General

Malware Config

Signatures

Files

• 9026f8300c35cbc1294e290cedfd94dab0d4fc29db03bc21bbf0d3814ec2ff66

  .zip
• theHunter Call of the Wild v1.0-v1.21 Plus +13 Trainer.exe

  .exe windows x64

  affa2f94d00b1c91617b7450de103626

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  kernel32

  HeapAlloc

  GetProcessHeap

  HeapFree

  GetProcAddress

  GetModuleHandleW

  GetTickCount

  GetModuleFileNameW

  SetEnvironmentVariableW

  GetCurrentProcess

  OpenProcess

  GetLastError

  DuplicateHandle

  GetCommandLineW

  OpenFileMappingW

  MapViewOfFile

  SetEvent

  UnmapViewOfFile

  CloseHandle

  GetVersionExW

  GetSystemInfo

  VirtualQuery

  GetCommandLineA

  CreateFileW

  CreateFileMappingW

  GetFileSizeEx

  VirtualAlloc

  VirtualFree

  LoadLibraryW

  ExitProcess

  GetModuleHandleA

  Sections

  .text

  Size: 20KB - Virtual size: 20KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 512B - Virtual size: 360B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .xcpad

  Size: - Virtual size: 4.9MB

  .idata

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 28B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 16KB - Virtual size: 16KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