data[.]lol | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

data.lol
Size

2.1MB
MD5

57c9f5734197baaba13834805e0f16e5
SHA1

1d485da326dd1a6948538b41b2c7f7a74c29a1fa
SHA256

21d01722dffd6a6052e92e89ea2f78a815e9f38d36126e18afca71457f65bd4f
SHA512

c9ffbd8d267198783caee8c7768ca50c401889f4d6cd0fce528e1c3fc3e589ce06b70a1d21a301e3a3f9921679984bf4ec38d9e815fd200a451b0a4da4a326e5
SSDEEP

49152:jFCfr2yhBdyXPrznW4t+ifbTwz+xoFfsN2U8aNSx:jJy1y/rzn74+bTvoFfY2U8aSx

Score

1^/10

Malware Config

Signatures

Files

data.lol
.zip
Fraps/LOLPRO.exe
.exe windows x86

f0543011c192603650946b2c54d1a48a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumeInformationW
GetFullPathNameW
FileTimeToLocalFileTime
GetFileSizeEx
GetFileTime
SetErrorMode
GetTickCount
GetStartupInfoW
HeapFree
HeapAlloc
VirtualProtect
GetSystemInfo
VirtualQuery
DeleteFileA
GetSystemTimeAsFileTime
RtlUnwind
HeapReAlloc
SetStdHandle
GetFileType
ExitProcess
ExitThread
CreateThread
HeapSize
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
FindClose
HeapCreate
QueryPerformanceCounter
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
InterlockedIncrement
GlobalFlags
FileTimeToSystemTime
GetThreadLocale
lstrlenA
FormatMessageW
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalFree
LocalAlloc
CreateEventW
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
WritePrivateProfileStringW
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
GlobalAlloc
InterlockedDecrement
GlobalFree
GetCurrentProcessId
GetModuleFileNameW
GlobalLock
GlobalUnlock
MulDiv
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
FreeLibrary
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
SetFileAttributesW
ReadProcessMemory
WritePrivateProfileStringA
GetPrivateProfileStringA
FindNextFileW
FindFirstFileW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
TerminateProcess
CreateFileW
ReadFile
GetFileAttributesW
WriteFile
SetFilePointer
DeleteFileW
SetLastError
GetLastError
Sleep
CopyFileW
VirtualFree
VirtualProtectEx
WriteProcessMemory
VirtualAlloc
VirtualAllocEx
OpenProcess
OpenFileMappingA
GetModuleHandleA
LoadLibraryW
MultiByteToWideChar
GetProcAddress
GetModuleHandleW
CloseHandle
WideCharToMultiByte
LockResource
SizeofResource
LoadResource
FindResourceW
lstrlenW
RaiseException
InterlockedExchange
LeaveCriticalSection
GetStartupInfoA
EnterCriticalSection

user32

PostThreadMessageW
IsRectEmpty
CopyAcceleratorTableW
CharNextW
ReleaseCapture
SetCapture
CharUpperW
UnregisterClassW
LoadCursorW
GetSysColorBrush
DestroyMenu
SetCursor
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
GetDesktopWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
IsWindowEnabled
ShowWindow
SetWindowTextW
IsDialogMessageW
CheckRadioButton
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
IsWindow
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
EnableWindow
GetDC
SendMessageW
ReleaseDC
GetKeyState
SetMenu
SetForegroundWindow
UpdateWindow
PostMessageW
GetMenuItemID
GetMenuItemCount
CreateWindowExW
GetClassInfoExW
RegisterClipboardFormatW
GetClassInfoW
RegisterClassW
GetNextDlgGroupItem
InvalidateRgn
MoveWindow
SetRect
InvalidateRect
RedrawWindow
MessageBoxW
GetFocus
LoadIconW
FindWindowW
GetWindow
GetSystemMenu
AppendMenuW
GetWindowRect
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
IsWindowVisible
MessageBeep
GetSubMenu
GetParent
GetWindowPlacement
SystemParametersInfoA
IntersectRect
OffsetRect
SetWindowPos
SetWindowLongW
GetWindowLongW
GetMenu
CallWindowProcW
DefWindowProcW
GetDlgCtrlID
PtInRect
CopyRect
EqualRect
GetSysColor
AdjustWindowRectEx
GetActiveWindow

