d62eb92208a6b197b46ffa709b38f6d340efe7761e17e9288065a4284042d9ff

Sharing

Copy URL

Twitter E-mail

General

Target

d62eb92208a6b197b46ffa709b38f6d340efe7761e17e9288065a4284042d9ff
Size

544KB
MD5

ff6f676b069ffa93d9a6ed60c001bc52
SHA1

0dd95e474da5bf509e35884472e251b8df35d341
SHA256

d62eb92208a6b197b46ffa709b38f6d340efe7761e17e9288065a4284042d9ff
SHA512

0b60b2d2fdcd83ac883f9cbeb0601d0beff742789a0ceade3318ac2abd8bf4c48608746d47f8d3f0ae4e0ddb56cad2fb58041a72691da6473cb71e5f2092f517
SSDEEP

6144:M44R+R/8iZGz3mAt7WiO7K0EiaNXcBJ/nzpzSC3Wbx2i+y6:5V8iZGtt78kd+zB3WbQ

Score

N/A

Malware Config

Signatures

Files

d62eb92208a6b197b46ffa709b38f6d340efe7761e17e9288065a4284042d9ff
.exe windows x86

60b48dfa86f6343f170c28e3bd246341

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

inpshared

?inp_shared_init@prism@@YAXPAX@Z

sndshared

?snd_shared_init@prism@@YAXPAX@Z
?snd_shared_shutdown@prism@@YAXXZ
??0listener_t@sound@prism@@QAE@XZ
?set_listener@device_t@sound@prism@@QAEXABVlistener_t@23@@Z
?update_attributes@channel_t@sound@prism@@QAEXABVattributes_t@23@@Z
?get_playback_state@channel_t@sound@prism@@QAE_NXZ
?enable_playback@channel_t@sound@prism@@QAEX_N@Z
?close_channel@device_t@sound@prism@@QAEXQAVchannel_t@23@@Z
?open_channel@device_t@sound@prism@@QAEPAVchannel_t@23@ABVstring@3@I@Z
?snd_proc_init@prism@@YAXXZ

