Project 64[.]rar

Sharing

Copy URL

Twitter E-mail

General

Target

Project 64.rar
Size

43.7MB
MD5

8316e6794e641aca8b2fb89462208a78
SHA1

a5b45da2a60607cc0fb6795976fc9d517d7e9ab6
SHA256

f216c50f1d670afa8f530f85d431580901914c3780b2b6a25fd4cdd0b4c6d8da
SHA512

b19e6bd622328869a5869868203af582880bec51064e9585bc85ba3c291feddaf075303f7bfd45f1ca4b0b165ec856b9349b32ed38ccdfb05e3264409daf2838
SSDEEP

786432:u2a3BWGM3L7q08ZV2Bela1dj0Xvw3jK6umY8pVcRpC7m5c8G:i3JM/q08Zocla0SjK69qC7m5xG

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 6 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
static1/unpack001/Project 64/Project64 1.6/Plugin/Jabo_DInput.dll	aspack_v212_v242
static1/unpack001/Project 64/Project64 1.6/Plugin/Jabo_Direct3D6.dll	aspack_v212_v242
static1/unpack001/Project 64/Project64 1.6/Plugin/Jabo_Direct3D8.dll	aspack_v212_v242
static1/unpack001/Project 64/Project64 1.6/Plugin/Jabo_Dsound.dll	aspack_v212_v242
static1/unpack001/Project 64/Project64 1.6/Plugin/NRage_DInput8_V2.dll	aspack_v212_v242
static1/unpack001/Project 64/Project64 1.6/Plugin/RSP.dll	aspack_v212_v242

Unsigned PE 10 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Project 64/Project64 1.6/Plugin/Adaptoid_v1_0.dll
unpack001/Project 64/Project64 1.6/Plugin/Jabo_DInput.dll
unpack001/Project 64/Project64 1.6/Plugin/Jabo_Direct3D6.dll
unpack001/Project 64/Project64 1.6/Plugin/Jabo_Direct3D8.dll
unpack001/Project 64/Project64 1.6/Plugin/Jabo_Dsound.dll
unpack001/Project 64/Project64 1.6/Plugin/NRage_DInput8_V2.dll
unpack001/Project 64/Project64 1.6/Plugin/No Sound.dll
unpack001/Project 64/Project64 1.6/Plugin/RSP.dll
unpack001/Project 64/Project64 1.6/Plugin/Zilmar_Audio.dll
unpack001/Project 64/Project64 1.6/Project64.exe

