SoulcaliburVI[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SoulcaliburVI.exe
Size

68.4MB
MD5

30da8c5da02e3c7ba0a91580bfb7bcb9
SHA1

2fdd5f13fabb96e2f5cb4a1e01e2b4a89e97129b
SHA256

f8904e4b04bca3b47bc52a683f6190365d2eb89ee8f44f8072759e9c5e04a553
SHA512

58c9dc34a8aed9ed6a612f73dc26436eba71c92adf81e70ad32e8d00c2e6eea95eceed96cdf24dc979829177ed920533f6b997e256e0bcfb0ce847357109976e
SSDEEP

393216:FBACexqvwRSGcbZvi4vtSiygVLR3v4AzBAb2VI0jdobg2YGG2ozQmZE/S0c:/A5Xgb3ll5jKRy7E/X

Score

1^/10

Malware Config

Signatures

Files

SoulcaliburVI.exe
.exe windows x64

180d53dd873af6b66218ca287ec3a186

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

wininet

InternetCrackUrlW
InternetQueryOptionW
HttpOpenRequestW
InternetGetConnectedState
InternetReadFile
InternetConnectW
InternetCloseHandle
InternetOpenW
InternetAttemptConnect
HttpQueryInfoW
HttpSendRequestW
InternetSetStatusCallbackW
InternetSetOptionW

ws2_32

closesocket
WSAIoctl
__WSAFDIsSet
WSASetLastError
shutdown
inet_ntop
WSAWaitForMultipleEvents
WSASetEvent
WSAResetEvent
connect
ioctlsocket
getpeername
getsockname
getsockopt
htonl
htons
WSAEventSelect
WSAEnumNetworkEvents
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
socket
gethostname
WSAStartup
WSACleanup
WSAGetLastError
getaddrinfo
freeaddrinfo
inet_pton
bind
accept
inet_addr
gethostbyname
getprotobyname
WSACloseEvent
WSACreateEvent

dbghelp

StackWalk64
MiniDumpWriteDump
SymSetOptions
SymGetOptions
SymFunctionTableAccess64
SymGetSymFromAddr64
SymGetModuleBase64
SymGetLineFromAddr64
SymInitializeW
SymRefreshModuleList
SymGetModuleInfo64

