HomeTogether-Win64-Shipping[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

HomeTogether-Win64-Shipping.exe
Size

101.1MB
MD5

0b9e39ad2518a366c9abfb98c437bfd3
SHA1

c0f9be94eebe98cf289276280d28708670aa607c
SHA256

558e457fe569565397612b63650b174b7d900ed1d66d889735a2d1a0398e4931
SHA512

2f695422cb16e40d94510d7c46a208a19651f38d2f82678ae54dcdc3136900ca14d6bbe015151c8c81837a1a0a1c1f572545b6a4af589d9de75bf19f866b8b46
SSDEEP

786432:tEqvOLEqvO/8rMhsf/qcAjqlVCRmov/g3qgZ88wez7:tEqvOLEqvODKfycAjqlksovY3j8SX

Score

N/A

Malware Config

Signatures

Files

HomeTogether-Win64-Shipping.exe
.exe windows x64

a1076aea08be28d93a525c6b78e886c4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

dxgi

CreateDXGIFactory1
CreateDXGIFactory

d3d9

D3DPERF_BeginEvent
D3DPERF_EndEvent

d3d11

D3D11CreateDevice

xinput1_3

ord3
ord2

user32

EnableMenuItem
GetSystemMenu
IsWindowEnabled
DeleteMenu
DrawStateW
UpdateWindow
SetActiveWindow
CloseClipboard
FlashWindowEx
AllowSetForegroundWindow
PeekMessageW
RegisterHotKey
UnregisterHotKey
PostQuitMessage
SetWindowPos
DialogBoxParamW
EnableWindow
ReleaseCapture
SetCapture
GetCapture
RegisterTouchWindow
CloseTouchInputHandle
GetTouchInputInfo
EndDialog
GetDlgItem
SetDlgItemTextW
GetSystemMetrics
SetForegroundWindow
ChangeDisplaySettingsW
GetWindowRect
MessageBoxW
OpenClipboard
GetTopWindow
GetWindowThreadProcessId
EnumDisplaySettingsW
EnumDisplayDevicesW
GetMonitorInfoW
IsZoomed
IsIconic
SetWindowPlacement
GetWindowPlacement
SetLayeredWindowAttributes
ShowWindow
DestroyWindow
IsWindow
CreateWindowExW
EnumDisplayMonitors
MapVirtualKeyW
ActivateKeyboardLayout
ChangeDisplaySettingsExW
GetWindowDisplayAffinity
SetWindowDisplayAffinity
GetDesktopWindow
MessageBoxA
SendInput
GetProcessWindowStation
GetUserObjectInformationW
GetAsyncKeyState
EnumDisplayDevicesA
GetKeyState
GetFocus
GetKeyboardLayoutList
GetMessageExtraInfo
DisableProcessWindowsGhosting
TranslateMessage
DispatchMessageW
GetRawInputDeviceList
RegisterRawInputDevices
GetRawInputDeviceInfoA
GetRawInputData
GetWindowInfo
MonitorFromWindow
MonitorFromRect
MonitorFromPoint
SystemParametersInfoW
CreateIconIndirect
LoadImageW
LoadIconW
LoadCursorFromFileW
GetActiveWindow
SetFocus
EmptyClipboard
GetClipboardData
SetWindowTextW
SetClipboardData
LoadCursorW
CallNextHookEx
UnhookWindowsHookEx
GetForegroundWindow
GetDC
ReleaseDC
BeginPaint
EndPaint
SetWindowRgn
GetClientRect
AdjustWindowRectEx
ShowCursor
SetCursorPos
SetCursor
GetCursorPos
GetClipCursor
ClientToScreen
WindowFromPoint
UnregisterClassW
RegisterClassW
DefWindowProcW
PostMessageW
SendMessageW
ScreenToClient
GetKeyboardLayout
SetWindowsHookExW
GetClassLongPtrW
SetWindowLongW
GetWindowLongW
ClipCursor

advapi32

CryptSetHashParam
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegSetValueExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
CryptEnumProvidersW
GetUserNameW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
RegOpenKeyExW
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW
AllocateLocallyUniqueId

gdi32

GetDeviceCaps
CreateCompatibleDC
DeleteDC
GetTextExtentPoint32W
SwapBuffers
SetPixelFormat
ChoosePixelFormat
CreateBitmap
CreateFontIndirectW
CreateRectRgn
CreateRoundRectRgn
DeleteObject
TextOutW
GetPixel
GetStockObject
PtInRegion
SelectObject
SetBkColor
SetBkMode
SetTextColor
SetTextAlign
CreateDIBSection
GetObjectW

