South Park - The Stick of Truth[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

South Park - The Stick of Truth.exe
Size

10.5MB
MD5

f9ed7a585e0e1f1d94557fca1ecbfa63
SHA1

b1faf40c08adf742505f2fdea2f2bfa0188554a7
SHA256

490329aed27160b86966d2800fbf92850e3a470978405b9a19b9dfaf658707b7
SHA512

8b08d8cf8a6a8ea4851f7d7838047c9037bde962c0b51743e52fe998f87338b3c19e17b9a79ca1b0c445504967b724d0e526cc2773c587870d4338d1b4e8c47a
SSDEEP

196608:Rr7ovByOv46dg4lTiRr7Ub6bDVj25jW1D0Jk1eXhcQ76sWAKi5tp+21X2GCzZK7m:B2Z4kg4JiR3bDVC5jGD0Jk1WcKUi521V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
South Park - The Stick of Truth.exe

Files

South Park - The Stick of Truth.exe
.exe windows x86

dc350c91cf2724a28b28ebcd69b9cadd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeEndPeriod
timeGetTime
timeBeginPeriod

shlwapi

PathAppendA

ws2_32

bind
socket
closesocket
setsockopt
ioctlsocket
WSAGetLastError
WSAStartup
WSACleanup
htons
ntohs
ntohl
sendto
recvfrom
htonl
inet_addr

xinput1_3

ord2
ord4
ord3

bink2w32

_BinkGetFrameBuffersInfo@8
_BinkDoFrameAsyncWait@8
_BinkWaitStopAsyncThread@4
_BinkRequestStopAsyncThread@4
_BinkGetError@0
_BinkClose@4
_BinkRegisterFrameBuffers@8
_BinkStartAsyncThread@8
_BinkSetMemory@8
_BinkSetWillLoop@8
_BinkGetSummary@8
_BinkDoFrameAsync@12
_BinkWait@4
_BinkShouldSkip@4
_BinkSetIOSize@4
_BinkSetSoundTrack@8
_BinkNextFrame@4
_BinkControlBackgroundIO@8
_BinkPause@8
_BinkGetRealtime@12
_BinkOpen@8

dinput8

DirectInput8Create

msvcr100

fclose
sscanf
ftell
fseek
fread
__libm_sse2_expf
__libm_sse2_atanf
memcpy_s
__libm_sse2_exp
strtol
__libm_sse2_atan2
__libm_sse2_sin
__libm_sse2_cos
__libm_sse2_log
__libm_sse2_log10
__libm_sse2_tan
fflush
putchar
__libm_sse2_logf
_unlock
__dllonexit
_lock
_onexit
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
_except_handler4_common
?terminate@@YAXXZ
_crt_debugger_hook
_invoke_watson
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_getch
_ftime64
_CIasin
fscanf
sprintf_s
_except_handler3
strtoul
wcstombs_s
sscanf_s
__libm_sse2_powf
vsprintf
_control87
__CxxFrameHandler3
vsprintf_s
_vsnprintf
strncpy
__libm_sse2_pow
atof
__libm_sse2_tanf
__libm_sse2_acosf
__libm_sse2_sinf
__libm_sse2_cosf
_finite
_isnan
__iob_func
fprintf
rand
srand
_time64
qsort
isprint
strncat
_vscprintf
abort
strtok_s
_strlwr
isxdigit
_CIpow
_CIacos
printf
strchr
strncpy_s
localeconv
strtod
wcsncpy_s
_strnicmp
_stricmp
strstr
ceil
_CIatan2
_CIsin
_CIcos
strcat_s
strcpy_s
isspace
isdigit
wcscoll
_wcsicoll
strrchr
_itoa_s
strncmp
_controlfp_s
_CItan
_CIsqrt
_CIfmod
floor
_vsnprintf_s
_strtoui64
free
malloc
_endthreadex
_beginthreadex
memmove
memcpy
_aligned_free
_aligned_malloc
_purecall
memset
atoi
sprintf
_CIatan
_CIexp
_CIlog
modf
getenv
strcpy
strlen
pow
fabs
memcmp
strcspn
strspn
_wstat64
fwrite
_wfopen_s
rewind
_errno
_setjmp3
longjmp

