ca04d392a52aeb7b1b59f6ba56029dea[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

ca04d392a52aeb7b1b59f6ba56029dea.bin
Size

1.3MB
MD5

d59b8a3cfaa6e4e1334f1fbfe77349e3
SHA1

6868bd0dcce816d187f01b4fec25df6aeb64c50a
SHA256

766309fbc5c489204410340d0758524e784b6f19404d1e051905c854bfcf08a1
SHA512

c3feb0103344f27db17f6619312e2a4b6feca76b0b813b57941ee6a32bc11b566efd0d6efa085936e207f25ba89385289e1a043c00fcf295df474a779f95a999
SSDEEP

24576:ElGd3kCMhHGKRjPQHVnB6FBAsq/qz5pDadmAOEnfGRoynE0oeegbAkC/g:EyMGKRj4HhBITCmBEfgoopeg3C/g

Score

1^/10

Malware Config

Signatures

Files

ca04d392a52aeb7b1b59f6ba56029dea.bin
.zip

Password: infected
b05ca73c44474320e1b7321c24be66270f1de2a0686b063b6cb18e9ed21de9c9.bin
.exe windows x86

Password: infected

fad128362c799117383cb6b76306f3a5

Code Sign

b2:20:66:c4:91:e0:06:b7:cb:96:73:7d:bb:72:7f:2b
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

05/11/2018, 00:00

Not After

04/11/2021, 23:59

Subject

CN=IO INTERACTIVE A/S,O=IO INTERACTIVE A/S,POSTALCODE=1117,STREET=Gammel Mønt 2 - 4,L=København K,ST=København,C=DK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:90:20:77:61:c4:26:dd:94:50:03:0d
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

14/06/2018, 10:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign TSA for Advanced - G3 - 003-01,O=GMO GlobalSign K.K.,C=JP

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:31:89:c6:50:04
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02/08/2011, 10:00

Not After

29/03/2029, 10:00

Subject

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:21:58:53:08:a2
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

18/03/2009, 10:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

79:30:de:e8:42:c9:76:06:9a:9e:2c:6e:90:6e:ce:ad:c3:72:02:c1
Signer

Actual PE Digest

79:30:de:e8:42:c9:76:06:9a:9e:2c:6e:90:6e:ce:ad:c3:72:02:c1

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=IO INTERACTIVE A/S,O=IO INTERACTIVE A/S,POSTALCODE=1117,STREET=Gammel Mønt 2 - 4,L=København K,ST=København,C=DK

28/01/2021, 16:00
Valid: true

Chain 1

CN=IO INTERACTIVE A/S,O=IO INTERACTIVE A/S,POSTALCODE=1117,STREET=Gammel Mønt 2 - 4,L=København K,ST=København,C=DK

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

steam_api

SteamAPI_RestartAppIfNecessary
SteamAPI_Shutdown
SteamAPI_Init

eax

ord6

ws2_32

gethostbyaddr
send
gethostbyname
gethostname
WSAStartup
WSACleanup
closesocket
socket
inet_addr
connect
htons

d3d8

Direct3DCreate8

dinput8

DirectInput8Create

dsound

ord2

xinput9_1_0

XInputGetState

kernel32

CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
GetStartupInfoW
InitializeSListHead
GetCurrentThreadId
GetCurrentProcessId
GetModuleHandleW
CreateEventW
CreateFileA
IsDebuggerPresent
CloseHandle
CreateMutexA
GetCurrentThread
GetModuleFileNameA
GetCommandLineA
GetEnvironmentVariableA
GetCurrentDirectoryA
GetFileSize
GetFileTime
ReadFile
OutputDebugStringA
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
GetCurrentProcess
FreeLibrary
GetProcAddress
WaitForSingleObjectEx
FileTimeToSystemTime
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
IsBadReadPtr
CreateDirectoryA
GetFileAttributesA
GetShortPathNameW
QueryPerformanceCounter
Sleep
VirtualQuery
FormatMessageA
GlobalDeleteAtom
GlobalAddAtomA
GlobalGetAtomNameA
SetCurrentDirectoryA
DeleteFileA
FileTimeToLocalFileTime
FindClose
FindFirstFileA
FindNextFileA
GetDiskFreeSpaceExA
RemoveDirectoryA
SetFilePointer
WriteFile
GetSystemTimeAsFileTime
LocalFree
CopyFileA
MoveFileA
FileTimeToDosDateTime
DosDateTimeToFileTime
SetEvent
ResetEvent
WaitForSingleObject
CreateEventA
CreateThread
SetThreadPriority
SetThreadPriorityBoost
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
LoadLibraryA
UnhandledExceptionFilter