gdi32

ExtSelectClipRgn
GetDeviceCaps
CreateFontIndirectW
CreateRectRgnIndirect
GetMapMode
DPtoLP
GetBkColor
GetTextColor
GetRgnBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
DeleteDC
GetWindowExtEx
GetViewportExtEx
SetMapMode
SetStretchBltMode
RestoreDC
SaveDC
CreateBitmap
GetClipBox
GetStockObject
RemoveFontResourceW
CreateFontW
AddFontResourceW
SetBkColor
SetBkMode
SetTextColor
CreateSolidBrush
CreateCompatibleBitmap
GetObjectW
SetDIBColorTable
SelectObject
StretchBlt
DeleteObject
CreateDIBSection
CreateCompatibleDC

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW

shell32

ShellExecuteExW

comctl32

InitCommonControlsEx

shlwapi

PathFileExistsW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathIsDirectoryW
PathFindExtensionW

oledlg

OleUIBusyW

ole32

CoGetClassObject
OleFlushClipboard
CoRegisterMessageFilter
CreateStreamOnHGlobal
CLSIDFromProgID
CLSIDFromString
CoTaskMemFree
CoTaskMemAlloc
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard

oleaut32

SysFreeString
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString
SysStringLen

gdiplus

GdipGetImageWidth
GdipCreateHBITMAPFromBitmap
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipCloneImage
GdipDrawImageI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipDisposeImage
GdipAlloc
GdipFree

winhttp

WinHttpCloseHandle
WinHttpConnect
WinHttpQueryHeaders
WinHttpCrackUrl
WinHttpReadData
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpOpenRequest
WinHttpOpen