winmm

waveOutGetNumDevs
timeBeginPeriod

kernel32

ReleaseMutex
CreateMutexW
Sleep
InitializeCriticalSection
SetCriticalSectionSpinCount
HeapAlloc
HeapFree
GetProcessHeap
LocalAlloc
LocalFree
GetLocaleInfoW
TlsAlloc
TlsFree
SetHandleInformation
GetOverlappedResult
WriteFile
ReadFile
VerSetConditionMask
GetStdHandle
GetEnvironmentVariableW
SetEnvironmentVariableW
CreateDirectoryW
CreateFileW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
FlushFileBuffers
GetDiskFreeSpaceExW
GetFileAttributesW
GetFileAttributesExW
GetFileSizeEx
RemoveDirectoryW
SetFileAttributesW
SetFileTime
OutputDebugStringW
CloseHandle
RaiseException
SetEvent
ResetEvent
WaitForSingleObject
CreateEventW
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
CreateThread
SetThreadPriority
GlobalMemoryStatusEx
GetSystemInfo
GetSystemDirectoryW
GetVersionExW
GetLogicalProcessorInformation
GetNativeSystemInfo
VirtualAlloc
VirtualFree
VirtualProtect
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
LoadResource
LockResource
SizeofResource
GlobalAlloc
GetCurrentThreadId
GlobalUnlock
FormatMessageW
FindResourceW
MoveFileW
VerifyVersionInfoW
FileTimeToSystemTime
SystemTimeToFileTime
GetUserPreferredUILanguages
GetUserDefaultLocaleName
GetConsoleScreenBufferInfo
SetConsoleScreenBufferSize
SetConsoleWindowInfo
SetConsoleTextAttribute
FreeConsole
AttachConsole
AllocConsole
SetConsoleCtrlHandler
GetLastError
GetConsoleWindow
K32GetProcessMemoryInfo
RtlCaptureStackBackTrace
SetCurrentDirectoryW
GetCurrentDirectoryW
GetFullPathNameW
GetLongPathNameW
GetTempPathW
SetErrorMode
PeekNamedPipe
QueryPerformanceFrequency
ReleaseSemaphore
GetProcessTimes
GetExitCodeProcess
SwitchToThread
GetCurrentThread
OpenThread
SuspendThread
ResumeThread
CreateProcessW
GetThreadContext
GetProcessHandleCount
GetVersion
GetSystemTime
GetSystemTimeAsFileTime
GetLocalTime
FreeLibrary
GetModuleHandleExW
LoadLibraryExW
SetThreadAffinityMask
CreateSemaphoreW
LoadLibraryW
SetDllDirectoryW
GetComputerNameW
GetSystemDefaultLCID
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
InitializeSRWLock
AcquireSRWLockShared
ReleaseSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetFileSize
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
GetTickCount64
FlushViewOfFile
LoadLibraryA
DeviceIoControl
GetGeoInfoW
GetUserGeoID
GetUserDefaultLangID
GetSystemDefaultLocaleName
QueryPerformanceCounter
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TryEnterCriticalSection
MultiByteToWideChar
RtlVirtualUnwind
FlushConsoleInputBuffer
GetTickCount
GlobalMemoryStatus
SetLastError
GetACP
GetThreadLocale
CreateFileA
CreateFileMappingA
GetLocaleInfoA
GetTimeZoneInformation
GetGeoInfoA
GetNumberFormatW
GetCurrencyFormatW
SystemTimeToTzSpecificLocalTime
GetDateFormatW
GetTimeFormatW
ExitProcess
lstrlenA
FormatMessageA
CreateSemaphoreA
GetModuleFileNameA
GetModuleHandleA
WideCharToMultiByte
GetCommandLineW
TlsSetValue
WriteConsoleW
InitializeCriticalSectionEx
SleepEx
VerifyVersionInfoA
WaitForMultipleObjects
ExpandEnvironmentStringsA
OpenEventW
RtlCaptureContext
RtlLookupFunctionEntry
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
VirtualQuery
LoadLibraryExA
TlsGetValue
SetFilePointer
OutputDebugStringA
CreateDirectoryA
DeleteFileA
GetFileAttributesA
SetEndOfFile
MoveFileA
CreateEventA
GetThreadPriority
GetExitCodeThread
GetProcessAffinityMask
GlobalLock
GetFileType

user32

SetWindowRgn
EndPaint
BeginPaint
GetForegroundWindow
SetActiveWindow
UpdateWindow
DrawStateW
IsWindowEnabled
EnableWindow
RegisterTouchWindow
SetFocus
IsZoomed
SetWindowPlacement
GetWindowPlacement
SetLayeredWindowAttributes
DestroyWindow
IsWindow
CreateWindowExW
UnregisterClassW
PostMessageW
GetRawInputDeviceList
LoadImageW
CreateIconIndirect
ChangeDisplaySettingsW
ChangeDisplaySettingsExW
EnumDisplaySettingsW
GetClientRect
SetWindowLongW
GetRawInputDeviceInfoA
GetRawInputData
GetWindowInfo
EnumDisplayMonitors
GetMonitorInfoW
MonitorFromRect
MonitorFromPoint
MonitorFromWindow
EnumDisplayDevicesW
LoadIconW
LoadCursorFromFileW
LoadCursorW
GetWindowThreadProcessId
GetTopWindow
GetWindowLongW
WindowFromPoint
ScreenToClient
ClientToScreen
ClipCursor
GetProcessWindowStation
GetUserObjectInformationW
GetCursorPos
SetCursor
SetCursorPos
ShowCursor
MessageBoxW
EnumDisplayDevicesA
AdjustWindowRectEx
GetWindowRect
SetWindowTextW
ReleaseDC
GetDC
SetForegroundWindow
ReleaseCapture
SetCapture
GetCapture
MapVirtualKeyW
CloseTouchInputHandle
GetTouchInputInfo
SendInput
GetKeyState
GetActiveWindow
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
SetDlgItemTextW
SystemParametersInfoW
DestroyCursor
GetDlgItem
RegisterRawInputDevices
EndDialog
DialogBoxParamW
IsIconic
SetWindowPos
ShowWindow
RegisterClassW
PostQuitMessage
DefWindowProcW
GetMessageExtraInfo
UnregisterHotKey
RegisterHotKey
PeekMessageW
DispatchMessageW
TranslateMessage
DisableProcessWindowsGhosting
GetKeyboardLayoutList
ActivateKeyboardLayout
LoadKeyboardLayoutW
GetSystemMetrics
GetFocus
GetKeyboardLayout
GetAsyncKeyState