Files

Project 64.rar
.rar
Project 64/Jogos/LZ_pt.n64
Project 64/Jogos/Super Mario 64 (USA).n64
Project 64/Jogos/Super Smash Bros.n64
Project 64/Project64 1.6/Docs/3rd Party Plugins/Adaptoid.txt
Project 64/Project64 1.6/Docs/3rd Party Plugins/N-Rage/Homepage.url
Project 64/Project64 1.6/Docs/3rd Party Plugins/N-Rage/Readme.txt
Project 64/Project64 1.6/Docs/Cheat Codes/Changes.txt
Project 64/Project64 1.6/Docs/Cheat Codes/Readme.txt
Project 64/Project64 1.6/Docs/Game FAQ/WhatsNew.txt
Project 64/Project64 1.6/Docs/Plugin Specs/Audio #1.1.h
Project 64/Project64 1.6/Docs/Plugin Specs/Controller #1.1.h
Project 64/Project64 1.6/Docs/Plugin Specs/Gfx #1.3.h
.vbs
Project 64/Project64 1.6/Docs/Plugin Specs/Plugin Spec history.txt
Project 64/Project64 1.6/Docs/Plugin Specs/Rsp #1.1.h
Project 64/Project64 1.6/Docs/Project64 Message Board.url
.url
Project 64/Project64 1.6/Docs/RDB/WhatsNew.txt
Project 64/Project64 1.6/Docs/RDX/Unofficial_ReadMe.txt
Project 64/Project64 1.6/Docs/Readme.txt
Project 64/Project64 1.6/Docs/Whatsnew.txt
Project 64/Project64 1.6/Lang/Brazilian Portuguese.pj.Lang
Project 64/Project64 1.6/Lang/Bulgarian.pj.Lang
Project 64/Project64 1.6/Lang/ChineseB5.pj.lang
Project 64/Project64 1.6/Lang/ChineseGB.pj.lang
Project 64/Project64 1.6/Lang/Czech.pj.Lang
Project 64/Project64 1.6/Lang/Danish.pj.Lang
Project 64/Project64 1.6/Lang/Dutch.pj.Lang
Project 64/Project64 1.6/Lang/English.pj.Lang
Project 64/Project64 1.6/Lang/English_alternative.pj.Lang
Project 64/Project64 1.6/Lang/Finnish.pj.Lang
Project 64/Project64 1.6/Lang/French.pj.Lang
Project 64/Project64 1.6/Lang/German.pj.Lang
Project 64/Project64 1.6/Lang/German_localised.pj.Lang
Project 64/Project64 1.6/Lang/Greek.pj.Lang
Project 64/Project64 1.6/Lang/Italian.pj.Lang
Project 64/Project64 1.6/Lang/Italian_alternative.pj.Lang
Project 64/Project64 1.6/Lang/Lithuanian.pj.Lang
Project 64/Project64 1.6/Lang/Norwegian.pj.Lang
Project 64/Project64 1.6/Lang/Russian.pj.Lang
Project 64/Project64 1.6/Lang/Spanish.pj.Lang
Project 64/Project64 1.6/Lang/T-Chinese.pj.Lang
Project 64/Project64 1.6/Lang/Ukrainian.pj.Lang
Project 64/Project64 1.6/Logs/Direct3D8 Error.log
Project 64/Project64 1.6/PJgameFAQ.chm
.chm
Project 64/Project64 1.6/Plugin/Adaptoid_v1_0.dll
.dll windows x86

62ea73ac854ade921df70bc404d1a29a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ReadFile
WriteFile
CreateFileA

user32

MessageBoxA

Exports

Exports

CloseDLL
ControllerCommand
DllAbout
DllConfig
DllTest
GetDllInfo
GetKeys
InitiateControllers
ReadController
RomClosed
RomOpen
WM_KeyDown
WM_KeyUp

Sections

.text
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 537B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Project 64/Project64 1.6/Plugin/Jabo_DInput.dll
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

CloseDLL
ControllerCommand
DllAbout
DllConfig
GetDllInfo
GetKeys
InitiateControllers
ReadController
RomClosed
RomOpen
RumbleCommand
WM_KeyDown
WM_KeyUp

Sections

.text
Size: 37KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.js
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Project 64/Project64 1.6/Plugin/Jabo_Direct3D6.dll
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

CaptureScreen
ChangeWindow
CloseDLL
DllAbout
DllConfig
DrawScreen
GetDllInfo
InitiateGFX
MoveScreen
ProcessDList
ProcessRDPList
RomClosed
RomOpen
SettingsApi_GetPrivateProfileInt
SettingsApi_GetPrivateProfileString
SettingsApi_GetPrivateProfileString2
SettingsApi_WritePrivateProfileString
ShowCFB
UpdateScreen
ViStatusChanged
ViWidthChanged
x86cpu_FastConvToInt
x86cpu_FastInverse
x86cpu_GetFpuFlag
x86cpu_Is3DNowAvailable
x86cpu_IsExtMmxAvailable
x86cpu_IsMmxAvailable
x86cpu_IsSseAvailable
x86cpu_SetFpuFlag

Sections

.text
Size: 85KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 592KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.js
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Project 64/Project64 1.6/Plugin/Jabo_Direct3D8.dll
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