user32

UnregisterClassA
RegisterClassExA
GetClassInfoExA
CreateWindowExA
DestroyWindow
ShowWindow
SetWindowPos
GetAsyncKeyState
GetKeyboardState
GetKeyNameTextA
ToAscii
MapVirtualKeyA
GetSystemMetrics
SetWindowTextA
MessageBoxA
GetCursorPos
ScreenToClient
PostQuitMessage
LoadCursorA
RegisterWindowMessageA
PostMessageA
EnumDisplaySettingsA
TranslateMessage
GetMessageA
wsprintfA
wvsprintfA
SetCapture
ReleaseCapture
SetForegroundWindow
GetDC
SetWindowLongA
DefWindowProcA
SetFocus
MoveWindow
ReleaseDC
GetClientRect
GetWindowRect
AdjustWindowRectEx
SendMessageA
PeekMessageA
FindWindowA
SetCursorPos
SetCursor
ClipCursor
GetCursor
ClientToScreen
GetWindowLongA
GetDesktopWindow
GetParent
LoadIconA
DispatchMessageA

gdi32

DescribePixelFormat
GetStockObject
GetDeviceCaps
GetPixelFormat

advapi32

LookupAccountSidA
GetTokenInformation
GetUserNameA
OpenThreadToken
OpenProcessToken

shell32

SHGetKnownFolderPath

ole32

CoUninitialize
CoSetProxyBlanket
CoInitialize
CoCreateInstance
CoTaskMemFree

oleaut32

SysFreeString
SysAllocString

gdiplus

GdipDisposeImage
GdipAlloc
GdipFree
GdiplusStartup
GdipBitmapGetPixel
GdipCloneImage
GdipCreateBitmapFromFile

vcruntime140

strchr
strrchr
strstr
memset
_purecall
__std_terminate
memcpy
_set_se_translator
wcsstr
memmove
__RTDynamicCast
_CxxThrowException
memchr
_except_handler4_common
__vcrt_InitializeCriticalSectionEx
__CxxFrameHandler3

api-ms-win-crt-runtime-l1-1-0

terminate
_crt_atexit
_register_onexit_function
_initialize_onexit_table
exit
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
_initterm_e
_initterm
_get_narrow_winmain_command_line
_initialize_narrow_environment
_exit
_configure_narrow_argv
_set_app_type
_seh_filter_exe
_controlfp_s

api-ms-win-crt-stdio-l1-1-0

fclose
fopen
_flushall
__stdio_common_vswscanf
_set_fmode
__stdio_common_vfprintf
fflush
__acrt_iob_func
__p__commode
__stdio_common_vfscanf
fwrite
ferror
feof
__stdio_common_vsprintf
__stdio_common_vsnprintf_s
fseek
tmpfile
rewind
ftell
fread
__stdio_common_vsscanf

api-ms-win-crt-heap-l1-1-0

_set_new_mode
free
malloc
realloc
calloc

api-ms-win-crt-string-l1-1-0

_strdup
_strnicmp
_memicmp
strncmp
_stricmp
strpbrk
toupper
strtok
isprint
strncat
strncpy

api-ms-win-crt-convert-l1-1-0

_ltoa
atof
atoi
wcstombs
atol

api-ms-win-crt-time-l1-1-0

clock
_time32
_localtime32
_ctime32

api-ms-win-crt-math-l1-1-0

_CIatan2
_CIpow
ldexp
_libm_sse2_log_precise
_libm_sse2_atan_precise
_libm_sse2_asin_precise
_libm_sse2_cos_precise
__setusermatherr
_isnan
_libm_sse2_log10_precise
_libm_sse2_sqrt_precise
_ftol
_libm_sse2_sin_precise
_except1
ceil
_CIacos
_libm_sse2_tan_precise
_libm_sse2_pow_precise
_libm_sse2_exp_precise
_libm_sse2_acos_precise
_CIfmod
floor