uxtheme

SetWindowTheme

psapi

GetProcessImageFileNameW
GetModuleFileNameExW

Sections

.text
Size: 268KB - Virtual size: 267KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fraps/data/80/aatrox.jpg
.jpg
Fraps/data/80/ahri.jpg
.jpg
Fraps/data/80/akali.jpg
.jpg
Fraps/data/80/akshan.jpg
.jpg
Fraps/data/80/alistar.jpg
.jpg
Fraps/data/80/amumu.jpg
.jpg
Fraps/data/80/anivia.jpg
.jpg
Fraps/data/80/annie.jpg
.jpg
Fraps/data/80/aphelios.jpg
.jpg
Fraps/data/80/ashe.jpg
.jpg
Fraps/data/80/aurelionsol.jpg
.jpg
Fraps/data/80/azir.jpg
.jpg
Fraps/data/80/bard.jpg
.jpg
Fraps/data/80/blitzcrank.jpg
.jpg
Fraps/data/80/brand.jpg
.jpg
Fraps/data/80/braum.jpg
.jpg
Fraps/data/80/caitlyn.jpg
.jpg
Fraps/data/80/camille.jpg
.jpg
Fraps/data/80/cassiopeia.jpg
.jpg
Fraps/data/80/chogath.jpg
.jpg
Fraps/data/80/corki.jpg
.jpg
Fraps/data/80/darius.jpg
.jpg
Fraps/data/80/diana.jpg
.jpg
Fraps/data/80/draven.jpg
.jpg
Fraps/data/80/drmundo.jpg
.jpg
Fraps/data/80/ekko.jpg
.jpg
Fraps/data/80/elise.jpg
.jpg
Fraps/data/80/evelynn.jpg
.jpg
Fraps/data/80/ezreal.jpg
.jpg
Fraps/data/80/fiddlesticks.jpg
.jpg
Fraps/data/80/fiora.jpg
.jpg
Fraps/data/80/fizz.jpg
.jpg
Fraps/data/80/galio.jpg
.jpg
Fraps/data/80/gangplank.jpg
.jpg
Fraps/data/80/garen.jpg
.jpg
Fraps/data/80/gnar.jpg
.jpg
Fraps/data/80/gragas.jpg
.jpg
Fraps/data/80/graves.jpg
.jpg
Fraps/data/80/gwen.jpg
.jpg
Fraps/data/80/hecarim.jpg
.jpg
Fraps/data/80/heimerdinger.jpg
.jpg
Fraps/data/80/illaoi.jpg
.jpg
Fraps/data/80/irelia.jpg
.jpg
Fraps/data/80/ivern.jpg
.jpg
Fraps/data/80/janna.jpg
.jpg
Fraps/data/80/jarvaniv.jpg
.jpg
Fraps/data/80/jax.jpg
.jpg
Fraps/data/80/jayce.jpg
.jpg
Fraps/data/80/jhin.jpg
.jpg
Fraps/data/80/jinx.jpg
.jpg
Fraps/data/80/kaisa.jpg
.jpg
Fraps/data/80/kalista.jpg
.jpg
Fraps/data/80/karma.jpg
.jpg
Fraps/data/80/karthus.jpg
.jpg
Fraps/data/80/kassadin.jpg
.jpg
Fraps/data/80/katarina.jpg
.jpg
Fraps/data/80/kayle.jpg
.jpg
Fraps/data/80/kayn.jpg
.jpg
Fraps/data/80/kennen.jpg
.jpg
Fraps/data/80/khazix.jpg
.jpg
Fraps/data/80/kindred.jpg
.jpg
Fraps/data/80/kled.jpg
.jpg
Fraps/data/80/kogmaw.jpg
.jpg
Fraps/data/80/leblanc.jpg
.jpg
Fraps/data/80/leesin.jpg
.jpg
Fraps/data/80/leona.jpg
.jpg
Fraps/data/80/lillia.jpg
.jpg
Fraps/data/80/lissandra.jpg
.jpg
Fraps/data/80/lucian.jpg
.jpg
Fraps/data/80/lulu.jpg
.jpg
Fraps/data/80/lux.jpg
.jpg
Fraps/data/80/malphite.jpg
.jpg
Fraps/data/80/malzahar.jpg
.jpg
Fraps/data/80/maokai.jpg
.jpg
Fraps/data/80/masteryi.jpg
.jpg
Fraps/data/80/missfortune.jpg
.jpg
Fraps/data/80/monkeyking.jpg
.jpg
Fraps/data/80/mordekaiser.jpg
.jpg
Fraps/data/80/morgana.jpg
.jpg
Fraps/data/80/nami.jpg
.jpg
Fraps/data/80/nasus.jpg
.jpg
Fraps/data/80/nautilus.jpg
.jpg
Fraps/data/80/neeko.jpg
.jpg
Fraps/data/80/nidalee.jpg
.jpg
Fraps/data/80/nocturne.jpg
.jpg
Fraps/data/80/nunu.jpg
.jpg
Fraps/data/80/olaf.jpg
.jpg
Fraps/data/80/orianna.jpg
.jpg
Fraps/data/80/ornn.jpg
.jpg
Fraps/data/80/pantheon.jpg
.jpg
Fraps/data/80/poppy.jpg
.jpg
Fraps/data/80/pyke.jpg
.jpg
Fraps/data/80/qiyana.jpg
.jpg
Fraps/data/80/quinn.jpg
.jpg
Fraps/data/80/rakan.jpg
.jpg
