dontstarve_steam[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

dontstarve_steam.exe
Size

3.2MB
MD5

22e1d95d4cfbe49298d8f858e7dd0803
SHA1

62d7742217fe832e21d839d50db60cebc5d5b66c
SHA256

634e6e47230a0627ff10132a51eab4e68ecf01a2d2800b699baa2f64ac36e0a3
SHA512

9ad167e1d001343f9c5d6b7ad266398aa30eb9bdad8bc65c441b3a29e464fce4575b5083766f72bd5267604761ddc5df98fcbe00ddaa5b71cc6b33bf96c79859
SSDEEP

49152:JlFYboT6ilVETUFqPAVdbkXsX40QUKSr+8Z51Cu6gEp/cuM3ZTSM+HpxG7p:JlFYbqpjqPdcXRQUKvf3XMe

Score

1^/10

Malware Config

Signatures

Files

dontstarve_steam.exe
.exe windows x86

e7869702f98be115135614c9e5eb418d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

libglesv2

ord19
ord37
ord20
ord102
ord17
ord1
ord97
ord142
ord40
ord12
ord10
ord11
ord9
ord43
ord39
ord45
ord33
ord49
ord28
ord92
ord36
ord100
ord104
ord5
ord95
ord6
ord53
ord4
ord41
ord16
ord32
ord2
ord3
ord90
ord66
ord65
ord58
ord55
ord77
ord114
ord34
ord112
ord117
ord121
ord125
ord128
ord129
ord130
ord113
ord27
ord99
ord21
ord68
ord69
ord26
ord72
ord44
ord31
ord131
ord30
ord52
ord54
ord7
ord22
ord106
ord109
ord61
ord15
ord141
ord50
ord13
ord29
ord64
ord91
ord48
ord47

libegl

ord25
ord9
ord7
ord6
ord34
ord3
ord2
ord32
ord23

wsock32

socket
connect
WSASetLastError
sendto
recvfrom
WSACleanup
closesocket
__WSAFDIsSet
select
inet_ntoa
gethostname
shutdown
WSAStartup
listen
accept
WSAGetLastError
inet_addr
htonl
getpeername
getsockopt
htons
bind
ntohs
getsockname
setsockopt
send
recv
gethostbyname
gethostbyaddr

ws2_32

freeaddrinfo
getaddrinfo

wldap32

ord118
ord208
ord26
ord133
ord127
ord142
ord79
ord147
ord167
ord301
ord27
ord41
ord46
ord216
ord145
ord14

winmm

timeBeginPeriod
timeEndPeriod

fmodex

?setSoftwareChannels@System@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?setStreamBufferSize@System@FMOD@@QAG?AW4FMOD_RESULT@@II@Z
?setFileSystem@System@FMOD@@QAG?AW4FMOD_RESULT@@P6G?AW43@PBDHPAIPAPAX2@ZP6G?AW43@PAX4@ZP6G?AW43@44I14@ZP6G?AW43@4I4@ZP6G?AW43@PAUFMOD_ASYNCREADINFO@@4@Z5H@Z
?setPaused@Channel@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?createSound@System@FMOD@@QAG?AW4FMOD_RESULT@@PBDIPAUFMOD_CREATESOUNDEXINFO@@PAPAVSound@2@@Z
?playSound@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_CHANNELINDEX@@PAVSound@2@_NPAPAVChannel@2@@Z
?setPriority@Channel@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?setVolume@Channel@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?getPosition@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAII@Z
?getCurrentSound@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVSound@2@@Z
?stop@Channel@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?isPlaying@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?release@Sound@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?getUserData@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAPAX@Z
?setSpeakerMode@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_SPEAKERMODE@@@Z
?setSoftwareFormat@System@FMOD@@QAG?AW4FMOD_RESULT@@HW4FMOD_SOUND_FORMAT@@HHW4FMOD_DSP_RESAMPLER@@@Z
?release@DSP@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?remove@DSP@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?addDSP@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAVDSP@2@PAPAVDSPConnection@2@@Z
?createDSPByType@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_DSP_TYPE@@PAPAVDSP@2@@Z
?setParameter@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HM@Z