ws2_32

accept
bind
closesocket
__WSAFDIsSet
WSASetLastError
connect
ioctlsocket
getpeername
getsockname
getsockopt
htonl
htons
listen
ntohl
ntohs
inet_pton
getnameinfo
recv
recvfrom
select
send
sendto
freeaddrinfo
getaddrinfo
setsockopt
shutdown
socket
gethostname
WSAStartup
WSACleanup
WSAGetLastError
WSAIoctl

crypt32

CertOpenSystemStoreW
CertCloseStore
CertEnumCertificatesInStore
CertGetNameStringW
CertOpenStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CertGetCertificateContextProperty

wldap32

ord32
ord301
ord200
ord30
ord79
ord46
ord211
ord60
ord35
ord33
ord143
ord27
ord26
ord22
ord41
ord50

normaliz

IdnToAscii

dsound

ord8
ord11
ord12
ord1
ord3
ord6

winmm

timeBeginPeriod
timeEndPeriod
waveOutGetNumDevs

kernel32

SetThreadGroupAffinity
GetNumaNodeProcessorMaskEx
FindResourceW
SizeofResource
LockResource
LoadResource
GetProcAddress
GetModuleHandleExW
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
VirtualFree
VirtualProtect
VirtualAlloc
GetNativeSystemInfo
GetLogicalProcessorInformationEx
GetVersionExW
GetLocalTime
GetSystemTimeAsFileTime
GetSystemTime
GlobalMemoryStatusEx
GetThreadIdealProcessorEx
GetCurrentProcessorNumber
OpenProcess
GetThreadTimes
SwitchToThread
GetExitCodeProcess
TerminateProcess
GetProcessTimes
GetNumaHighestNodeNumber
ReleaseSemaphore
QueryPerformanceFrequency
PeekNamedPipe
SetThreadErrorMode
OutputDebugStringW
GetTempPathW
GetLongPathNameW
QueryFullProcessImageNameW
GetDiskFreeSpaceExW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetNumaProcessorNode
GetNumaNodeProcessorMask
GetProcessHandleCount
GetComputerNameW
VerifyVersionInfoW
GetSystemPowerStatus
GetNumaProcessorNodeEx
GetUserPreferredUILanguages
GetUserDefaultLocaleName
SetConsoleCtrlHandler
GetConsoleWindow
K32GetProcessMemoryInfo
Process32FirstW
Process32NextW
CreateProcessW
SetThreadAffinityMask
SetEnvironmentVariableW
LoadLibraryExA
VirtualQuery
VerifyVersionInfoA
GetSystemDirectoryA
ExpandEnvironmentStringsA
SleepEx
GetEnvironmentVariableW
SleepConditionVariableCS
WakeConditionVariable
InitializeConditionVariable
InitializeCriticalSectionEx
ReadConsoleW
ReadConsoleA
SetConsoleMode
GetConsoleMode
ConvertThreadToFiber
ConvertFiberToThread
RtlVirtualUnwind
CreateFiber
DeleteFiber
SwitchToFiber
K32EnumProcessModules
InitOnceComplete
InitOnceBeginInitialize
GetVersion
GlobalAlloc
GlobalUnlock
GlobalLock
GetLocaleInfoW
GetEnvironmentVariableA
VirtualUnlock
GetLargePageMinimum
SetConsoleTitleA
WriteConsoleA
lstrcmpA
LocalAlloc
LoadLibraryExW
GetSystemDirectoryW
FormatMessageA
AllocConsole
FreeConsole
AttachConsole
GetConsoleScreenBufferInfo
SetConsoleScreenBufferSize
SetConsoleTextAttribute
SetConsoleWindowInfo
FlsFree
FlsSetValue
FlsAlloc
AddVectoredExceptionHandler
RemoveVectoredExceptionHandler
InitializeCriticalSectionAndSpinCount
HeapAlloc
HeapFree
RtlCaptureContext
GetModuleFileNameA
CreateProcessA
GetThreadPriority
RtlLookupFunctionEntry
GetFullPathNameW
UnhandledExceptionFilter
OutputDebugStringA
DebugBreak
GetTempFileNameA
GetTempPathA
GetCommandLineA
LocaleNameToLCID
LCIDToLocaleName
GetUserGeoID
GetGeoInfoW
GetDynamicTimeZoneInformation
GetDateFormatEx
GetTimeFormatEx
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
ResolveLocaleName
GetCurrencyFormatEx
GetNumberFormatEx
GetLocaleInfoEx
GetACP
LoadLibraryA
WideCharToMultiByte
IsProcessorFeaturePresent
InitializeSListHead
GetStartupInfoW
CreateSemaphoreA
GetProcessHeap
CreateSemaphoreW
GetModuleHandleA
GetTickCount64
WaitForSingleObjectEx
IsDebuggerPresent
InitializeCriticalSection
SetCriticalSectionSpinCount
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
QueryPerformanceCounter
GetCurrentThreadId
TlsAlloc
GetStdHandle
GetCommandLineW
FindClose
FindFirstFileW
GetFileType
GetLastError
SetErrorMode
ReleaseMutex
CreateMutexW
Sleep
LocalFree
WriteConsoleW
TryEnterCriticalSection
CreateFileW
GetFileAttributesExW
GetFileSizeEx
SetEndOfFile
SetFilePointerEx
CloseHandle
GetSystemInfo
CreateFileMappingW
MapViewOfFile
FlushViewOfFile
UnmapViewOfFile
MultiByteToWideChar
InitializeSRWLock
AcquireSRWLockShared
ReleaseSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
SetWaitableTimer
CreateWaitableTimerW
LoadLibraryW
FormatMessageW
TlsGetValue
TlsSetValue
TlsFree
HeapSetInformation
SetHandleInformation
CreatePipe
CreateDirectoryW
DeleteFileW
FindNextFileW
FlushFileBuffers
GetFileAttributesW
GetFinalPathNameByHandleW
ReadFile
RemoveDirectoryW
SetFileAttributesW
SetFilePointer
SetFileTime
WriteFile
RaiseException
SetUnhandledExceptionFilter
SetLastError
GetOverlappedResult
SetEvent
ResetEvent
WaitForSingleObject
CreateEventW
WaitForMultipleObjects
GetCurrentProcess
GetCurrentProcessId
ExitProcess
CreateThread
GetCurrentThread
OpenThread
SetThreadPriority
SuspendThread
ResumeThread
GetProcessId
GetThreadContext
SetDllDirectoryW
GetDllDirectoryW
ReOpenFile
MoveFileW
FileTimeToSystemTime
SystemTimeToFileTime
K32EnumProcessModulesEx
K32GetModuleFileNameExW
CreateToolhelp32Snapshot
Thread32First
Thread32Next
RtlCaptureStackBackTrace
VerSetConditionMask
GetFileSize