api-ms-win-crt-utility-l1-1-0

bsearch
rand
qsort
srand

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Exports

Exports

?CDAPFN0506_WinMain@@3UCDAPFN_PROPERTIES@@A
?Z2DOBJ_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZActor_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZAllocMany_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZBOUND_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZBOXGATEGROUP_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZBOXSTDOBJ_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZBUTTON_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZBloodSplatters_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZBloodSpray_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZBloodStains_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZBoxPrimitive_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZBreath_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZBulletMarks_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZCAMERA_BaseCamera_ClassInfo@@3VZROUTCLASSINFO@@A
?ZCAMERA_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZCAMERA_FFCam_ClassInfo@@3VZROUTCLASSINFO@@A
?ZCAMERA_FFCamera1_ClassInfo@@3VZROUTCLASSINFO@@A
?ZCAMERA_MainCameraControl_ClassInfo@@3VZROUTCLASSINFO@@A
?ZCAMERA_NewDialogCamera_ClassInfo@@3VZROUTCLASSINFO@@A
?ZCAMERA_PreviewCamera_ClassInfo@@3VZROUTCLASSINFO@@A
?ZCAMERA_TVOnOff_ClassInfo@@3VZROUTCLASSINFO@@A
?ZCAMERA_ViewNotify_ClassInfo@@3VZROUTCLASSINFO@@A
?ZCHAROBJ_CharFader_ClassInfo@@3VZROUTCLASSINFO@@A
?ZCHAROBJ_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZCHAROBJ_Subtitle_ClassInfo@@3VZROUTCLASSINFO@@A
?ZCONTROL_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZCTRLIKLNKOBJ_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZCameraOverlay_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZCar_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZCloth_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZCredits_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZCubeGridParticles_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZCubeGrid_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZDebugGeom_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZENVIRONMENT_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZEditControl_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZFFActor_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZFFActor_SetFootstepVolume_ClassInfo@@3VZROUTCLASSINFO@@A
?ZFFCameraClass_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZFFHERO_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZFFPRIVATESTDOBJ_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZFONT_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZFRAME_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZGATE_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZGEOM_Action_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_ActivateBinoculars_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_AnimSequence_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_AttachGeomToBone_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_BoundDeactivateRegister_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_BoundDeactivator_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_BoxAutoFire_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_CCameraBox_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_CTargetObtained_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_Cage_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_Center_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_CheckInsideBox_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_CheckInsideByType_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_CheckInside_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_ChkObjInObj_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZGEOM_CutSeqBlood_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_CutSeqDeleteObject_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_CutSequenceMove_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_DefaultAcusticEnv_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_DiscoMove_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_EnemyFlag_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_Explode_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_FFCoverList_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_FFLightsOnOff_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_FFShowMessage_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_FFTargetList_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_FenceGate_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_FilmGrainCamSetup_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_FireController_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_FireDamageBox_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_FogController_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_FollowGeom_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_FollowShape_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_FormationControl_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_FriendlyControl_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_GeomParticle_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_GeomSound_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_GeomSpawn_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_ImpactFog_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_InventoryBinding_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_Inventory_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_ItemSpawn_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_ItemStateCartridge_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_ItemStateProjectile_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_ItemState_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_KeyConTimed_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_LightToggle_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_LogicOperatorEvaluatorTriggerFunctions_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_MP_CheckInsideHill_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_MP_GameController_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_MP_WeaponRecycleList_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_MatPosAnim_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_MoveToPlayer_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_MoveTo_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_MovieControl_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_MsgForwardToActors_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_MsgForward_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_MusicSegment_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_Music_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_Noise_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_OpenSewer_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_OpenWindow_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_ParamAnim_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_ParticleEmitterDebug_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_ParticleEmitter_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