CaptureScreen
ChangeWindow
CloseDLL
DllAbout
DllConfig
DrawScreen
GetDllInfo
GetPrivateProfileIntEx
GetPrivateProfileStringEx
InitiateGFX
MoveScreen
ProcessDList
ProcessRDPList
RomClosed
RomOpen
ShowCFB
Super2xSaI
UpdateScreen
ViStatusChanged
ViWidthChanged
WritePrivateProfileStringEx
x86cpu_FastConvToInt
x86cpu_FastInverse
x86cpu_GetFpuFlag
x86cpu_Is3DNowAvailable
x86cpu_IsExtMmxAvailable
x86cpu_IsMmxAvailable
x86cpu_IsSseAvailable
x86cpu_SetFpuFlag

Sections

.text
Size: 149KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.js
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Project 64/Project64 1.6/Plugin/Jabo_Dsound.dll
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

?RomOpen@@YAXXZ
AiDacrateChanged
AiLenChanged
AiReadLength
AiUpdate
CloseDLL
DllAbout
DllConfig
GetDllInfo
InitiateAudio
ProcessAList
RomClosed
SoundQueue_Add
SoundQueue_CloseGraph
SoundQueue_CloseLog
SoundQueue_DeInitialize
SoundQueue_GetSkips
SoundQueue_Initialize
SoundQueue_InitializeMixer
SoundQueue_MixerAdd
SoundQueue_OpenGraph
SoundQueue_SetFrequency
SoundQueue_SetVolume
SoundQueue_Start
SoundQueue_StartLog
SoundQueue_Stop

Sections

.text
Size: 29KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 524KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.js
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Project 64/Project64 1.6/Plugin/NRage_DInput8_V2.dll
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

CloseDLL
ControllerCommand
DllAbout
DllConfig
DllTest
GetDllInfo
GetKeys
InitiateControllers
ReadController
RomClosed
RomOpen
WM_KeyDown
WM_KeyUp

Sections

.text
Size: 27KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Project 64/Project64 1.6/Plugin/No Sound.dll
.dll windows x86

5ec0c0f82ce996b325edc56517d33144

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

WaitMessage
MessageBoxA

kernel32

InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
RtlUnwind
CloseHandle

Exports

Exports

AiDacrateChanged
AiLenChanged
AiReadLength
AiUpdate
CloseDLL
DllAbout
GetDllInfo
InitiateAudio
ProcessAList
RomClosed

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Project 64/Project64 1.6/Plugin/RSP.dll
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

CloseDLL
DllAbout
DllConfig
DoRspCycles
GetDllInfo
InitiateRSP
RomClosed

Sections

.text
Size: 60KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 18KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.js
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Project 64/Project64 1.6/Plugin/Zilmar_Audio.dll
.dll windows x86

94268aeab370dfb2ce1ca94a83b5c5ca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

dsound

ord1

kernel32

WaitForSingleObject
CreateMutexA
CloseHandle
ReleaseMutex
CreateEventA
GetModuleHandleA
WriteFile
SetFilePointer
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
VirtualAlloc
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LoadLibraryA
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
HeapReAlloc
SetStdHandle
RtlUnwind
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers

user32

MsgWaitForMultipleObjects
SendDlgItemMessageA
EndDialog
MessageBoxA
DialogBoxParamA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA

Exports

Exports

AiDacrateChanged
AiLenChanged
AiReadLength
AiUpdate
CloseDLL
DllAbout
DllConfig
GetDllInfo
InitiateAudio
ProcessAList
RomClosed

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Project 64/Project64 1.6/Project64.cache
Project 64/Project64 1.6/Project64.chm
.chm
Project 64/Project64 1.6/Project64.cht
Project 64/Project64 1.6/Project64.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 142KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 856KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Project 64/Project64 1.6/Project64.exe.manifest
.xml
Project 64/Project64 1.6/Project64.rdb
Project 64/Project64 1.6/Project64.rdx
Project 64/Project64 1.6/Save/SMASH BROTHERS.sra
Project 64/Project64 1.6/Save/SUPER MARIO 64.eep
Project 64/Project64 1.6/Save/THE LEGEND OF ZELDA.pj.zip
.zip
Project 64/Project64 1.6/Save/THE LEGEND OF ZELDA.sra
Project 64/Project64 1.6/pif2.dat