fmod_event

?init@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@HIPAXI@Z
?setMediaPath@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PBD@Z
?load@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PBDPAUFMOD_EVENT_LOADINFO@@PAPAVEventProject@2@@Z
?getSystemObject@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVSystem@2@@Z
?getCategory@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PBDPAPAVEventCategory@2@@Z
?getReverbPreset@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PBDPAUFMOD_REVERB_PROPERTIES@@PAH@Z
?setReverbProperties@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_REVERB_PROPERTIES@@@Z
?getNumProjects@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getVersion@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PAI@Z
FMOD_EventSystem_Create
?getEvent@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PBDIPAPAVEvent@2@@Z
?getParameter@Event@FMOD@@QAG?AW4FMOD_RESULT@@PBDPAPAVEventParameter@2@@Z
?setValue@EventParameter@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?stop@Event@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?set3DAttributes@Event@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_VECTOR@@00@Z
?release@Event@FMOD@@QAG?AW4FMOD_RESULT@@_N0@Z
?setVolume@Event@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?start@Event@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?getState@Event@FMOD@@QAG?AW4FMOD_RESULT@@PAI@Z
?getProjectByIndex@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@HPAPAVEventProject@2@@Z
?unload@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?release@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?update@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?set3DListenerAttributes@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@HPBUFMOD_VECTOR@@000@Z

twitchsdk_32_release

ord3
ord71
ord46
ord13
ord72
ord40
ord10
ord85
ord47
ord19
ord20
ord14
ord12
ord75
ord60
ord11
ord73
ord65
ord15
ord44
ord36
ord45
ord32
ord5
ord39
ord43
ord34
ord25

psapi

GetProcessMemoryInfo

xinput1_3

ord8
ord3
ord4
ord2
ord5

dinput8

DirectInput8Create

steam_api

SteamAPI_Shutdown
SteamAPI_RunCallbacks
SteamUserStats
SteamAPI_WriteMiniDump
SteamUser
SteamUtils
SteamClient
SteamAPI_Init
SteamAPI_RestartAppIfNecessary
SteamApps
SteamAPI_SetMiniDumpComment
SteamAPI_UnregisterCallResult
SteamAPI_RegisterCallResult
SteamRemoteStorage

kernel32

InterlockedCompareExchange
WaitForSingleObject
CreateProcessA
GetProcAddress
GetModuleHandleA
SetCurrentDirectoryA
IsDebuggerPresent
OutputDebugStringA
GetVersion
Sleep
GetCurrentDirectoryA
GetFullPathNameA
SetLastError
FormatMessageA
GetLastError
FindClose
FindNextFileA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
SleepEx
GetTickCount
ReadFile
PeekNamedPipe
InterlockedExchange
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
lstrlenA
HeapFree
GetProcessHeap
WaitForMultipleObjects
GetFileType
GetStdHandle
FreeLibrary
LoadLibraryW
ExpandEnvironmentStringsA
GetCurrentThreadId
MultiByteToWideChar
QueryPerformanceCounter
GetCurrentProcessId
GlobalMemoryStatus
LoadLibraryA
GetVersionExA
FlushConsoleInputBuffer
CreateThread
CreateMutexA
ReleaseMutex
GlobalUnlock
GlobalLock
GetLongPathNameA
WideCharToMultiByte
GetFileAttributesW
FindFirstFileW
CreateDirectoryW
DeleteFileW
GetCurrentProcess
GlobalMemoryStatusEx
QueryPerformanceFrequency
RaiseException
ResumeThread
SetThreadPriority
InitializeCriticalSectionAndSpinCount
FindNextFileW
RemoveDirectoryW
GetFullPathNameW
CreateSemaphoreA
InterlockedDecrement
ReleaseSemaphore
InterlockedIncrement
GetModuleFileNameA
CloseHandle
MoveFileExA
GetSystemTimeAsFileTime

user32

LoadCursorA
RegisterClassA
CreateWindowExA
ShowWindow
EnumDisplayDevicesA
GetWindowLongA
InvalidateRect
SetCursor
ChangeDisplaySettingsExA
SetWindowLongA
MoveWindow
ClipCursor
MapWindowPoints
GetCursorPos
SetCursorPos
EnumDisplaySettingsA
MonitorFromPoint
AdjustWindowRect
MonitorFromWindow
GetMonitorInfoA
OpenClipboard
DefWindowProcA
CloseClipboard
SetWindowPos
GetWindowRect
SetCapture
ReleaseCapture
MapVirtualKeyA
GetForegroundWindow
SystemParametersInfoA
GetDesktopWindow
GetProcessWindowStation
GetUserObjectInformationW
GetDC
IsWindowVisible
IsIconic
GetClientRect
PeekMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
GetClipboardData

gdi32

CreateCompatibleBitmap
DeleteObject
CreateCompatibleDC
GetStockObject
SelectObject
SetStretchBltMode
StretchBlt
GetDIBits
BitBlt

advapi32

DeregisterEventSource
RegisterEventSourceA
ReportEventA

shell32

SHBrowseForFolderA
SHGetPathFromIDListA
SHGetFolderPathW
SHCreateDirectoryExA
ShellExecuteA