Fraps/data/80/rammus.jpg
.jpg
Fraps/data/80/reksai.jpg
.jpg
Fraps/data/80/rell.jpg
.jpg
Fraps/data/80/renata.jpg
.jpg
Fraps/data/80/renekton.jpg
.jpg
Fraps/data/80/rengar.jpg
.jpg
Fraps/data/80/riven.jpg
.jpg
Fraps/data/80/rumble.jpg
.jpg
Fraps/data/80/ryze.jpg
.jpg
Fraps/data/80/samira.jpg
.jpg
Fraps/data/80/sejuani.jpg
.jpg
Fraps/data/80/senna.jpg
.jpg
Fraps/data/80/seraphine.jpg
.jpg
Fraps/data/80/sett.jpg
.jpg
Fraps/data/80/shaco.jpg
.jpg
Fraps/data/80/shen.jpg
.jpg
Fraps/data/80/shyvana.jpg
.jpg
Fraps/data/80/singed.jpg
.jpg
Fraps/data/80/sion.jpg
.jpg
Fraps/data/80/sivir.jpg
.jpg
Fraps/data/80/skarner.jpg
.jpg
Fraps/data/80/sona.jpg
.jpg
Fraps/data/80/soraka.jpg
.jpg
Fraps/data/80/swain.jpg
.jpg
Fraps/data/80/sylas.jpg
.jpg
Fraps/data/80/syndra.jpg
.jpg
Fraps/data/80/tahmkench.jpg
.jpg
Fraps/data/80/taliyah.jpg
.jpg
Fraps/data/80/talon.jpg
.jpg
Fraps/data/80/taric.jpg
.jpg
Fraps/data/80/teemo.jpg
.jpg
Fraps/data/80/thresh.jpg
.jpg
Fraps/data/80/tristana.jpg
.jpg
Fraps/data/80/trundle.jpg
.jpg
Fraps/data/80/tryndamere.jpg
.jpg
Fraps/data/80/twistedfate.jpg
.jpg
Fraps/data/80/twitch.jpg
.jpg
Fraps/data/80/udyr.jpg
.jpg
Fraps/data/80/urgot.jpg
.jpg
Fraps/data/80/varus.jpg
.jpg
Fraps/data/80/vayne.jpg
.jpg
Fraps/data/80/veigar.jpg
.jpg
Fraps/data/80/velkoz.jpg
.jpg
Fraps/data/80/vex.jpg
.jpg
Fraps/data/80/vi.jpg
.jpg
Fraps/data/80/viego.jpg
.jpg
Fraps/data/80/viktor.jpg
.jpg
Fraps/data/80/vladimir.jpg
.jpg
Fraps/data/80/volibear.jpg
.jpg
Fraps/data/80/warwick.jpg
.jpg
Fraps/data/80/xayah.jpg
.jpg
Fraps/data/80/xerath.jpg
.jpg
Fraps/data/80/xinzhao.jpg
.jpg
Fraps/data/80/yasuo.jpg
.jpg
Fraps/data/80/yone.jpg
.jpg
Fraps/data/80/yorick.jpg
.jpg
Fraps/data/80/yuumi.jpg
.jpg
Fraps/data/80/zac.jpg
.jpg
Fraps/data/80/zed.jpg
.jpg
Fraps/data/80/zeri.jpg
.jpg
Fraps/data/80/ziggs.jpg
.jpg
Fraps/data/80/zilean.jpg
.jpg
Fraps/data/80/zoe.jpg
.jpg
Fraps/data/80/zyra.jpg
.jpg
Fraps/data/CardWait.jpg
.jpg
Fraps/data/Default/All.ini
Fraps/data/Default/Blank.ini
Fraps/data/Default/Config.ini
Fraps/data/Default/Language.ini
Fraps/data/Default/Map.ini
Fraps/data/Default/SkinCustom.ini
Fraps/data/Default/chromas.ini
Fraps/data/Default/data_AR.ini
Fraps/data/Default/data_BR.ini
Fraps/data/Default/data_CN.ini
Fraps/data/Default/data_CZ.ini
Fraps/data/Default/data_DE.ini
Fraps/data/Default/data_ES.ini
Fraps/data/Default/data_FR.ini
Fraps/data/Default/data_GR.ini
Fraps/data/Default/data_HU.ini
Fraps/data/Default/data_ID.ini
Fraps/data/Default/data_IDini
Fraps/data/Default/data_IT.ini
Fraps/data/Default/data_JP.ini
Fraps/data/Default/data_KR.ini
Fraps/data/Default/data_PL.ini
Fraps/data/Default/data_RO.ini
Fraps/data/Default/data_RU.ini
Fraps/data/Default/data_TH.ini
Fraps/data/Default/data_TR.ini
Fraps/data/Default/data_TW.ini
Fraps/data/Default/data_VN.ini
Fraps/data/Default/data_en.ini
Fraps/data/Default/name_CN.ini
Fraps/data/Default/name_GR.ini
Fraps/data/Default/name_JP.ini
Fraps/data/Default/name_KR.ini
Fraps/data/Default/name_RU.ini
Fraps/data/Default/name_TW.ini
Fraps/data/Kaisa.jpg
.jpg
Fraps/data/Lib/Lib
.dll windows x86