_PathfinderControl_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_PlaySound_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_Projectile_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_PushSceneOnKeyStart_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_QRigidBody_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_RegisterSceneValName_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_RelayMessageList_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_RelayMessage_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_RequireMatPosSpeed_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_RunCutsequence_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_ScrollText_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_ShakeCamera_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_SoundClock_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_Spin_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_TVOSDCamControl_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_TVStudioCam_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_TimeBender_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_TimeOutDelete_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_TimerEvent_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_WaterMark_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_Waves_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_WindControl_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_ZActionControlMap_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_ZBombDamageList_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_ZCamHelper_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_ZCharisma_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_ZDamageBox2_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_ZDamageBox_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_ZFFFlak_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_ZFFHintBox_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_ZFFItemBomb_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_ZFFLevelController_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_ZFFSearchLightAddActors_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_ZKillBox_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_ZSetZDefine_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGEOM_ZTargetObtained2_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGROUP_CharacterControl_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGROUP_CivilianPathList_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGROUP_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZGROUP_CutSequenceProxy_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGROUP_ExplodeMolotov_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGROUP_GameOSD_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGROUP_HideGroupObjects_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGROUP_MachinegunControlGroup_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGROUP_MarkTextureObjGroup_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGROUP_MusicControl_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGROUP_RootGroup_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGROUP_SigteCon_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGROUP_SoundAnimation_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGROUP_SoundController_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGROUP_WeaponTest_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGROUP_ZFFCareTaker_C01A_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGROUP_ZFFCareTaker_C02A_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGROUP_ZFFCareTaker_C03A_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGROUP_ZFFCareTaker_C03B_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGROUP_ZFFCareTaker_C03C_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGROUP_ZFFCareTaker_C04B_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGROUP_ZFFCareTaker_C05A_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGROUP_ZFFCareTaker_C08C_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGROUP_ZFFCareTaker_C08D_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGROUP_ZFFMortar_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGROUP_ZFFSimpleTrain2_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGROUP_ZRepositionCharacter_ClassInfo@@3VZROUTCLASSINFO@@A
?ZGateLightMaster_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZGateLightOmni_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZGateLightSpotMaster_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZGateLightSpot_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZGateLightSquareSpotMaster_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZGateLightSquareSpot_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZHELPER_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZHeli_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZIKLNKOBJ_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZInstance_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZItemAmmo_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZItemButton_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZItemContainer_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZItemTemplateAmmo_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZItemTemplateContainer_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZItemTemplateWeapon_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZItemTemplate_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZItemWeapon_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZItem_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZLIGHT_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZLINEOBJ_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZLIST_ActionController_ClassInfo@@3VZROUTCLASSINFO@@A
?ZLIST_ActorCollision_ClassInfo@@3VZROUTCLASSINFO@@A
?ZLIST_CheckVisible_ClassInfo@@3VZROUTCLASSINFO@@A
?ZLIST_CivilianPath_ClassInfo@@3VZROUTCLASSINFO@@A
?ZLIST_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZLIST_CutSequenceCharacterSound_ClassInfo@@3VZROUTCLASSINFO@@A
?ZLIST_CutSequenceCommand_ClassInfo@@3VZROUTCLASSINFO@@A
?ZLIST_CutSequenceInfo_ClassInfo@@3VZROUTCLASSINFO@@A
?ZLIST_CutSequenceList_ClassInfo@@3VZROUTCLASSINFO@@A
?ZLIST_CutSequenceObject_ClassInfo@@3VZROUTCLASSINFO@@A
?ZLIST_CutSequenceObjects_ClassInfo@@3VZROUTCLASSINFO@@A
?ZLIST_CutSequenceShowHide_ClassInfo@@3VZROUTCLASSINFO@@A
?ZLIST_CutSequenceSoundEnvironment_ClassInfo@@3VZROUTCLASSINFO@@A
?ZLIST_CutSequenceSoundFXAttenuation_ClassInfo@@3VZROUTCLASSINFO@@A
?ZLIST_CutSequenceSoundInRoot_ClassInfo@@3VZROUTCLASSINFO@@A
?ZLIST_CutSequenceSoundStartStop_ClassInfo@@3VZROUTCLASSINFO@@A
?ZLIST_CutSequenceSound_ClassInfo@@3VZROUTCLASSINFO@@A
?ZLIST_CutSequence_ClassInfo@@3VZROUTCLASSINFO@@A
?ZLIST_EntityTracker_ClassInfo@@3VZROUTCLASSINFO@@A
?ZLIST_ExternCutSequenceCommand_ClassInfo@@3VZROUTCLASSINFO@@A
?ZLIST_LensFlareLights_ClassInfo@@3VZROUTCLASSINFO@@A
?ZLIST_RoadDebris_ClassInfo@@3VZROUTCLASSINFO@@A
?ZLIST_SelectNotify_ClassInfo@@3VZROUTCLASSINFO@@A
?ZLIST_SortCameraControls_ClassInfo@@3VZROUTCLASSINFO@@A
?ZLIST_SoundPitchList_ClassInfo@@3VZROUTCLASSINFO@@A
