home

gta-sa.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from am4-r1f9-stor05.uploaded.net and multiple other hosts.
MD5:
edb31aa9fa23683ac1c7d08afecf798d

SHA-1:
7109023c7c24f11e0c959cf10b38929dfb2a5c98

SHA-256:
18ade15e47215160aaa78a5c225a3d7f1fd21c3877b186b1fb92ccee530468e8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/28/2024 6:52:31 AM UTC  (today)

File size:
6 MB (6,248,379 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
12/1/2013 1:08:28 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:BiPhyjYjVV7p3RfkRA17bUEGicppwrz9jX9gMFxWoPqEJuZb:4PqYpVV3RfJ17s2tvPcx

Entry address:
0x108AF

Entry point:
E8, 9C, 58, 00, 00, E9, 78, FE, FF, FF, 55, 8B, EC, 83, EC, 04, 89, 7D, FC, 8B, 7D, 08, 8B, 4D, 0C, C1, E9, 07, 66, 0F, EF, C0, EB, 08, 8D, A4, 24, 00, 00, 00, 00, 90, 66, 0F, 7F, 07, 66, 0F, 7F, 47, 10, 66, 0F, 7F, 47, 20, 66, 0F, 7F, 47, 30, 66, 0F, 7F, 47, 40, 66, 0F, 7F, 47, 50, 66, 0F, 7F, 47, 60, 66, 0F, 7F, 47, 70, 8D, BF, 80, 00, 00, 00, 49, 75, D0, 8B, 7D, FC, 8B, E5, 5D, C3, 55, 8B, EC, 83, EC, 10, 89, 7D, FC, 8B, 45, 08, 99, 8B, F8, 33, FA, 2B, FA, 83, E7, 0F, 33, FA, 2B, FA, 85, FF, 75, 3C, 8B...
 
[+]

Entropy:
7.9803  (probably packed)

Code size:
98 KB (100,352 bytes)

The file gta-sa.exe has been seen being distributed by the following 49 URLs.

http://am4-r1f9-stor05.uploaded.net/.../50106554-fe45-4938-b077-89ba4771ffe1

http://fileshare1300.dfiles.eu/auth-146847281089835c668974bd9a1e3ac6-77.239.93.245-2620854460-165403282-guest/.../GTA-SA.exe

http://am4-r1f9-stor05.uploaded.net/.../ece5146a-0642-4a0c-bd87-d3d0739f2a23

http://am4-r1f9-stor05.uploaded.net/.../e3525e25-45de-4736-9326-65b1ea585e5d

http://am4-r1f9-stor05.uploaded.net/.../235b18f3-ec41-48a0-a6d7-68e58a0575d5

http://am4-r1f9-stor05.uploaded.net/.../f2279b86-dc91-45c5-94c1-f79127c6f0d9

http://am4-r1f9-stor05.uploaded.net/.../e184ced1-4995-4043-bc51-905b0c4bf1dc

http://am4-r1f9-stor05.uploaded.net/.../caf85777-10ab-445f-98ee-c3d4bd307a5e

http://am4-r1f9-stor05.uploaded.net/.../292fe8c3-bb70-4512-be20-11f204c5ebde

http://am4-r1f9-stor05.uploaded.net/.../9b5c3a01-c8eb-4ae7-ab3b-4b4c2b0f4d81

http://am4-r1f9-stor05.uploaded.net/.../7392a6ae-c51d-4053-9d8d-32f91920d2ef

http://am4-r1f9-stor05.uploaded.net/.../ba1a133b-3851-4353-855f-4fb5bdd84f07

http://am4-r1f9-stor05.uploaded.net/.../4cef90f9-f06f-4490-bcc8-08963e611d60

http://am4-r1f9-stor05.uploaded.net/.../1915cb73-dd66-4530-8ddf-67a14e31f853

http://am4-r1f9-stor05.uploaded.net/.../5d8c55a0-00d4-4c56-a589-7bfe5eaa7720

http://am4-r1f9-stor05.uploaded.net/.../b65e14e9-69b5-4463-a504-6b6e9183facc

http://am4-r1f9-stor05.uploaded.net/.../124f4112-c53c-4e25-99a8-c2c565d5a545

http://am4-r1f9-stor05.uploaded.net/.../6588e5c3-1213-46d2-9650-f25bb8148a36

http://am4-r1f9-stor05.uploaded.net/.../3ab8b394-b7a1-472a-9d41-bffaa675450b

http://am4-r1f9-stor05.uploaded.net/.../e24d659d-9479-4c95-844c-f8b49f57ce60

http://am4-r1f9-stor05.uploaded.net/.../94682f3f-db70-4fbd-a073-3960c2c3d8fb

http://am4-r1f9-stor05.uploaded.net/.../1e0ccb56-afef-4f13-9230-6fd6ca7e458f

http://am4-r1f9-stor05.uploaded.net/.../391cf98d-4dab-41cc-8f46-8d17c53da16e

http://am4-r1f9-stor05.uploaded.net/.../db41b0bf-a19c-46bc-bc81-ffb636a7afa3

http://am4-r1f9-stor05.uploaded.net/.../25bcc98c-aedf-4a7b-af9e-632ff310c882

http://am4-r1f9-stor05.uploaded.net/.../dab46b9c-4de7-4d1a-bc0f-d51ed10db960

http://am4-r1f9-stor05.uploaded.net/.../f3603f69-534a-49f3-bd01-0a1cd08f006e

http://am4-r1f9-stor05.uploaded.net/.../a22ac26b-2f8c-4722-b1b2-5f17b382cc3e

http://am4-r1f9-stor05.uploaded.net/.../26d07ff5-44e9-43e1-8681-bf4116de1382

http://am4-r1f9-stor05.uploaded.net/.../a64b443a-d1a1-4871-9c76-1b9f5eb6fdc0

Latest 30 of 49 download URLs

Scan gta-sa.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.