65a4350001a4f5b51bfba191d5159219

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
DeleteFileA
Sleep
CreateThread
GetWindowsDirectoryA
VirtualAlloc
VirtualProtect
VirtualQuery
ReadProcessMemory
WriteProcessMemory
GetModuleHandleA
GetProcAddress
CreateFileMappingA
OpenFileMappingA
LoadLibraryA
SetEndOfFile
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
InterlockedFlushSList
RaiseException
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ReadFile
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
CloseHandle
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetStdHandle
GetFileType
GetACP
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStringTypeW
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleCP
CreateFileW
HeapSize
HeapReAlloc
DecodePointer

shlwapi

PathFileExistsA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Exports

Exports

HidD_FlushQueue
HidD_FreePreparsedData
HidD_GetAttributes
HidD_GetConfiguration
HidD_GetFeature
HidD_GetHidGuid
HidD_GetIndexedString
HidD_GetInputReport
HidD_GetManufacturerString
HidD_GetMsGenreDescriptor
HidD_GetNumInputBuffers
HidD_GetPhysicalDescriptor
HidD_GetPreparsedData
HidD_GetProductString
HidD_GetSerialNumberString
HidD_Hello
HidD_SetConfiguration
HidD_SetFeature
HidD_SetNumInputBuffers
HidD_SetOutputReport
HidP_GetButtonCaps
HidP_GetCaps
HidP_GetData
HidP_GetExtendedAttributes
HidP_GetLinkCollectionNodes
HidP_GetScaledUsageValue
HidP_GetSpecificButtonCaps
HidP_GetSpecificValueCaps
HidP_GetUsageValue
HidP_GetUsageValueArray
HidP_GetUsages
HidP_GetUsagesEx
HidP_GetValueCaps
HidP_InitializeReportForID
HidP_MaxDataListLength
HidP_MaxUsageListLength
HidP_SetData
HidP_SetScaledUsageValue
HidP_SetUsageValue
HidP_SetUsageValueArray
HidP_SetUsages
HidP_TranslateUsagesToI8042ScanCodes
HidP_UnsetUsages
HidP_UsageListDifference

Sections

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fraps/data/Lib/Lib2
.dll windows x86

ef47f06f3111e10001654972f2993910

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
Sleep
TerminateProcess
CreateThread
GetWindowsDirectoryA
VirtualAlloc
VirtualProtect
VirtualQuery
ReadProcessMemory
WriteProcessMemory
GetModuleHandleA
GetProcAddress
LoadLibraryA
SetEndOfFile
WriteConsoleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RaiseException
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ReadFile
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
CloseHandle
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetStdHandle
GetFileType
GetACP
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStringTypeW
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleCP
CreateFileW
HeapSize
HeapReAlloc
DecodePointer

shlwapi

PathFileExistsA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Exports

Exports

HidD_FlushQueue
HidD_FreePreparsedData
HidD_GetAttributes
HidD_GetConfiguration
HidD_GetFeature
HidD_GetHidGuid
HidD_GetIndexedString
HidD_GetInputReport
HidD_GetManufacturerString
HidD_GetMsGenreDescriptor
HidD_GetNumInputBuffers
HidD_GetPhysicalDescriptor
HidD_GetPreparsedData
HidD_GetProductString
HidD_GetSerialNumberString
HidD_Hello
HidD_SetConfiguration
HidD_SetFeature
HidD_SetNumInputBuffers
HidD_SetOutputReport
HidP_GetButtonCaps
HidP_GetCaps
HidP_GetData
HidP_GetExtendedAttributes
HidP_GetLinkCollectionNodes
HidP_GetScaledUsageValue
HidP_GetSpecificButtonCaps
HidP_GetSpecificValueCaps
HidP_GetUsageValue
HidP_GetUsageValueArray
HidP_GetUsages
HidP_GetUsagesEx
HidP_GetValueCaps
HidP_InitializeReportForID
HidP_MaxDataListLength
HidP_MaxUsageListLength
HidP_SetData
HidP_SetScaledUsageValue
HidP_SetUsageValue
HidP_SetUsageValueArray
HidP_SetUsages
HidP_TranslateUsagesToI8042ScanCodes
HidP_UnsetUsages
HidP_UsageListDifference

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fraps/data/Lib/Lib2.dll
.dll windows x86