wtsapi32

WTSUnRegisterSessionNotification
WTSRegisterSessionNotification

kernel32

LocalAlloc
GetTimeZoneInformation
SetErrorMode
FileTimeToSystemTime
FileTimeToLocalFileTime
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
GetCurrentProcessId
IsDebuggerPresent
SetUnhandledExceptionFilter
LocalFileTimeToFileTime
GetCurrentProcess
TerminateProcess
GetStartupInfoW
HeapSetInformation
DecodePointer
EncodePointer
AllocConsole
SetConsoleScreenBufferSize
SetConsoleWindowInfo
SystemTimeToFileTime
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
FillConsoleOutputCharacterA
FillConsoleOutputAttribute
SetConsoleCursorPosition
GetStdHandle
SetConsoleMode
IsDBCSLeadByte
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetComputerNameA
GetTickCount
UnhandledExceptionFilter
CreateThread
GetTimeFormatA
GetDateFormatA
GetUserGeoID
GetUserDefaultLangID
SetThreadExecutionState
GetModuleFileNameA
GetVersionExA
GetSystemDirectoryA
FreeLibrary
GetCommandLineA
MultiByteToWideChar
WideCharToMultiByte
CreateEventW
lstrlenA
GetLocalTime
GetModuleHandleA
VirtualQuery
InterlockedDecrement
InterlockedIncrement
GetThreadPriority
SwitchToThread
SleepEx
GetExitCodeThread
RaiseException
WaitForMultipleObjectsEx
GetOverlappedResult
SetLastError
ReadFile
GetLogicalDriveStringsA
GetDriveTypeA
WriteFile
FindNextFileA
GetFileAttributesA
DeleteFileA
CreateDirectoryA
GetFileSizeEx
FindFirstFileA
FindClose
FlushFileBuffers
SetFilePointerEx
CancelIo
WaitForSingleObjectEx
CreateFileA
GetLastError
GetTempPathA
TryEnterCriticalSection
GetCurrentDirectoryA
OutputDebugStringA
LoadLibraryA
GetProcAddress
DeleteCriticalSection
InitializeCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
VirtualFree
VirtualAlloc
GetCurrentThread
SetThreadAffinityMask
SetThreadPriority
SuspendThread
ResumeThread
ReleaseMutex
ReleaseSemaphore
CreateEventA
GetCurrentThreadId
GetSystemInfo
Sleep
SetEvent
ResetEvent
WaitForSingleObject
CloseHandle
CreateMutexA
CreateSemaphoreA
InterlockedCompareExchange
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
InterlockedExchangeAdd

user32

CharUpperA
GetKeyboardLayout
MessageBoxA
SetWindowLongA
SendMessageA
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
PeekMessageA
PostQuitMessage
ClipCursor
GetActiveWindow
GetForegroundWindow
CallWindowProcW
SetWindowLongW
GetWindowLongW
UnregisterDeviceNotification
RegisterDeviceNotificationW
SetWindowTextW
GetSystemMetrics
SystemParametersInfoA
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
SetWindowTextA
CreateWindowExA
RegisterClassA
LoadCursorA
DefWindowProcA
AdjustWindowRect
SetRect
SetWindowPlacement
ShowWindow
GetWindowPlacement
SetWindowPos
GetWindowRect
IsWindowVisible
IsZoomed
GetClientRect
IsIconic
ShowCursor
TrackMouseEvent
GetKeyState
ActivateKeyboardLayout
CallWindowProcA
ScreenToClient
GetCursorPos
SetCursor
SetClassLongA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetClipboardData
GetDC
CharLowerA

gdi32

CreateFontW
GetGlyphOutlineW
DeleteObject
GetKerningPairsW
GetTextMetricsW
GetStockObject
EnumFontFamiliesExW
SelectObject