Sharing

General

Malware Config

Signatures

Files

62ea73ac854ade921df70bc404d1a29a

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 1024B - Virtual size: 1024B

.rdata Size: 1024B - Virtual size: 537B

.data Size: 512B - Virtual size: 320B

.reloc Size: 512B - Virtual size: 160B

Headers

File Characteristics

Exports

Exports

Sections

.text Size: 37KB - Virtual size: 68KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 2KB - Virtual size: 16KB

.rsrc Size: 1024B - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 8KB

.js Size: 5KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

Headers

File Characteristics

Exports

Exports

Sections

.text Size: 85KB - Virtual size: 176KB

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 2KB - Virtual size: 592KB

.rsrc Size: 2KB - Virtual size: 8KB

.reloc Size: 9KB - Virtual size: 16KB

.js Size: 5KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

Headers

File Characteristics

Exports

Exports

Sections

.text Size: 149KB - Virtual size: 308KB

.rdata Size: 52KB - Virtual size: 52KB

.data Size: 9KB - Virtual size: 232KB

.data1 Size: 512B - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 12KB - Virtual size: 24KB

.js Size: 5KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

Headers

File Characteristics

Exports

Exports

Sections

.text Size: 29KB - Virtual size: 52KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 1KB - Virtual size: 524KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 3KB - Virtual size: 8KB

.js Size: 5KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

Headers

File Characteristics

Exports

Exports

Sections

.text Size: 27KB - Virtual size: 64KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 2KB - Virtual size: 12KB

.rsrc Size: 4KB - Virtual size: 16KB

.reloc Size: 4KB - Virtual size: 8KB

.aspack Size: 5KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

5ec0c0f82ce996b325edc56517d33144

.text
Size: 1024B - Virtual size: 1024B

.rdata
Size: 1024B - Virtual size: 537B

.data
Size: 512B - Virtual size: 320B

.reloc
Size: 512B - Virtual size: 160B

.text
Size: 37KB - Virtual size: 68KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 2KB - Virtual size: 16KB

.rsrc
Size: 1024B - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 8KB

.js
Size: 5KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB

.text
Size: 85KB - Virtual size: 176KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 2KB - Virtual size: 592KB

.rsrc
Size: 2KB - Virtual size: 8KB

.reloc
Size: 9KB - Virtual size: 16KB

.js
Size: 5KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB

.text
Size: 149KB - Virtual size: 308KB

.rdata
Size: 52KB - Virtual size: 52KB

.data
Size: 9KB - Virtual size: 232KB

.data1
Size: 512B - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 12KB - Virtual size: 24KB

.js
Size: 5KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB

.text
Size: 29KB - Virtual size: 52KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 1KB - Virtual size: 524KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 3KB - Virtual size: 8KB

.js
Size: 5KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB

.text
Size: 27KB - Virtual size: 64KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 2KB - Virtual size: 12KB

.rsrc
Size: 4KB - Virtual size: 16KB

.reloc
Size: 4KB - Virtual size: 8KB

.aspack
Size: 5KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB

.text
Size: 20KB - Virtual size: 17KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 9KB

.reloc
Size: 4KB - Virtual size: 2KB

.text
Size: 60KB - Virtual size: 188KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 1KB - Virtual size: 24KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 18KB - Virtual size: 32KB

.js
Size: 4KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB

.text
Size: 28KB - Virtual size: 24KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 4KB - Virtual size: 432B

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 142KB - Virtual size: 408KB

.rdata
Size: 6KB - Virtual size: 12KB

.data
Size: 13KB - Virtual size: 856KB

.rsrc
Size: 13KB - Virtual size: 64KB

.aspack
Size: 9KB - Virtual size: 12KB

.data
Size: - Virtual size: 4KB