0bb1f38f62c92aab4983604754d24dfe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenFileMappingA
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
MultiByteToWideChar
RtlUnwind
RaiseException
HeapFree
GetCommandLineA
GetVersion
HeapAlloc
HeapReAlloc
ExitProcess
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
TerminateProcess
GetCurrentProcess
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
CloseHandle
WriteFile
SetFilePointer
FlushFileBuffers
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
GetProcAddress
GetModuleHandleA
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
SetStdHandle
ReadFile
GetACP
GetOEMCP
LoadLibraryA
CreateFileA
GetLocaleInfoW
SetEndOfFile
SetEnvironmentVariableA

Exports

Exports

MD5Hash
ReManifest

Sections

.text
Size: 156KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fraps/data/Lib/Lib5.dll
.dll windows x86

1f41d5d700c95bb5fe0a1c883cc3638b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
SleepEx
Sleep
OpenProcess
GetTickCount
VirtualAlloc
VirtualFree
VirtualAllocEx
VirtualProtectEx
ReadProcessMemory
GetModuleHandleA
GetProcAddress
CreateFileMappingA
LoadLibraryA
CreateToolhelp32Snapshot
Process32First
Process32Next
RaiseException
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStringTypeW
SetStdHandle
HeapSize
HeapReAlloc
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
DecodePointer
WriteConsoleW
CreateFileW