advapi32

GetUserNameA

shell32

SHCreateDirectoryExA
SHGetFolderPathA
ExtractIconA

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance

Exports

Exports

??0System@Scaleform@@QAE@ABUHeapDesc@MemoryHeap@1@PAVSysAllocBase@1@@Z
??0System@Scaleform@@QAE@PAVSysAllocBase@1@@Z
??1AcquireInterface@Scaleform@@UAE@XZ
??1CAkRegisteredObj@@QAE@XZ
??1DefaultAcquireInterface@Scaleform@@UAE@XZ
??1System@Scaleform@@QAE@XZ
??_FEvent@Scaleform@@QAEXXZ
??_FMutex@Scaleform@@QAEXXZ
??_FSemaphore@Scaleform@@QAEXXZ
??_FSysAllocPagedMalloc@Scaleform@@QAEXXZ
??_FSysAllocStatic@Scaleform@@QAEXXZ
??_FSysAllocWinAPI@Scaleform@@QAEXXZ
??_FSystem@Scaleform@@QAEXXZ
??_FThread@Scaleform@@QAEXXZ
?AddBehavioralExtension@SoundEngine@AK@@YA?AW4AKRESULT@@P6AX_N@Z@Z
?AddLanguageChangeObserver@StreamMgr@AK@@YA?AW4AKRESULT@@P6AXQB_WPAX@Z1@Z
?AddPlayerMotionDevice@MotionEngine@AK@@YA?AW4AKRESULT@@EKKPAX@Z
?Break@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@K@Z
?CancelBankCallbackCookie@SoundEngine@AK@@YAXPAX@Z
?CancelEventCallback@SoundEngine@AK@@YAXK@Z
?CancelEventCallbackCookie@SoundEngine@AK@@YAXPAX@Z
?CheckPoolId@MemoryMgr@AK@@YA?AW4AKRESULT@@J@Z
?ClearBanks@SoundEngine@AK@@YA?AW4AKRESULT@@XZ
?ClearPreparedEvents@SoundEngine@AK@@YA?AW4AKRESULT@@XZ
?Close@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@K@Z
?Create@StreamMgr@AK@@YAPAVIAkStreamMgr@2@ABUAkStreamMgrSettings@@@Z
?CreateAudioInputSource@@YAPAVIAkPlugin@AK@@PAVIAkPluginMemAlloc@2@@Z
?CreateAudioInputSourceParams@@YAPAVIAkPluginParam@AK@@PAVIAkPluginMemAlloc@2@@Z
?CreateDevice@StreamMgr@AK@@YAKABUAkDeviceSettings@@PAVIAkLowLevelIOHook@12@@Z
?CreatePool@MemoryMgr@AK@@YAJPAXKKKK@Z
?DestroyDevice@StreamMgr@AK@@YA?AW4AKRESULT@@K@Z
?DestroyPool@MemoryMgr@AK@@YA?AW4AKRESULT@@J@Z
?ExecuteActionOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@KW4AkActionOnEventType@12@IJW4AkCurveInterpolation@@K@Z
?ExecuteActionOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PBDW4AkActionOnEventType@12@IJW4AkCurveInterpolation@@K@Z
?ExecuteActionOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WW4AkActionOnEventType@12@IJW4AkCurveInterpolation@@K@Z
?Falign@MemoryMgr@AK@@YA?AW4AKRESULT@@JPAX@Z
?Free@MemoryMgr@AK@@YA?AW4AKRESULT@@JPAX@Z
?GetActiveGameObjects@Query@SoundEngine@AK@@YA?AW4AKRESULT@@AAV?$AkArray@IIUArrayPoolDefault@@$0CA@@@@Z
?GetActiveListeners@Query@SoundEngine@AK@@YA?AW4AKRESULT@@IAAK@Z
?GetAuxBusVolumes@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KAAUAkSpeakerVolumes@@@Z
?GetBlock@MemoryMgr@AK@@YAPAXJ@Z
?GetBlockSize@MemoryMgr@AK@@YAKJ@Z
?GetCurrentLanguage@StreamMgr@AK@@YAPB_WXZ
?GetCustomPropertyValue@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KKAAJ@Z
?GetCustomPropertyValue@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KKAAM@Z
?GetDefaultDeviceSettings@StreamMgr@AK@@YAXAAUAkDeviceSettings@@@Z
?GetDefaultInitSettings@MusicEngine@AK@@YAXAAUAkMusicSettings@@@Z
?GetDefaultInitSettings@SoundEngine@AK@@YAXAAUAkInitSettings@@@Z
?GetDefaultPlatformInitSettings@SoundEngine@AK@@YAXAAUAkPlatformInitSettings@@@Z
?GetDefaultSettings@StreamMgr@AK@@YAXAAUAkStreamMgrSettings@@@Z
?GetEventIDFromPlayingID@Query@SoundEngine@AK@@YAKK@Z
?GetFileLocationResolver@StreamMgr@AK@@YAPAVIAkFileLocationResolver@12@XZ
?GetGameObjectAuxSendValues@Query@SoundEngine@AK@@YA?AW4AKRESULT@@IPAUAkAuxSendValue@@AAK@Z
?GetGameObjectDryLevelValue@Query@SoundEngine@AK@@YA?AW4AKRESULT@@IAAM@Z