gdi32

ExtEscape
CreateDCW
SwapBuffers
SetPixelFormat
ChoosePixelFormat
CreateBitmap
TextOutW
DeleteDC
GetDeviceCaps
GetTextExtentPoint32W
CreateFontIndirectW
CreateRectRgn
CreateRoundRectRgn
DeleteObject
GetStockObject
PtInRegion
SelectObject
SetBkColor
SetBkMode
SetTextColor
SetTextAlign
CreateDIBSection
GetObjectW
CreateCompatibleDC

advapi32

InitializeSecurityDescriptor
RegQueryValueExW
RegOpenKeyExW
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegSetValueExW
RegQueryValueExA
DeregisterEventSource
GetUserNameW
RegOpenKeyExA
SetSecurityDescriptorDacl
RegisterEventSourceW
ReportEventW

shell32

ShellExecuteExW
ShellExecuteW
SHGetFolderPathW

ole32

CoTaskMemAlloc
CoTaskMemFree
CoSetProxyBlanket
PropVariantClear
CoUninitialize
IIDFromString
ReleaseStgMedium
RevokeDragDrop
RegisterDragDrop
OleUninitialize
OleInitialize
CoInitialize
CoCreateGuid
StringFromGUID2
CoInitializeEx
CoCreateInstance

oleaut32

SysAllocString
VariantCopy
SysFreeString

iphlpapi

GetIfEntry2
GetAdaptersInfo
GetAdaptersAddresses

setupapi

SetupDiDestroyDeviceInfoList
CM_Get_Device_IDW
SetupDiOpenDevRegKey
SetupDiEnumDeviceInfo
SetupDiGetClassDevsExW

dwmapi

DwmSetWindowAttribute
DwmGetCompositionTimingInfo
DwmIsCompositionEnabled
DwmFlush

imm32

ImmGetContext
ImmGetConversionStatus
ImmSetConversionStatus
ImmGetDescriptionW
ImmGetIMEFileNameW
ImmGetCompositionStringW
ImmGetProperty
ImmCreateContext
ImmDestroyContext
ImmReleaseContext
ImmNotifyIME
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmAssociateContext

xinput1_3

ord3
ord2

opengl32

wglMakeCurrent
wglGetCurrentContext
wglGetCurrentDC
wglGetProcAddress
wglCreateContext
wglDeleteContext

dxgi

CreateDXGIFactory1
CreateDXGIFactory

d3d9

D3DPERF_EndEvent
D3DPERF_BeginEvent

d3d11

D3D11CreateDevice

x3daudio1_7

X3DAudioInitialize
X3DAudioCalculate

xapofx1_5

CreateFX

dsound

ord11
ord8
ord12

winhttp

WinHttpGetDefaultProxyConfiguration
WinHttpGetIEProxyConfigForCurrentUser

wldap32

ord143
ord46
ord211
ord60
ord50
ord41
ord22
ord26
ord27
ord32
ord33
ord35
ord79
ord30
ord200
ord301

normaliz

IdnToAscii

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??_7ios_base@std@@6B@
?_BADOFF@std@@3_JB
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??_7facet@locale@std@@6B@
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Ios_base_dtor@ios_base@std@@CAXPEAV12@@Z
?uncaught_exception@std@@YA_NXZ
_Inf
?id@?$collate@D@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
_Getcoll
_Strcoll
_Strxfrm
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
??Bid@locale@std@@QEAA_KXZ
??0facet@locale@std@@IEAA@_K@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?tolower@?$ctype@D@std@@QEBADD@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
??_7_Facet_base@std@@6B@
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