user32

FindWindowA

Exports

Exports

?CallFunc@@YGXXZ

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fraps/data/Lib/clear.zip
.zip
Fraps/data/Lib/zkhungvien.zip
.zip
Fraps/data/NotFound.JPG
.jpg
Fraps/data/aatrox.jpg
.jpg
Fraps/data/ahri.jpg
.jpg
Fraps/data/akali.jpg
.jpg
Fraps/data/akshan.jpg
.jpg
Fraps/data/alistar.jpg
.jpg
Fraps/data/amumu.jpg
.jpg
Fraps/data/anivia.jpg
.jpg
Fraps/data/annie.jpg
.jpg
Fraps/data/aphelios.jpg
.jpg
Fraps/data/ashe.jpg
.jpg
Fraps/data/aurelionsol.jpg
.jpg
Fraps/data/azir.jpg
.jpg
Fraps/data/back.jpg
.jpg
Fraps/data/bard.jpg
.jpg
Fraps/data/blitzcrank.jpg
.jpg
Fraps/data/brand.jpg
.jpg
Fraps/data/braum.jpg
.jpg
Fraps/data/caitlyn.jpg
.jpg
Fraps/data/camille.jpg
.jpg
Fraps/data/cassiopeia.jpg
.jpg
Fraps/data/chogath.jpg
.jpg
Fraps/data/corki.jpg
.jpg
Fraps/data/darius.jpg
.jpg
Fraps/data/diana.jpg
.jpg
Fraps/data/draven.jpg
.jpg
Fraps/data/drmundo.jpg
.jpg
Fraps/data/ekko.jpg
.jpg
Fraps/data/elise.jpg
.jpg
Fraps/data/evelynn.jpg
.jpg
Fraps/data/ezreal.jpg
.jpg
Fraps/data/fiddlesticks.jpg
.jpg
Fraps/data/fiora.jpg
.jpg
Fraps/data/fizz.jpg
.jpg
Fraps/data/font.ttf
Fraps/data/galio.jpg
.jpg
Fraps/data/gangplank.jpg
.jpg
Fraps/data/garen.jpg
.jpg
Fraps/data/gnar.jpg
.jpg
Fraps/data/gragas.jpg
.jpg
Fraps/data/graves.jpg
.jpg
Fraps/data/gwen.jpg
.jpg
Fraps/data/hecarim.jpg
.jpg
Fraps/data/heimerdinger.jpg
.jpg
Fraps/data/illaoi.jpg
.jpg
Fraps/data/irelia.jpg
.jpg
Fraps/data/ivern.jpg
.jpg
Fraps/data/janna.jpg
.jpg
Fraps/data/jarvaniv.jpg
.jpg
Fraps/data/jax.jpg
.jpg
Fraps/data/jayce.jpg
.jpg
Fraps/data/jhin.jpg
.jpg
Fraps/data/jinx.jpg
.jpg
Fraps/data/kalista.jpg
.jpg
Fraps/data/karma.jpg
.jpg
Fraps/data/karthus.jpg
.jpg
Fraps/data/kassadin.jpg
.jpg
Fraps/data/katarina.jpg
.jpg
Fraps/data/kayle.jpg
.jpg
Fraps/data/kayn.jpg
.jpg
Fraps/data/kennen.jpg
.jpg
Fraps/data/khazix.jpg
.jpg
Fraps/data/kindred.jpg
.jpg
Fraps/data/kled.jpg
.jpg
Fraps/data/kogmaw.jpg
.jpg
Fraps/data/leblanc.jpg
.jpg
Fraps/data/leesin.jpg
.jpg
Fraps/data/leona.jpg
.jpg
Fraps/data/lillia.jpg
.jpg
Fraps/data/lissandra.jpg
.jpg
Fraps/data/loading.jpg
.jpg
Fraps/data/lucian.jpg
.jpg
Fraps/data/lulu.jpg
.jpg
Fraps/data/lux.jpg
.jpg
Fraps/data/malphite.jpg
.jpg
Fraps/data/malzahar.jpg
.jpg
Fraps/data/maokai.jpg
.jpg
Fraps/data/masteryi.jpg
.jpg
Fraps/data/missfortune.jpg
.jpg
Fraps/data/monkeyking.jpg
.jpg
Fraps/data/mordekaiser.jpg
.jpg
Fraps/data/morgana.jpg
.jpg
Fraps/data/nami.jpg
.jpg
Fraps/data/nasus.jpg
.jpg
Fraps/data/nautilus.jpg
.jpg
Fraps/data/neeko.jpg
.jpg
Fraps/data/nidalee.jpg
.jpg
Fraps/data/nocturne.jpg
.jpg
Fraps/data/nunu.jpg
.jpg
Fraps/data/olaf.jpg
.jpg
Fraps/data/orianna.jpg
.jpg
Fraps/data/ornn.jpg
.jpg
Fraps/data/pantheon.jpg
.jpg
Fraps/data/poppy.jpg
.jpg
Fraps/data/pyke.jpg
.jpg
Fraps/data/qiyana.jpg
.jpg
Fraps/data/quinn.jpg
.jpg
Fraps/data/rakan.jpg
.jpg
Fraps/data/rammus.jpg
.jpg
Fraps/data/reksai.jpg
.jpg
Fraps/data/release
Fraps/data/rell.jpg
.jpg
Fraps/data/renata.jpg
.jpg
Fraps/data/renekton.jpg
.jpg
Fraps/data/rengar.jpg
.jpg
Fraps/data/riven.jpg
.jpg
Fraps/data/rumble.jpg
.jpg
Fraps/data/ryze.jpg
.jpg
Fraps/data/samira.jpg
.jpg
Fraps/data/sejuani.jpg
.jpg
Fraps/data/senna.jpg
.jpg
Fraps/data/seraphine.jpg
.jpg
Fraps/data/sett.jpg
.jpg
Fraps/data/shaco.jpg
.jpg
Fraps/data/shen.jpg
.jpg
Fraps/data/shyvana.jpg
.jpg
Fraps/data/singed.jpg
.jpg
Fraps/data/sion.jpg
.jpg
Fraps/data/sivir.jpg
.jpg
Fraps/data/skarner.jpg
.jpg
Fraps/data/sona.jpg
.jpg
Fraps/data/soraka.jpg
.jpg
Fraps/data/swain.jpg
.jpg
Fraps/data/sylas.jpg
.jpg
Fraps/data/syndra.jpg
.jpg
Fraps/data/tahmkench.jpg
.jpg
Fraps/data/taliyah.jpg
.jpg
Fraps/data/talon.jpg
.jpg
Fraps/data/taric.jpg
.jpg
Fraps/data/teemo.jpg
.jpg
Fraps/data/thresh.jpg
.jpg
Fraps/data/tristana.jpg
.jpg
Fraps/data/trundle.jpg
.jpg
Fraps/data/tryndamere.jpg
.jpg
Fraps/data/twistedfate.jpg
.jpg
Fraps/data/twitch.jpg
.jpg
Fraps/data/udyr.jpg
.jpg
Fraps/data/urgot.jpg
.jpg
Fraps/data/varus.jpg
.jpg
Fraps/data/vayne.jpg
.jpg
Fraps/data/veigar.jpg
.jpg
Fraps/data/velkoz.jpg
.jpg
Fraps/data/vex.jpg
.jpg
Fraps/data/vi.jpg
.jpg
Fraps/data/viego.jpg
.jpg
Fraps/data/viktor.jpg
.jpg
Fraps/data/vladimir.jpg
.jpg
Fraps/data/volibear.jpg
.jpg
Fraps/data/warwick.jpg
.jpg
Fraps/data/xayah.jpg
.jpg
Fraps/data/xerath.jpg
.jpg
Fraps/data/xinzhao.jpg
.jpg
Fraps/data/yasuo.jpg
.jpg
Fraps/data/yone.jpg
.jpg
Fraps/data/yorick.jpg
.jpg
Fraps/data/youtube.jpg
.jpg
Fraps/data/yuumi.jpg
.jpg
Fraps/data/zac.jpg
.jpg
Fraps/data/zed.jpg
.jpg
Fraps/data/zeri.jpg
.jpg
Fraps/data/ziggs.jpg
.jpg
Fraps/data/zilean.jpg
.jpg
Fraps/data/zoe.jpg
.jpg
Fraps/data/zyra.jpg
.jpg