p3core

?v_snprintf0@prism@@YAHQADIPBDZZ
?v_strerror@prism@@YAPBDH@Z
?fs_append@prism@@YA?AVret_t@?$auto_ptr_t@Vfile_t@prism@@@1@ABVstring@1@W4fs_realm_t@1@@Z
?printf@file_t@prism@@QAAXQBDZZ
?inherits_from@unit_system_t@prism@@SA_NQBUunit_descriptor_t@2@0@Z
?printf@mstring_t@prism@@QAA_NPBDZZ
?v_get_extension@prism@@YA_NABVstring@1@QAVmstring_t@1@@Z
??0message_handler_t@prism@@QAE@XZ
?size@file_t@prism@@QAE_KXZ
?fs_open@prism@@YA?AVret_t@?$auto_ptr_t@Vfile_t@prism@@@1@ABVstring@1@W4fs_realm_t@1@@Z
?read@file_t@prism@@QAE_NQAXI@Z
?v_debug_break@prism@@YAXXZ
p3core_system_new
p3core_system_delete
?NUL_CHAR@string@prism@@2PBDB
?message@prism@@YAXQBDZZ
?string_to_float@prism@@YA_NQAMABVstring@1@@Z
p3core_system_delete_vector
?add_to_garbage@unit_system_t@prism@@SAXQAVunit_base_t@2@@Z
p3core_system_new_vector
?error@prism@@YAXQBDZZ
?create_unit@unit_system_t@prism@@QAEPAVunit_base_t@2@ABUunit_descriptor_t@2@@Z
?set_pars@bmem_manager_t@prism@@QAEXII@Z
?remove_pos@vptrlist_t@prism@@QAEPAXPAUvptrlist_node_t@2@@Z
?find_ptr@vptrlist_t@prism@@QBEPAUvptrlist_node_t@2@PBXPAU32@@Z
??0bmem_manager_t@prism@@QAE@XZ
??1bmem_manager_t@prism@@QAE@XZ
?append@vdatalist_t@prism@@QAEPAUvdatalist_node_t@2@XZ
?remove_pos@vdatalist_t@prism@@QAEXPAUvdatalist_node_t@2@@Z
?append@vptrlist_t@prism@@QAEPAUvptrlist_node_t@2@PAX@Z
?insert@vptrlist_t@prism@@QAEPAUvptrlist_node_t@2@PAX@Z
?tell@mbio_t@prism@@QAEPAXXZ
?open@mbio_t@prism@@QAEHPAXI@Z
?write@mbio_t@prism@@QAEPAXPBXI@Z
?insert@chunk_space_t@prism@@QAEPAUvdatalist_node_t@2@PBXI@Z
?remove@chunk_space_t@prism@@QAE_NPAUvdatalist_node_t@2@@Z
?v_abort_fail@prism@@YAXQBD0I0@Z
?warning@prism@@YAXQBDZZ
??0chunk_space_t@prism@@QAE@I@Z
??1chunk_space_t@prism@@QAE@XZ
?v_snprintf@prism@@YAHQADIPBDZZ
?v_stpncpy_impl@prism@@YAPADPADPBDI@Z
?init_mm@vdatalist_t@prism@@QAEXIIPAVbmem_manager_t@2@@Z
fptr_mm_memcpy
?compute_matrix@placement_t@prism@@QBEXQAU?$mat_sq_t@M$03@2@@Z
?compute_inverse_matrix@placement_t@prism@@QBEXQAU?$mat_sq_t@M$03@2@@Z
?unit_descriptor@unit_t@prism@@2Uunit_descriptor_t@2@B
?r_ortho_projection_matrix@prism@@YAXQAU?$mat_sq_t@M$03@1@ABVrect_t@1@MM@Z
?register_class@unit_bank_t@prism@@QAE_NABUunit_descriptor_t@2@@Z
?get_name_suffix@unit_base_t@prism@@UBE_KXZ
?get_name@unit_base_t@prism@@UBE_NQAVmstring_t@2@@Z
?is_nameless@unit_base_t@prism@@UBE_NXZ
?is_anonymous@unit_base_t@prism@@UBE_NXZ