powrprof

CallNtPowerInformation

vcruntime140

strchr
memchr
memcmp
wcsstr
memset
memcpy
__C_specific_handler
memmove
_purecall
strrchr
wcsrchr
strstr
__std_type_info_name
__std_type_info_compare
__RTtypeid
wcschr
_set_purecall_handler
__RTDynamicCast
__std_exception_copy
__std_exception_destroy
__vcrt_InitializeCriticalSectionEx
__intrinsic_setjmp
_CxxThrowException
__CxxFrameHandler3
longjmp
__std_terminate

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_wassert
_crt_atexit
_cexit
terminate
_initialize_narrow_environment
_configure_narrow_argv
signal
_seh_filter_exe
_set_app_type
_get_narrow_winmain_command_line
_initterm
_initterm_e
_c_exit
_register_thread_local_exe_atexit_callback
strerror
raise
_exit
_getpid
_errno
abort
__sys_nerr
_invalid_parameter_noinfo_noreturn
_invalid_parameter_noinfo
_set_invalid_parameter_handler
_endthreadex
_beginthreadex
exit
_register_onexit_function

api-ms-win-crt-utility-l1-1-0

rand
bsearch
qsort
srand

api-ms-win-crt-string-l1-1-0

isalnum
towupper
iswalpha
isdigit
isupper
wcsncmp
_wcsicmp
towlower
iswspace
_strnicmp
isxdigit
iswdigit
strtok
isalpha
_wcsupr
strncat_s
strcat_s
isspace
strncmp
strnlen
strcpy
strcat
wcslen
tolower
toupper
isgraph
isprint
islower
strncpy
strncat
strcmp
_stricmp
_strdup
strpbrk
iswupper
iswlower
iswalnum
strcpy_s
strncpy_s
_wcsnicmp
wcsncpy
iswxdigit
strlen

api-ms-win-crt-stdio-l1-1-0

fputc
fflush
setvbuf
fgets
__stdio_common_vswprintf
__stdio_common_vfprintf
_lseeki64
_fileno
_setmode
fopen_s
_open
fclose
__stdio_common_vsprintf
__stdio_common_vsprintf_s
ferror
fread
__stdio_common_vswscanf
fwrite
__acrt_iob_func
fputs
fseek
fopen
feof
_wfopen
_fseeki64
_set_fmode
ftell
__stdio_common_vsscanf
_close
__p__commode
_read
_write
__stdio_common_vfwprintf

api-ms-win-crt-math-l1-1-0

expf
_fpclass
sqrtf
fmod
tanf
atan2f
log10f
logf
_finite
log2f
fmodf
tan
cosf
atanf
asinf
sqrt
atan2
atan
sinf
exp2
asin
roundf
powf
__setusermatherr
exp
acosf
_isnan
log10
floor
modf
frexp
ceil
cos
sin
floorf
pow
log
fabs
sinhf
ldexp

api-ms-win-crt-heap-l1-1-0

_set_new_mode
realloc
calloc
free
malloc

api-ms-win-crt-convert-l1-1-0

wcstoul
_wtoi64
strtoll
wcstombs
atol
strtol
strtod
_wtof
_wtoi
atoi
strtoul
_strtoui64
wcstod
_strtoi64
_wcstoui64