Sharing

General

Malware Config

Signatures

Files

f0543011c192603650946b2c54d1a48a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

gdiplus

winhttp

uxtheme

psapi

Sections

.text Size: 268KB - Virtual size: 267KB

.rdata Size: 77KB - Virtual size: 77KB

.data Size: 11KB - Virtual size: 27KB

.rsrc Size: 149KB - Virtual size: 149KB

.reloc Size: 37KB - Virtual size: 37KB

65a4350001a4f5b51bfba191d5159219

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shlwapi

version

Exports

Exports

Sections

.text Size: 96KB - Virtual size: 96KB

.rdata Size: 29KB - Virtual size: 28KB

.data Size: 2KB - Virtual size: 9KB

.gfids Size: 512B - Virtual size: 208B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 6KB - Virtual size: 5KB

ef47f06f3111e10001654972f2993910

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shlwapi

version

Exports

Exports

Sections

.text Size: 84KB - Virtual size: 83KB

.rdata Size: 28KB - Virtual size: 28KB

.data Size: 3KB - Virtual size: 6KB

.gfids Size: 512B - Virtual size: 208B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 5KB - Virtual size: 5KB

0bb1f38f62c92aab4983604754d24dfe

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 156KB - Virtual size: 152KB

.rdata Size: 24KB - Virtual size: 22KB

.data Size: 12KB - Virtual size: 16KB

.reloc Size: 12KB - Virtual size: 11KB

1f41d5d700c95bb5fe0a1c883cc3638b

Headers

.text
Size: 268KB - Virtual size: 267KB

.rdata
Size: 77KB - Virtual size: 77KB

.data
Size: 11KB - Virtual size: 27KB

.rsrc
Size: 149KB - Virtual size: 149KB

.reloc
Size: 37KB - Virtual size: 37KB

.text
Size: 96KB - Virtual size: 96KB

.rdata
Size: 29KB - Virtual size: 28KB

.data
Size: 2KB - Virtual size: 9KB

.gfids
Size: 512B - Virtual size: 208B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 6KB - Virtual size: 5KB

.text
Size: 84KB - Virtual size: 83KB

.rdata
Size: 28KB - Virtual size: 28KB

.data
Size: 3KB - Virtual size: 6KB

.gfids
Size: 512B - Virtual size: 208B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 5KB - Virtual size: 5KB

.text
Size: 156KB - Virtual size: 152KB

.rdata
Size: 24KB - Virtual size: 22KB

.data
Size: 12KB - Virtual size: 16KB

.reloc
Size: 12KB - Virtual size: 11KB

.text
Size: 64KB - Virtual size: 63KB

.rdata
Size: 25KB - Virtual size: 25KB

.data
Size: 2KB - Virtual size: 5KB

.gfids
Size: 512B - Virtual size: 160B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 4KB - Virtual size: 3KB