung

2 Abschnitt(e) mit erhöhter Entropie (≥6.5) - mögliche Komprimierung

Ressourcenanalyse

▼

Gesamtressourcen: 26 (186,396 Bytes)

Ressourcentyp	Anzahl	Gesamtgröße	Prozentsatz
RT_ICON	24	185,198 Bytes	99.4%
RT_GROUP_ICON	1	342 Bytes	0.2%
RT_VERSION	1	856 Bytes	0.5%

Zertifikatsketten-Analyse

▼

Zertifikat #1

Betreff	DigiCert SHA2 Assured ID Code Signing CA DigiCert Inc US
Aussteller	DigiCert Assured ID Root CA
Seriennummer	`5364131601516814570659357524942475272`

Zertifikat #2

Betreff	Rockstar Games, Inc. Rockstar Games, Inc. US
Aussteller	DigiCert SHA2 Assured ID Code Signing CA
Seriennummer	`20467797731758898505681194379289201981`

Zertifikat #3

Betreff	DigiCert Trusted Root G4 DigiCert Inc US
Aussteller	DigiCert Assured ID Root CA
Seriennummer	`19414496059604725969669510860671817818`

Zertifikat #4

Betreff	DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA DigiCert, Inc. US
Aussteller	DigiCert Trusted Root G4
Seriennummer	`9586110043380832440035821245782711899`

Zertifikat #5

Betreff	DigiCert Timestamp 2022 - 2 DigiCert US
Aussteller	DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA
Seriennummer	`16352681515936560713148055516499426650`

Zertifikat-Verifizierungsstatus

Denken Sie daran: Dies ist das Ergebnis des Online-Virenscanners

Gridinsoft Anti-Malware verfügt über eine viel leistungsstärkere Virenscanning-Engine. Wir empfehlen, sie für eine genauere Diagnose infizierter Systeme zu verwenden. Diese kurze Anleitung hilft Ihnen bei der Installation unseres Flaggschiffprodukts für eine genauere Diagnose:

Anti-Malware herunterladen

Kommentar hinterlassen

Dateiname	GTA5.exe
Dateityp	PE32+ executable (GUI) x86-64, for MS Windows
Scanner-Version	1.0.146.174
Datenbankversion	2023-11-05 19:01:01 UTC