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-time-l1-1-0

_gmtime64
_tzset
__tzname
_localtime64
_time64
_gmtime64_s
__timezone

api-ms-win-crt-conio-l1-1-0

_getch

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-filesystem-l1-1-0

_fstat64
_stat64i32
_stat64

dinput8

DirectInput8Create

Exports

Exports

AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
PrintScriptCallstack
agsDeInit
agsDriverExtensionsDX11_BeginUAVOverlap
agsDriverExtensionsDX11_DeInit
agsDriverExtensionsDX11_EndUAVOverlap
agsDriverExtensionsDX11_GetMaxClipRects
agsDriverExtensionsDX11_IASetPrimitiveTopology
agsDriverExtensionsDX11_Init
agsDriverExtensionsDX11_MultiDrawIndexedInstancedIndirect
agsDriverExtensionsDX11_MultiDrawIndexedInstancedIndirectCountIndirect
agsDriverExtensionsDX11_MultiDrawInstancedIndirect
agsDriverExtensionsDX11_MultiDrawInstancedIndirectCountIndirect
agsDriverExtensionsDX11_NumPendingAsyncCompileJobs
agsDriverExtensionsDX11_SetClipRects
agsDriverExtensionsDX11_SetDepthBounds
agsDriverExtensionsDX11_SetDiskShaderCacheEnabled
agsDriverExtensionsDX11_SetMaxAsyncCompileThreadCount
agsDriverExtensionsDX11_SetViewBroadcastMasks
agsGetCrossfireGPUCount
agsInit
agsSetDisplayMode
opus_decode
opus_decode_float
opus_decoder_create
opus_decoder_ctl
opus_decoder_destroy
opus_decoder_get_nb_samples
opus_decoder_get_size
opus_decoder_init
opus_encode
opus_encode_float
opus_encoder_create
opus_encoder_ctl
opus_encoder_destroy
opus_encoder_get_size
opus_encoder_init
opus_get_version_string
opus_multistream_decode
opus_multistream_decode_float
opus_multistream_decoder_create
opus_multistream_decoder_ctl
opus_multistream_decoder_destroy
opus_multistream_decoder_get_size
opus_multistream_decoder_init
opus_multistream_packet_pad
opus_multistream_packet_unpad
opus_packet_get_bandwidth
opus_packet_get_nb_channels
opus_packet_get_nb_frames
opus_packet_get_nb_samples
opus_packet_get_samples_per_frame
opus_packet_pad
opus_packet_parse
opus_packet_unpad
opus_pcm_soft_clip
opus_repacketizer_cat
opus_repacketizer_create
opus_repacketizer_destroy
opus_repacketizer_get_nb_frames
opus_repacketizer_get_size
opus_repacketizer_init
opus_repacketizer_out
opus_repacketizer_out_range
opus_strerror

Sections

.text
Size: 50.2MB - Virtual size: 50.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14.3MB - Virtual size: 14.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 861KB - Virtual size: 8.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 29B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 267KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 694KB - Virtual size: 693KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

180d53dd873af6b66218ca287ec3a186

Headers

DLL Characteristics

File Characteristics

Imports

wininet

ws2_32

dbghelp

winmm

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

iphlpapi

setupapi

dwmapi

imm32

xinput1_3

opengl32

dxgi

d3d9

d3d11

x3daudio1_7

xapofx1_5

dsound

winhttp

wldap32

normaliz

msvcp140

version

powrprof

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-conio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

dinput8

Exports

Exports

Sections

.text Size: 50.2MB - Virtual size: 50.2MB

.rdata Size: 14.3MB - Virtual size: 14.3MB

.data Size: 861KB - Virtual size: 8.0MB

.pdata Size: 2.2MB - Virtual size: 2.2MB

.tls Size: 512B - Virtual size: 29B

.gfids Size: 512B - Virtual size: 56B

_RDATA Size: 32KB - Virtual size: 32KB

.rsrc Size: 267KB - Virtual size: 267KB

.reloc Size: 694KB - Virtual size: 693KB

.text
Size: 50.2MB - Virtual size: 50.2MB

.rdata
Size: 14.3MB - Virtual size: 14.3MB

.data
Size: 861KB - Virtual size: 8.0MB

.pdata
Size: 2.2MB - Virtual size: 2.2MB

.tls
Size: 512B - Virtual size: 29B

.gfids
Size: 512B - Virtual size: 56B

_RDATA
Size: 32KB - Virtual size: 32KB

.rsrc
Size: 267KB - Virtual size: 267KB

.reloc
Size: 694KB - Virtual size: 693KB