?get_default@unit_system_t@prism@@SAPAV12@XZ
?_destroy_attributes@unit_base_t@prism@@IAEXABUunit_descriptor_t@2@@Z
?_clone_attributes_to@unit_base_t@prism@@IBE_NABUunit_descriptor_t@2@QAV12@@Z
?get_system@unit_system_t@prism@@SAPAV12@I@Z
?compute_fingerprint@unit_system_t@prism@@SAIABVstring@2@@Z
?insert@vptrlist_t@prism@@QAEPAUvptrlist_node_t@2@PAU32@PAX@Z
?verbose@prism@@YAXQBDZZ
?clean_garbage@unit_system_t@prism@@SAXXZ
?fs_create@prism@@YA?AVret_t@?$auto_ptr_t@Vfile_t@prism@@@1@ABVstring@1@W4fs_realm_t@1@@Z
?get_current_time_slow@vtimer_t@prism@@IBENXZ
?tmr_read@prism@@YA_KXZ
?tmr_get_cycles@prism@@YA_KXZ
?set_usec@vtimer_t@prism@@QAEX_K@Z
?v_bit_scan_forward_impl@prism@@YAII@Z
??1unit_bank_t@prism@@QAE@XZ
?mem_info@prism@@YAXQAI000@Z
??0unit_system_t@prism@@QAE@AAVunit_bank_t@1@@Z
??0unit_bank_t@prism@@QAE@XZ
?copy@mstring_t@prism@@QAE_NABVstring@2@III@Z
??1message_handler_t@prism@@UAE@XZ
??0file_logger_t@prism@@QAE@ABVstring@1@I@Z
??1file_logger_t@prism@@UAE@XZ
??0dl_lib_t@prism@@QAE@XZ
??1dl_lib_t@prism@@QAE@XZ
??4dl_lib_t@prism@@QAEAAV01@ABV01@@Z
?register_only@dl_lib_t@prism@@QAE_NXZ
??0dl_lib_t@prism@@QAE@ABVstring@1@@Z
?register_and_execute@dl_lib_t@prism@@QAE_NIQAX@Z
?get_main_handle@dl_lib_t@prism@@SAPAUHINSTANCE__@@XZ
?lookup_data@dl_lib_t@prism@@QBEPAXABVstring@2@@Z
?lookup_code@dl_lib_t@prism@@QBEP6AXXZABVstring@2@@Z
?unregister@dl_lib_t@prism@@QAE_NXZ
??1text_parser_t@prism@@QAE@XZ
?read_line@text_parser_t@prism@@QAEIPADI@Z
?set_buffer@text_parser_t@prism@@QAEXPBXI@Z
??0text_parser_t@prism@@QAE@XZ
?cdl_argv@prism@@YAPBDI@Z
?cdl_argc@prism@@YAIXZ
?cdl_param@prism@@YAIQBDI@Z
?cpu_display_info@prism@@YAXXZ
?EMPTY@string@prism@@2ABV12@B
?dumper_shutdown@prism@@YAXXZ
?p3core_shutdown@prism@@YAXXZ
?p3core_init@prism@@YAXQ6APAXI@Z0Q6AXPAX@Z2_N@Z
?_clone_to@unit_t@prism@@IBE_NQAV12@@Z
??0unit_t@prism@@QAE@QAVunit_system_t@1@@Z
?_call_post_load@unit_t@prism@@UAE_NXZ
?_call_pre_load@unit_t@prism@@UAEXXZ
?_call_post_save@unit_t@prism@@UAE_NXZ
?_call_pre_save@unit_t@prism@@UAE_NXZ
?destroy@unit_t@prism@@UAEXXZ
??1unit_t@prism@@MAE@XZ
?is_anonymous@unit_t@prism@@UBE_NXZ
?is_nameless@unit_t@prism@@UBE_NXZ
?get_name@unit_t@prism@@UBE_NQAVmstring_t@2@@Z
?get_name_suffix@unit_t@prism@@UBE_KXZ
?dumper_init@prism@@YAXXZ
?dumper_set_file_name@prism@@YAXQBD@Z
?cdl_init@prism@@YAXHPBQBD@Z