shell32

CommandLineToArgvW
SHGetFolderPathW
SHGetKnownFolderPath
ShellExecuteW
ShellExecuteExW
SHGetSpecialFolderPathW

ole32

CoTaskMemFree
CoUninitialize
CoCreateInstance
StringFromGUID2
CoCreateGuid
PropVariantClear
OleInitialize
OleUninitialize
RegisterDragDrop
RevokeDragDrop
ReleaseStgMedium
PropVariantCopy
CoInitialize
IIDFromString

oleaut32

SafeArrayCreateVector
SafeArrayPutElement
SysAllocString
SysFreeString
VariantCopy

iphlpapi

GetAdaptersAddresses

setupapi

SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsExW
SetupDiOpenDevRegKey
CM_Locate_DevNodeW
CM_Get_Device_ID_List_SizeW
CM_Get_Device_ID_ListW
SetupDiGetDevicePropertyW
SetupDiGetClassDevsA
SetupGetInfDriverStoreLocationW
CM_Get_Device_IDW

dwmapi

DwmIsCompositionEnabled
DwmFlush
DwmGetCompositionTimingInfo
DwmSetWindowAttribute

imm32

ImmGetDescriptionW
ImmGetIMEFileNameW
ImmGetProperty
ImmCreateContext
ImmDestroyContext
ImmReleaseContext
ImmAssociateContext
ImmGetCompositionStringW
ImmNotifyIME
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmGetContext

uiautomationcore

UiaRaiseAutomationEvent
UiaRaiseAutomationPropertyChangedEvent
UiaClientsAreListening
UiaReturnRawElementProvider
UiaHostProviderFromHwnd