ole32

CoSetProxyBlanket
CoCreateInstance
CoInitialize
CoInitializeSecurity
CoInitializeEx
CoUninitialize

oleaut32

SysAllocString
SysFreeString
VariantClear

msvcp90

?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
?uncaught_exception@std@@YA_NXZ
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?infinity@?$numeric_limits@M@std@@SAMXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDU_Size_type_nosscl@01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADU_Size_type_nosscl@01@@Z
?deallocate@?$allocator@D@std@@QAEXPADI@Z
??0?$allocator@D@std@@QAE@XZ
?construct@?$allocator@D@std@@QAEXPADABD@Z
?destroy@?$allocator@D@std@@QAEXPAD@Z
??0?$allocator@D@std@@QAE@ABV01@@Z
?allocate@?$allocator@D@std@@QAEPADI@Z
?max_size@?$allocator@D@std@@QBEIXZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@D@Z
??Bios_base@std@@QBEPAXXZ
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?good@ios_base@std@@QBE_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?length@?$char_traits@D@std@@SAIPBD@Z
?width@ios_base@std@@QBEHXZ
?flags@ios_base@std@@QBEHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?eof@?$char_traits@D@std@@SAHXZ
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?width@ios_base@std@@QAEHH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHPBD@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?epsilon@?$numeric_limits@N@std@@SANXZ
??$?5DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHABV12@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
_Inf
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?eof@ios_base@std@@QBE_NXZ
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
?epsilon@?$numeric_limits@M@std@@SAMXZ
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ

msvcr90

??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
_time64
printf
memset
fclose
sprintf
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
atoi
_snprintf
__CxxFrameHandler3
_stricmp
_difftime64
_mktime64
srand
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
sscanf
fgets
_purecall
memmove_s
memcpy
strncmp
free
malloc
strncpy
_CIexp
_CIlog
_CIpow
_CIsqrt
atof
_wassert
_CIcos
_CIsin
ceil
rand
toupper
isgraph
_CIfmod
floor
??0exception@std@@QAE@ABQBDH@Z
_CIatan2
ferror
fread
fopen
_isnan
__iob_func
tolower
ftell
fseek
_stat64i32
clock
strtol
strerror
_errno
abort
fwrite
_stat64
strrchr
__sys_nerr
calloc
realloc
isdigit
fputc
strchr
isxdigit
strtoul
memmove
_strtoi64
qsort
fputs
_beginthreadex
fflush
isalnum
isspace
memchr
_fstat64
_lseeki64
getenv
_gmtime64
isalpha
_fdopen
_open
wcsstr
_vsnprintf
vfprintf
_exit
raise
strcmp
fprintf
_strnicmp
_setmode
_fileno
feof
_wfopen
_localtime64
isupper
islower
isprint
_ftime64
signal
_getch
_CItan
swscanf
_mbslen
_CIatan
ldexp
exit
_CIacos
mbstowcs
wcstombs
_wfopen_s
_set_errno
_mbsicmp
getc
strtod
strncat
strcspn
_setjmp3
longjmp
strcoll
iscntrl
localeconv
strftime
_CIsinh
_CIcosh
_CItanh
_CIasin
modf
_CIlog10
frexp
_HUGE
ispunct
strpbrk
_pclose
strtok
_popen
tmpfile
fscanf
ungetc
setvbuf
_finite
??8type_info@@QBE_NABV0@@Z
remove
_close
_strdup
clearerr
putc
_creat
_mktemp
ldiv
_fstat64i32
_amsg_exit
__getmainargs
_cexit
_XcptFilter
__initenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
?terminate@@YAXXZ
_invoke_watson
_controlfp_s
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_write
_read
strstr

Exports

Exports

??4_Init_locks@std@@QAEAAV01@ABV01@@Z

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 465KB - Virtual size: 464KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 131KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e7869702f98be115135614c9e5eb418d

Headers

DLL Characteristics

File Characteristics

Imports

libglesv2

libegl

wsock32

ws2_32

wldap32

winmm

fmodex

fmod_event

twitchsdk_32_release

psapi

xinput1_3

dinput8

steam_api

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

msvcp90

msvcr90

Exports

Exports

Sections

.text Size: 2.5MB - Virtual size: 2.5MB

.rdata Size: 465KB - Virtual size: 464KB

.data Size: 51KB - Virtual size: 66KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 84KB - Virtual size: 84KB

.reloc Size: 131KB - Virtual size: 130KB

.text
Size: 2.5MB - Virtual size: 2.5MB

.rdata
Size: 465KB - Virtual size: 464KB

.data
Size: 51KB - Virtual size: 66KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 84KB - Virtual size: 84KB

.reloc
Size: 131KB - Virtual size: 130KB