p3shared

?unit_descriptor@resource_unit_u@prism@@2Uunit_descriptor_t@2@B
?_clone_to@resource_unit_u@prism@@IBE_NQAV12@@Z
?_call_post_load@resource_unit_u@prism@@UAE_NXZ
?_call_pre_load@resource_unit_u@prism@@UAEXXZ
?_call_post_save@resource_unit_u@prism@@UAE_NXZ
?_call_pre_save@resource_unit_u@prism@@UAE_NXZ
?destroy@resource_unit_u@prism@@UAEXXZ
?unbind_item@resource_unit_u@prism@@UAEXQAVc_item_t@2@@Z
?bind_item@resource_unit_u@prism@@UAEXQAVc_item_t@2@@Z
??0resource_unit_u@prism@@QAE@QAVunit_system_t@1@@Z
?ufs_plain_load@prism@@YAPAXQAVc_item_t@1@@Z
??1resource_unit_u@prism@@MAE@XZ
?unload_memory@resource_unit_u@prism@@UAEXXZ
?pre_move@resource_unit_u@prism@@UAEXQAX0@Z
?post_move@resource_unit_u@prism@@UAEXQAX0@Z
?hw_load@resource_unit_u@prism@@UAEXXZ
?hw_unload@resource_unit_u@prism@@UAEXXZ
?refresh_item@resource_unit_u@prism@@UAE?AW4refresh_result_t@2@XZ
??1resource_loader_t@prism@@UAE@XZ
?get_resource_type@resource_loader_t@prism@@UAEPBUunit_descriptor_t@2@ABVstring@2@0@Z
?store@cvar_t@prism@@QBE_NAAVfile_t@2@@Z
?is_read_only@cvar_t@prism@@QBE_NXZ
?link@cvar_t@prism@@QAEXQAV12@@Z
?print@cvar_t@prism@@QBEXXZ
?unlink@cvar_t@prism@@QAEXXZ
?p3shared_init@prism@@YAXPAX@Z
?p3shared_startup@prism@@YAXXZ
?p3shared_shutdown@prism@@YAXXZ
?reset@cvar_t@prism@@QAEXXZ
?is_empty@cmd_queue_t@prism@@QBE_NXZ
?pop@cmd_queue_t@prism@@QAE_NXZ
?peek@cmd_queue_t@prism@@QBEABVstring@2@XZ
?append@cmd_queue_t@prism@@QAEXABVstring@2@@Z
?reset@cmd_queue_t@prism@@QAEXXZ
?do_separate@arg_t@prism@@AAE_NQBDDH_N@Z
?error@vprocess_t@prism@@QAAXPBDZZ
?update@vprocess_t@prism@@QAEXN@Z
packet_ushort1
packet_ubyte4_const
packet_float3
packet_float2
packet_ubyte4
?unit_descriptor@pp_model_u@prism@@2Uunit_descriptor_t@2@B
?get_size@material_t@prism@@QAE_NQAI00@Z
?set_vpacket@r_proto_t@prism@@QAEXIQAVr_packet_t@2@@Z
?set_ipacket@r_proto_t@prism@@QAEXQAVr_packet_t@2@@Z
?set_material@r_proto_t@prism@@QAEXQAVc_item_t@2@@Z
?gfx_view_get@prism@@YAPAVviewport_t@1@XZ
?unit_descriptor@pp_camera_u@prism@@2Uunit_descriptor_t@2@B
?_call_post_load@pp_model_u@prism@@UAE_NXZ
?_call_pre_load@pp_model_u@prism@@UAEXXZ
?_call_post_save@pp_model_u@prism@@UAE_NXZ
?_call_pre_save@pp_model_u@prism@@UAE_NXZ
?destroy@pp_model_u@prism@@UAEXXZ
??0pp_model_u@prism@@QAE@QAVunit_system_t@1@@Z
??1pp_model_u@prism@@MAE@XZ
?_destroy_self@r_packet_t@prism@@AAEXXZ
?free@r_packet_t@prism@@QAEXXZ
?free@r_proto_t@prism@@QAEXXZ
??0r_packet_t@prism@@QAE@XZ
?_destroy_self@r_buffer_t@prism@@AAEXXZ
?set@cvar_t@prism@@QAE_NQBD@Z
?find@def_pool_t@prism@@QBEPAVdef_obj_t@2@PBDI_N@Z
?get_value@def_obj_t@prism@@QBEPBDQBDI@Z
?get_bool@def_obj_t@prism@@QBE_NQBDI@Z
?get_int@def_obj_t@prism@@QBEHQBDI@Z
?clear@def_pool_t@prism@@QAEXXZ
?new_object@def_pool_t@prism@@QAEPAVdef_obj_t@2@PBDI@Z
?add_object@def_pool_t@prism@@QAEXPAVdef_obj_t@2@@Z
?set_value@def_obj_t@prism@@QAEXPBD0I@Z
?set_int@def_obj_t@prism@@QAEXPBDHI@Z
?set_bool@def_obj_t@prism@@QAEXPBD_NI@Z
?handler@vprocess_t@prism@@UAEXXZ
?message@vprocess_t@prism@@QAAXPBDZZ
?system@vprocess_t@prism@@UAEXXZ
?unlock@vprocess_t@prism@@QAEXXZ
?lock@vprocess_t@prism@@QAEXXZ
??1vprocess_t@prism@@UAE@XZ
??0vprocess_t@prism@@QAE@H@Z
?set_name@vprocess_t@prism@@QAEXPBD@Z
?shutdown@vprocess_t@prism@@UAEX_N@Z
??0bindery_t@prism@@QAE@W4bindery_phase_t@01@@Z
??1bindery_t@prism@@QAE@XZ
?update_cvar@bindery_t@prism@@QAE_NAAVcvar_t@2@@Z
?update_command@bindery_t@prism@@QAE_NAAVcmd_t@2@I@Z
?_clone_to@pp_model_u@prism@@IBE_NQAV12@@Z

gfxshared

?gfx_shared_init@prism@@YAXPAX@Z
?rend_proc_init@prism@@YAXXZ
?device_get@r_driver_t@prism@@QAEPAVr_device_t@2@I@Z
?device_count@r_driver_t@prism@@QAEIXZ
?reset_stats@r_context_base_t@prism@@QAEXXZ