cfgmgr32

CM_MapCrToWin32Err
CM_Get_DevNode_PropertyW

winhttp

WinHttpGetDefaultProxyConfiguration
WinHttpGetIEProxyConfigForCurrentUser

opengl32

wglCreateContext
wglDeleteContext
wglGetCurrentDC
wglGetProcAddress
wglGetCurrentContext
wglMakeCurrent

msvcp140

??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
??Bid@locale@std@@QEAA_KXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
_Thrd_join
_Thrd_yield
_Thrd_id
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_wait
_Cnd_do_broadcast_at_thread_exit
?_Throw_Cpp_error@std@@YAXH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
_Cnd_broadcast
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QEBA_JXZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?_Syserror_map@std@@YAPEBDH@Z

bcrypt

BCryptGenRandom

vcruntime140

__intrinsic_setjmp
__current_exception_context
__current_exception
__CxxFrameHandler3
__std_type_info_name
__RTtypeid
_CxxThrowException
longjmp
__std_exception_destroy
__std_exception_copy
_set_purecall_handler
wcsrchr
wcschr
__RTDynamicCast
strchr
__std_terminate
strstr
wcsstr
__std_type_info_compare
_purecall
__C_specific_handler
memcpy
memmove
memset
strrchr
memcmp
memchr

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_beginthreadex
_endthreadex
__sys_nerr
_register_onexit_function
_errno
_invalid_parameter_noinfo
_initialize_narrow_environment
_configure_narrow_argv
_crt_atexit
_cexit
terminate
_initialize_onexit_table
abort
_invoke_watson
_invalid_parameter_noinfo_noreturn
_seh_filter_exe
_set_app_type
_get_narrow_winmain_command_line
_initterm
_initterm_e
_c_exit
_register_thread_local_exe_atexit_callback
_set_invalid_parameter_handler
exit
_exit
signal
raise
strerror
strerror_s
_getpid
_wassert

api-ms-win-crt-utility-l1-1-0

rand
srand
div
bsearch
qsort

api-ms-win-crt-stdio-l1-1-0

clearerr
setbuf
fgets
__stdio_common_vsscanf
_lseeki64
feof
fopen_s
puts
__stdio_common_vsprintf_s
ftell
fseek
fputs
fopen
ferror
__stdio_common_vfprintf
__stdio_common_vswprintf
__stdio_common_vsprintf
ungetc
fwrite
_fseeki64
_fileno
fread
fputc
fgetpos
fgetc
fclose
_get_stream_buffer_pointers
setvbuf
fflush
__stdio_common_vsnprintf_s
_set_fmode
__stdio_common_vfwprintf
__acrt_iob_func
__p__commode
_close
_getcwd
_creat
_isatty
_open_osfhandle
_dup
_dup2
_read
_wfopen
_write
_open
fsetpos
_wfsopen
__stdio_common_vswprintf_s
__stdio_common_vfprintf_s
_setmode

api-ms-win-crt-string-l1-1-0

wcsncmp
_wcsnicmp
_strnicmp
strspn
_wcsdup
wcscpy_s
wcsncpy
wcscat_s
isalpha
tolower
strncpy
iscntrl
isxdigit
strlen
_stricmp
_strdup
_wcsicmp
strcspn
strncmp
isdigit
strcmp
strncpy_s
strcpy_s
isspace
strpbrk
isalnum
strnlen
strncat
toupper
iswlower
iswalnum
isupper
islower
isgraph
iswupper
iswalpha
iswspace
isprint
iswxdigit
iswdigit

api-ms-win-crt-math-l1-1-0

_fdopen
frexp
fabs
lroundf
fmodf
sqrtf
roundf
_isnan
sqrt
logf
atan
modf
ceil
sinhf
_finite
trunc
log
ldexp
floorf
__setusermatherr
acos
cos
sin
acosf
asinf
atanf
cosf
expf
pow
powf
sinf
tanf
ceilf
tan
_fdclass
logbf
floor
modff
log10
exp2
exp2f
asin
exp
_dsign
_dclass
atan2
atan2f
round
_dtest
fmod
truncf
log2f

api-ms-win-crt-time-l1-1-0

_time64
__timezone
__tzname
_tzset
_localtime64_s
_gmtime64
strftime
_gmtime64_s

api-ms-win-crt-heap-l1-1-0

realloc
_aligned_malloc
_aligned_free
malloc
free
_get_heap_handle
_heapchk
calloc
_set_new_mode
_aligned_realloc