?ZLIST_SoundVolumeList_ClassInfo@@3VZROUTCLASSINFO@@A
?ZLIST_TeleportList_ClassInfo@@3VZROUTCLASSINFO@@A
?ZLIST_ZFFSearchLightGroup_ClassInfo@@3VZROUTCLASSINFO@@A
?ZLNKOBJ_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZLNKOBJ_StartAnim_ClassInfo@@3VZROUTCLASSINFO@@A
?ZLNKWHANDS_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZLNKWHANDS_CutSeqFireWeapon_ClassInfo@@3VZROUTCLASSINFO@@A
?ZLanguageVersion_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZLightOverlay_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZMapHelper_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZMaterialDescGroup_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZMaterialDesc_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZMotionBlur_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZMoveOnSpline_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZOMNILIGHT_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZOnScreenDisplay_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZPANEL_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZPATHGROUP_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZPICOBJ_CameraFog_ClassInfo@@3VZROUTCLASSINFO@@A
?ZPICOBJ_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZParticleBox_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZParticleController_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZParticleTemplate_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZPathfinder3_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZPlayerTest_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZPlayer_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZPlayer_ToggleStart_ClassInfo@@3VZROUTCLASSINFO@@A
?ZPmv_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZROOM_AdoptVisibility_ClassInfo@@3VZROUTCLASSINFO@@A
?ZROOM_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZSHAPE_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZSHAPE_T1GuideControler_ClassInfo@@3VZROUTCLASSINFO@@A
?ZSNDOBJ_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZSNDOBJ_SoundAmbient_ClassInfo@@3VZROUTCLASSINFO@@A
?ZSNDOBJ_SoundExtend_ClassInfo@@3VZROUTCLASSINFO@@A
?ZSNDOBJ_SoundLimiter_ClassInfo@@3VZROUTCLASSINFO@@A
?ZSNDOBJ_SoundMoveAround_ClassInfo@@3VZROUTCLASSINFO@@A
?ZSNDOBJ_SoundNotify_ClassInfo@@3VZROUTCLASSINFO@@A
?ZSNDOBJ_SoundRandomVolume_ClassInfo@@3VZROUTCLASSINFO@@A
?ZSNDOBJ_SoundSegmentPitch_ClassInfo@@3VZROUTCLASSINFO@@A
?ZSNDOBJ_SoundSegmentVolume_ClassInfo@@3VZROUTCLASSINFO@@A
?ZSNDOBJ_SoundSegment_ClassInfo@@3VZROUTCLASSINFO@@A
?ZSNDOBJ_SoundSpline_ClassInfo@@3VZROUTCLASSINFO@@A
?ZSNDOBJ_SoundToggle_ClassInfo@@3VZROUTCLASSINFO@@A
?ZSNDOBJ_SoundVolume2D_ClassInfo@@3VZROUTCLASSINFO@@A
?ZSNDOBJ_SoundVolumetricSource_ClassInfo@@3VZROUTCLASSINFO@@A
?ZSPOTLIGHTSQUARE_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZSPOTLIGHT_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZSTDOBJ_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZSTDOBJ_HitpointControl_ClassInfo@@3VZROUTCLASSINFO@@A
?ZSTDOBJ_ImpactResponse_ClassInfo@@3VZROUTCLASSINFO@@A
?ZSTDOBJ_ScrollTexture_ClassInfo@@3VZROUTCLASSINFO@@A
?ZSTDOBJ_Shatter_ClassInfo@@3VZROUTCLASSINFO@@A
?ZSTDOBJ_ShotActivate_ClassInfo@@3VZROUTCLASSINFO@@A
?ZSTDOBJ_TextureAnim_ClassInfo@@3VZROUTCLASSINFO@@A
?ZSTDOBJ_VertAnim_ClassInfo@@3VZROUTCLASSINFO@@A
?ZSTDOBJ_ViewNotifyCheckBox_ClassInfo@@3VZROUTCLASSINFO@@A
?ZSTDOBJ_WindElement_ClassInfo@@3VZROUTCLASSINFO@@A
?ZScrollArea_AutoScroller_ClassInfo@@3VZROUTCLASSINFO@@A
?ZScrollArea_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZScrollbar_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZSlider_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZStdObjBox_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZTTFONT_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZTVNoise_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZTank_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZTemplate_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZTreeGroup_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZUSERLIGHT_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZVehicle_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZWINDOWS_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZWINDOW_AdjustScreenMenu_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINDOW_AutoSave_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINDOW_BootMenu_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINDOW_Briefing_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINDOW_ButtonMenu_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINDOW_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZWINDOW_ControllerA_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINDOW_Controller_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINDOW_CutSequenceMenu_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINDOW_DifficultySelector_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINDOW_FFDemoMenu_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINDOW_GraphicsMenu_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINDOW_InventorySelector_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINDOW_LensFlareControl_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINDOW_LevelMenuSinglePlayer_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINDOW_LinkMenu_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINDOW_LoadError_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINDOW_LoadMenu_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINDOW_MouseMenuPC_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINDOW_MultiplayerKOTH_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINDOW_MultiplayerStat_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINDOW_NewMenu_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINDOW_Objectives_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINDOW_SetStartZone_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINDOW_SewerMenu_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINDOW_SoundMenu_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINDOW_SubZoneMap_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINDOW_VideoSelector_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINDOW_ZFFMissingControllerDialog_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINDOW_ZoneMap_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINDOW_ZoneMenu_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINGROUP_AutoLayout_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINGROUP_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZWINGROUP_LoadScreen_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINGROUP_MouseGroup_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINOBJSPRITEHOLDER_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZWINOBJ_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZWINPIC_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZWINPIC_FadeToBlack_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWINPIC_LogoFade_ClassInfo@@3VZROUTCLASSINFO@@A
?ZWinGfxHandler_ClassInfo@@3VZGEOMCLASSINFO@@A
?ZWinPic_LensFlare_ClassInfo@@3VZROUTCLASSINFO@@A
Create
CreateD3DDll
CreateProjectIf
CreateScriptEngine
CreateScriptInterfaces
EditPrint
NotifyDestroy
RunEngine