msvcr71

_stricmp
_ismbblead
_cexit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
_controlfp
_exit
_c_exit
memmove
__p___argv
__p___argc
strrchr
strncpy
realloc
_msize
exit
free
malloc
strtoul
strtod
_purecall
strtol
_XcptFilter

wsock32

WSACleanup
ioctlsocket
htonl
htons
inet_addr
ntohs
setsockopt
getsockopt
inet_ntoa
WSAGetLastError
closesocket
bind
sendto
recvfrom
socket

kernel32

GetVersionExA
GetLastError
VirtualAlloc
VirtualFree
SetCurrentDirectoryA
GetCurrentDirectoryA
Sleep
GetModuleHandleA
SetPriorityClass
GetCurrentProcess
GetStartupInfoA

user32

CreateWindowExA
DestroyWindow
LoadIconA
SetWindowTextA
RegisterClassA
SetWindowLongA
BeginPaint
EndPaint
GetClientRect
EnumDisplaySettingsA
GetKeyboardState
DefWindowProcA
UnregisterClassA
TranslateMessage
DispatchMessageA
PeekMessageA
RedrawWindow
GetWindowRect
GetDesktopWindow
AdjustWindowRectEx
GetSystemMetrics
SetWindowPos
UpdateWindow
SetActiveWindow
AttachThreadInput
SetForegroundWindow
GetWindowThreadProcessId
GetForegroundWindow
SetFocus
ShowWindow
GetWindowLongA
ScreenToClient
ShowCursor
GetCursorPos
SetCapture
ReleaseCapture
SetCursorPos
ClientToScreen
CloseWindow