api-ms-win-crt-filesystem-l1-1-0

_fstat64
_stat64
_stat64i32
remove
_unlock_file
_lock_file
_fstat64i32

api-ms-win-crt-convert-l1-1-0

strtod
atof
atoi
strtoll
_wcstoi64
_strtoi64
wcstoul
_wcstoui64
_wtoi
_wtof
strtol
strtoul
wcstod
_wtoi64

api-ms-win-crt-environment-l1-1-0

_putenv
getenv

api-ms-win-crt-conio-l1-1-0

_cputs

api-ms-win-crt-locale-l1-1-0

__initialize_lconv_for_unsigned_char
_configthreadlocale

Exports

Exports

AmdPowerXpressRequestHighPerformance
D3D12SDKPath
D3D12SDKVersion
NVSDK_NGX_D3D11_AllocateParameters
NVSDK_NGX_D3D11_CreateFeature
NVSDK_NGX_D3D11_DestroyParameters
NVSDK_NGX_D3D11_EvaluateFeature
NVSDK_NGX_D3D11_EvaluateFeature_C
NVSDK_NGX_D3D11_GetCapabilityParameters
NVSDK_NGX_D3D11_GetParameters
NVSDK_NGX_D3D11_GetScratchBufferSize
NVSDK_NGX_D3D11_ReleaseFeature
NVSDK_NGX_D3D11_Shutdown
NVSDK_NGX_D3D11_Shutdown1
NVSDK_NGX_D3D12_AllocateParameters
NVSDK_NGX_D3D12_CreateFeature
NVSDK_NGX_D3D12_DestroyParameters
NVSDK_NGX_D3D12_EvaluateFeature
NVSDK_NGX_D3D12_EvaluateFeature_C
NVSDK_NGX_D3D12_GetCapabilityParameters
NVSDK_NGX_D3D12_GetParameters
NVSDK_NGX_D3D12_GetScratchBufferSize
NVSDK_NGX_D3D12_ReleaseFeature
NVSDK_NGX_D3D12_Shutdown
NVSDK_NGX_D3D12_Shutdown1
NVSDK_NGX_Parameter_GetD
NVSDK_NGX_Parameter_GetD3d11Resource
NVSDK_NGX_Parameter_GetD3d12Resource
NVSDK_NGX_Parameter_GetF
NVSDK_NGX_Parameter_GetI
NVSDK_NGX_Parameter_GetUI
NVSDK_NGX_Parameter_GetULL
NVSDK_NGX_Parameter_GetVoidPointer
NVSDK_NGX_Parameter_SetD
NVSDK_NGX_Parameter_SetD3d11Resource
NVSDK_NGX_Parameter_SetD3d12Resource
NVSDK_NGX_Parameter_SetF
NVSDK_NGX_Parameter_SetI
NVSDK_NGX_Parameter_SetUI
NVSDK_NGX_Parameter_SetULL
NVSDK_NGX_Parameter_SetVoidPointer
NVSDK_NGX_VULKAN_AllocateParameters
NVSDK_NGX_VULKAN_CreateFeature
NVSDK_NGX_VULKAN_CreateFeature1
NVSDK_NGX_VULKAN_DestroyParameters
NVSDK_NGX_VULKAN_EvaluateFeature
NVSDK_NGX_VULKAN_EvaluateFeature_C
NVSDK_NGX_VULKAN_GetCapabilityParameters
NVSDK_NGX_VULKAN_GetParameters
NVSDK_NGX_VULKAN_GetScratchBufferSize
NVSDK_NGX_VULKAN_Init
NVSDK_NGX_VULKAN_ReleaseFeature
NVSDK_NGX_VULKAN_RequiredExtensions
NVSDK_NGX_VULKAN_Shutdown
NVSDK_NGX_VULKAN_Shutdown1
NvOptimusEnablement
agsCheckDriverVersion
agsDeInitialize
agsDriverExtensionsDX11_BeginUAVOverlap
agsDriverExtensionsDX11_CreateDevice
agsDriverExtensionsDX11_CreateFromDevice
agsDriverExtensionsDX11_Destroy
agsDriverExtensionsDX11_DestroyDevice
agsDriverExtensionsDX11_EndUAVOverlap
agsDriverExtensionsDX11_GetMaxClipRects
agsDriverExtensionsDX11_IASetPrimitiveTopology
agsDriverExtensionsDX11_MultiDrawIndexedInstancedIndirect
agsDriverExtensionsDX11_MultiDrawIndexedInstancedIndirectCountIndirect
agsDriverExtensionsDX11_MultiDrawInstancedIndirect
agsDriverExtensionsDX11_MultiDrawInstancedIndirectCountIndirect
agsDriverExtensionsDX11_NumPendingAsyncCompileJobs
agsDriverExtensionsDX11_SetClipRects
agsDriverExtensionsDX11_SetDepthBounds
agsDriverExtensionsDX11_SetDiskShaderCacheEnabled
agsDriverExtensionsDX11_SetMaxAsyncCompileThreadCount
agsDriverExtensionsDX11_SetViewBroadcastMasks
agsDriverExtensionsDX11_WriteBreadcrumb
agsDriverExtensionsDX12_CreateDevice
agsDriverExtensionsDX12_CreateFromDevice
agsDriverExtensionsDX12_Destroy
agsDriverExtensionsDX12_DestroyDevice
agsDriverExtensionsDX12_PopMarker
agsDriverExtensionsDX12_PushMarker
agsDriverExtensionsDX12_SetMarker
agsGetVersionNumber
agsInitialize
agsSetDisplayMode
png_access_version_number
png_benign_error
png_build_grayscale_palette
png_calloc
png_chunk_benign_error
png_chunk_error
png_chunk_warning
png_convert_from_struct_tm
png_convert_from_time_t
png_convert_to_rfc1123
png_create_info_struct
png_create_read_struct
png_create_read_struct_2
png_create_write_struct
png_create_write_struct_2
png_data_freer
png_destroy_info_struct
png_destroy_read_struct
png_destroy_write_struct
png_error
png_free
png_free_data
png_free_default
png_get_IHDR
png_get_PLTE
png_get_bKGD
png_get_bit_depth