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 439KB - Virtual size: 439KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

fad128362c799117383cb6b76306f3a5

Code Sign

b2:20:66:c4:91:e0:06:b7:cb:96:73:7d:bb:72:7f:2bCertificate

Extended Key Usages

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

33:90:20:77:61:c4:26:dd:94:50:03:0dCertificate

Extended Key Usages

Key Usages

04:00:00:00:00:01:31:89:c6:50:04Certificate

Key Usages

04:00:00:00:00:01:21:58:53:08:a2Certificate

Key Usages

79:30:de:e8:42:c9:76:06:9a:9e:2c:6e:90:6e:ce:ad:c3:72:02:c1Signer

Signature Validations

Verification

28/01/2021, 16:00 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

steam_api

eax

ws2_32

d3d8

dinput8

dsound

xinput9_1_0

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

gdiplus

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-locale-l1-1-0

Exports

Exports

Sections

.text Size: 2.5MB - Virtual size: 2.5MB

.rdata Size: 439KB - Virtual size: 439KB

.data Size: 99KB - Virtual size: 1.2MB

.gfids Size: 512B - Virtual size: 48B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 208KB - Virtual size: 208KB

b2:20:66:c4:91:e0:06:b7:cb:96:73:7d:bb:72:7f:2b
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

33:90:20:77:61:c4:26:dd:94:50:03:0d
Certificate

04:00:00:00:00:01:31:89:c6:50:04
Certificate

04:00:00:00:00:01:21:58:53:08:a2
Certificate

79:30:de:e8:42:c9:76:06:9a:9e:2c:6e:90:6e:ce:ad:c3:72:02:c1
Signer

28/01/2021, 16:00
Valid: true

.text
Size: 2.5MB - Virtual size: 2.5MB

.rdata
Size: 439KB - Virtual size: 439KB

.data
Size: 99KB - Virtual size: 1.2MB

.gfids
Size: 512B - Virtual size: 48B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 208KB - Virtual size: 208KB