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

Exports

Exports

_cmd_execute
_cmd_execute_block
_cmd_register_command
_cvar_register_variable
_gfx_sprite
_inp_bind_command
_inp_bind_impulse
_inp_get_impulse_code
_inp_get_impulse_name
_inp_get_trigger_code
_inp_get_trigger_name
_inp_joy_set_dead_zone
_inp_name_impulse
_inp_restore_bindings
_inp_search_trigger_command
_inp_search_trigger_impulse
_inp_unbind_impulse
_mm_hw_free_all
_mm_hw_free_unreferenced
_mm_mem_free_all
_mm_mem_free_unreferenced
_mm_obtain_resource
_mm_remove_unreferenced
_snd_create
_snd_create_oneshot
cmd_get
cmd_get_list
cmd_process_queue
cmd_register_queue
cmd_unregister_command
cmd_unregister_queue
cvar_get
cvar_get_list
cvar_link
cvar_unlink
cvar_unregister_variable
dll_handle
dll_lookup_code
dll_lookup_data
dll_ready_to_unload
dll_register
dll_register_and_execute
get_engine_ubank
get_engine_usystem
gfx_alloc_buffer
gfx_alloc_packet
gfx_alloc_proto
gfx_available_path
gfx_available_path_count
gfx_begin_frame
gfx_bitmap
gfx_cache_alloc
gfx_cache_data
gfx_cache_pop
gfx_cache_push
gfx_cache_sweep
gfx_device_count
gfx_device_enum
gfx_device_get
gfx_device_get_hw_state
gfx_device_init
gfx_device_shutdown
gfx_drawable_begin_update
gfx_drawable_context
gfx_drawable_create
gfx_drawable_destroy
gfx_drawable_end_update
gfx_drawable_get_size
gfx_driver_count
gfx_driver_enum
gfx_driver_get
gfx_driver_name
gfx_driver_register
gfx_driver_unregister
gfx_end_frame
gfx_fbuffer_create
gfx_fbuffer_destroy
gfx_free_buffer
gfx_free_packet
gfx_free_proto
gfx_get_anisotropy_factor
gfx_get_default_buffer
gfx_get_desktop_mode
gfx_get_image
gfx_get_texture_detail
gfx_hw_flush
gfx_hw_free
gfx_hw_load
gfx_init_devices
gfx_is_active
gfx_is_path_available
gfx_line_plain
gfx_line_strip
gfx_mode_count
gfx_mode_current
gfx_mode_get
gfx_mode_init
gfx_mode_shutdown
gfx_pixelformat_choose
gfx_quirks_enabled
gfx_reset_stats
gfx_screen_capture
gfx_set_active
gfx_set_gamma
gfx_set_rendering_device
gfx_set_win_properties
gfx_shutdown_devices
gfx_sub_bitmap
gfx_swapbuffers
gfx_texel_offset
gfx_try_capture
hw_device_count
hw_device_get
hw_device_insert
hw_device_remove
hw_init
hw_revive
hw_shutdown
hw_suspend
inp_cursor_info
inp_cursor_info_set
inp_event
inp_fetch_keycode
inp_force_change
inp_force_create
inp_force_destroy
inp_force_play
inp_force_stop
inp_freeze_input
inp_get_mouse_sensitivity
inp_handle_impulses
inp_impulse_is_activated
inp_impulse_value
inp_init_devices
inp_init_input
inp_is_active
inp_joy_get_axis_name
inp_joy_get_count
inp_joy_get_dead_zone
inp_joy_get_name
inp_joy_switch
inp_mouse_reports_delta
inp_reset_impulses
inp_reset_keycode_queue
inp_set_active
inp_set_mouse_reports_delta
inp_set_mouse_sensitivity
inp_shutdown_devices
inp_store_bindings
inp_thaw_input
inp_unbind_command
mem_sys_alloc
mem_sys_calloc
mem_sys_free
mem_sys_realloc
message_history_count
message_history_get
mm_alloc_mem
mm_free_mem
mm_refresh_resource
mm_register_loader
mm_unregister_loader
mm_warn_refresh
net_iface_add
net_iface_alloc
net_iface_bind
net_iface_connect
net_iface_create
net_iface_del
net_iface_destroy
net_iface_free
net_iface_get_address
net_iface_ioctl
net_iface_recv
net_iface_register
net_iface_saddr_alloc
net_iface_saddr_free
net_iface_send
net_iface_set
net_sock_alloc
net_sock_avail
net_sock_bind
net_sock_close
net_sock_connect
net_sock_free
net_sock_iface
net_sock_recv
net_sock_recvfrom
net_sock_sendtov
net_sock_sendv
oswindow_activate_main_window
oswindow_attach
oswindow_create
oswindow_destroy
oswindow_detach
oswindow_get_properties
oswindow_get_window
oswindow_hide
oswindow_hold_reactions
oswindow_init
oswindow_is_application_active
oswindow_is_monitor_active
oswindow_move_to
oswindow_process_message_queue
oswindow_set_properties
oswindow_set_title
oswindow_show
oswindow_shutdown
process_add
process_get
process_hw_lock
process_hw_unlock
process_mm_lock
process_mm_unlock
process_pid_get
process_register_message_loop
process_sleep
process_store_cfg
process_terminate_all
process_wakeup
snd_def_mm_distances
snd_device_count
snd_device_current
snd_device_get
snd_device_info
snd_device_revive
snd_device_shutdown
snd_device_suspend
snd_distance_factor
snd_enforce_attributes
snd_eval_devicestring
snd_finish
snd_get_length
snd_get_music_volume
snd_get_sfx_volume
snd_init_devices
snd_is_accelerated
snd_is_stereo_reversed
snd_listener
snd_restart
snd_rolloff_factor
snd_set_current_tag
snd_shutdown_devices
snd_update_state
sys_frame
sys_get_lastdelta
sys_get_random_seed
sys_get_system_string
sys_get_time
sys_init
sys_pause
sys_rand
sys_shutdown
sys_startup
sys_version
ui_get_parameter_packet_array

Sections

.text
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 192KB - Virtual size: 199KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.T�
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

60b48dfa86f6343f170c28e3bd246341

Headers

File Characteristics

Imports

inpshared

sndshared

p3core

p3shared

gfxshared

msvcr71

wsock32

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 72KB - Virtual size: 68KB

.rdata Size: 32KB - Virtual size: 29KB

.data Size: 192KB - Virtual size: 199KB

.rsrc Size: 12KB - Virtual size: 10KB

.T� Size: 232KB - Virtual size: 232KB

.text
Size: 72KB - Virtual size: 68KB

.rdata
Size: 32KB - Virtual size: 29KB

.data
Size: 192KB - Virtual size: 199KB

.rsrc
Size: 12KB - Virtual size: 10KB

.T�
Size: 232KB - Virtual size: 232KB