png_get_cHRM
png_get_cHRM_fixed
png_get_channels
png_get_chunk_cache_max
png_get_chunk_malloc_max
png_get_color_type
png_get_compression_buffer_size
png_get_compression_type
png_get_copyright
png_get_current_pass_number
png_get_current_row_number
png_get_error_ptr
png_get_filter_type
png_get_gAMA
png_get_gAMA_fixed
png_get_hIST
png_get_header_ver
png_get_header_version
png_get_iCCP
png_get_image_height
png_get_image_width
png_get_int_32
png_get_interlace_type
png_get_io_chunk_name
png_get_io_chunk_type
png_get_io_ptr
png_get_io_state
png_get_libpng_ver
png_get_mem_ptr
png_get_oFFs
png_get_pCAL
png_get_pHYs
png_get_pHYs_dpi
png_get_pixel_aspect_ratio
png_get_pixel_aspect_ratio_fixed
png_get_pixels_per_inch
png_get_pixels_per_meter
png_get_rgb_to_gray_status
png_get_rowbytes
png_get_rows
png_get_sBIT
png_get_sCAL
png_get_sCAL_fixed
png_get_sCAL_s
png_get_sPLT
png_get_sRGB
png_get_signature
png_get_tIME
png_get_tRNS
png_get_text
png_get_uint_16
png_get_uint_31
png_get_uint_32
png_get_unknown_chunks
png_get_user_chunk_ptr
png_get_user_height_max
png_get_user_transform_ptr
png_get_user_width_max
png_get_valid
png_get_x_offset_inches
png_get_x_offset_inches_fixed
png_get_x_offset_microns
png_get_x_offset_pixels
png_get_x_pixels_per_inch
png_get_x_pixels_per_meter
png_get_y_offset_inches
png_get_y_offset_inches_fixed
png_get_y_offset_microns
png_get_y_offset_pixels
png_get_y_pixels_per_inch
png_get_y_pixels_per_meter
png_handle_as_unknown
png_info_init_3
png_init_io
png_longjmp
png_malloc
png_malloc_default
png_malloc_warn
png_permit_mng_features
png_read_end
png_read_image
png_read_info
png_read_png
png_read_row
png_read_rows
png_read_update_info
png_reset_zstream
png_save_int_32
png_save_uint_16
png_save_uint_32
png_set_IHDR
png_set_PLTE
png_set_add_alpha
png_set_bKGD
png_set_background
png_set_background_fixed
png_set_benign_errors
png_set_bgr
png_set_cHRM
png_set_cHRM_fixed
png_set_chunk_cache_max
png_set_chunk_malloc_max
png_set_compression_buffer_size
png_set_compression_level
png_set_compression_mem_level
png_set_compression_method
png_set_compression_strategy
png_set_compression_window_bits
png_set_crc_action
png_set_error_fn
png_set_expand
png_set_expand_16
png_set_expand_gray_1_2_4_to_8
png_set_filler
png_set_filter
png_set_filter_heuristics
png_set_filter_heuristics_fixed
png_set_flush
png_set_gAMA
png_set_gAMA_fixed
png_set_gamma
png_set_gamma_fixed
png_set_gray_to_rgb
png_set_hIST
png_set_iCCP
png_set_interlace_handling
png_set_invalid
png_set_invert_alpha
png_set_invert_mono
png_set_keep_unknown_chunks
png_set_longjmp_fn
png_set_mem_fn
png_set_oFFs
png_set_pCAL
png_set_pHYs
png_set_packing
png_set_packswap
png_set_palette_to_rgb
png_set_quantize
png_set_read_fn
png_set_read_status_fn
png_set_read_user_chunk_fn
png_set_read_user_transform_fn
png_set_rgb_to_gray
png_set_rgb_to_gray_fixed
png_set_rows
png_set_sBIT
png_set_sCAL
png_set_sCAL_fixed
png_set_sCAL_s
png_set_sPLT
png_set_sRGB
png_set_sRGB_gAMA_and_cHRM
png_set_shift
png_set_sig_bytes
png_set_strip_16
png_set_strip_alpha
png_set_swap
png_set_swap_alpha
png_set_tIME
png_set_tRNS
png_set_tRNS_to_alpha
png_set_text
png_set_unknown_chunk_location
png_set_unknown_chunks
png_set_user_limits
png_set_user_transform_info
png_set_write_fn
png_set_write_status_fn
png_set_write_user_transform_fn
png_sig_cmp
png_start_read_image
png_warning
png_write_chunk
png_write_chunk_data
png_write_chunk_end
png_write_chunk_start
png_write_end
png_write_flush
png_write_image
png_write_info
png_write_info_before_PLTE
png_write_png
png_write_row
png_write_rows
png_write_sig
src_callback_new
src_callback_read
src_clone
src_delete
src_error
src_float_to_int_array
src_float_to_short_array
src_get_channels
src_get_description
src_get_name
src_get_version
src_int_to_float_array
src_is_valid_ratio
src_new
src_process
src_reset
src_set_ratio
src_short_to_float_array
src_simple
src_strerror

Sections

.text
Size: 73.9MB - Virtual size: 73.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20.6MB - Virtual size: 20.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.4MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msvcjmc
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a1076aea08be28d93a525c6b78e886c4

Headers

DLL Characteristics

File Characteristics

Imports

dxgi

d3d9

d3d11

xinput1_3

user32

advapi32

gdi32

ws2_32

crypt32

wldap32

normaliz

dsound

winmm

kernel32

shell32

ole32

oleaut32

iphlpapi

setupapi

dwmapi

imm32

uiautomationcore

cfgmgr32

winhttp

opengl32

msvcp140

bcrypt

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-conio-l1-1-0

api-ms-win-crt-locale-l1-1-0

Exports

Exports

Sections

.text Size: 73.9MB - Virtual size: 73.9MB

.rdata Size: 20.6MB - Virtual size: 20.6MB

.data Size: 1.4MB - Virtual size: 4.7MB

.pdata Size: 3.5MB - Virtual size: 3.5MB

.rodata Size: 4KB - Virtual size: 4KB

.msvcjmc Size: 512B - Virtual size: 8B

_RDATA Size: 222KB - Virtual size: 221KB

.rsrc Size: 16KB - Virtual size: 15KB

.reloc Size: 1.5MB - Virtual size: 1.5MB

.text
Size: 73.9MB - Virtual size: 73.9MB

.rdata
Size: 20.6MB - Virtual size: 20.6MB

.data
Size: 1.4MB - Virtual size: 4.7MB

.pdata
Size: 3.5MB - Virtual size: 3.5MB

.rodata
Size: 4KB - Virtual size: 4KB

.msvcjmc
Size: 512B - Virtual size: 8B

_RDATA
Size: 222KB - Virtual size: 221KB

.rsrc
Size: 16KB - Virtual size: 15KB

.reloc
Size: 1.5MB - Virtual size: 1.5MB