?GetGameObjectFromPlayingID@Query@SoundEngine@AK@@YAIK@Z
?GetIDFromString@SoundEngine@AK@@YAKPBD@Z
?GetIDFromString@SoundEngine@AK@@YAKPB_W@Z
?GetIsGameObjectActive@Query@SoundEngine@AK@@YA_NI@Z
?GetListenerPosition@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KAAUAkListenerPosition@@@Z
?GetListenerSpatialization@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KAA_NAAUAkSpeakerVolumes@@@Z
?GetMaxPools@MemoryMgr@AK@@YAJXZ
?GetMaxRadius@Query@SoundEngine@AK@@YA?AW4AKRESULT@@AAV?$AkArray@UGameObjDst@Query@SoundEngine@AK@@ABU1234@UArrayPoolDefault@@$0CA@@@@Z
?GetMaxRadius@Query@SoundEngine@AK@@YAMI@Z
?GetNumPools@MemoryMgr@AK@@YAJXZ
?GetObjAndAddref@CAkRegistryMgr@@QAEPAVCAkRegisteredObj@@I@Z
?GetObjectObstructionAndOcclusion@Query@SoundEngine@AK@@YA?AW4AKRESULT@@IKAAM0@Z
?GetPanningRule@SoundEngine@AK@@YA?AW4AkPanningRule@@XZ
?GetPlayingIDsFromGameObject@Query@SoundEngine@AK@@YA?AW4AKRESULT@@IAAKPAK@Z
?GetPlayingSegmentInfo@MusicEngine@AK@@YA?AW4AKRESULT@@KAAUAkSegmentInfo@@_N@Z
?GetPoolAttributes@MemoryMgr@AK@@YA?AW4AkMemPoolAttributes@@J@Z
?GetPoolID@StreamMgr@AK@@YAJXZ
?GetPoolMemoryUsed@MemoryMgr@AK@@YAXJAAUPoolMemInfo@12@@Z
?GetPoolName@MemoryMgr@AK@@YAPA_WJ@Z
?GetPoolStats@MemoryMgr@AK@@YA?AW4AKRESULT@@JAAUPoolStats@12@@Z
?GetPosition@Query@SoundEngine@AK@@YA?AW4AKRESULT@@IAAUAkSoundPosition@@@Z
?GetPositioningInfo@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KAAUAkPositioningInfo@@@Z
?GetRTPCValue@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KIAAMAAW4RTPCValue_type@123@@Z
?GetRTPCValue@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PBDIAAMAAW4RTPCValue_type@123@@Z
?GetRTPCValue@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WIAAMAAW4RTPCValue_type@123@@Z
?GetSourcePlayPosition@SoundEngine@AK@@YA?AW4AKRESULT@@KPAJ_N@Z
?GetSpeakerConfiguration@SoundEngine@AK@@YAKXZ
?GetState@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KAAK@Z
?GetState@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PBDAAK@Z
?GetState@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WAAK@Z
?GetSwitch@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KIAAK@Z
?GetSwitch@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PBDIAAK@Z
?GetSwitch@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WIAAK@Z
?GetTimeStamp@Monitor@AK@@YAJXZ
?GetXScale@?$Matrix2x4@M@Render@Scaleform@@QBEMXZ
?GetYScale@?$Matrix2x4@M@Render@Scaleform@@QBEMXZ
?Init@MusicEngine@AK@@YA?AW4AKRESULT@@PAUAkMusicSettings@@@Z
?Init@SoundEngine@AK@@YA?AW4AKRESULT@@PAUAkInitSettings@@PAUAkPlatformInitSettings@@@Z
?Init@System@GFx@Scaleform@@SAXPAVSysAllocBase@3@@Z
?Init@System@Scaleform@@SAXPAVSysAllocBase@2@@Z
?IsInitialized@MemoryMgr@AK@@YA_NXZ
?IsInitialized@SoundEngine@AK@@YA_NXZ
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@KJ@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@KP6AXKW43@JPAX@Z1J@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PBDJAAK@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PBDP6AXKW43@JPAX@Z2JAAK@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PBXKAAK@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PBXKP6AXKW43@JPAX@Z2AAK@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WJAAK@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WP6AXKW43@JPAX@Z2JAAK@Z
?LockPlaylist@DynamicSequence@SoundEngine@AK@@YAPAVPlaylist@123@K@Z
?Malign@MemoryMgr@AK@@YAPAXJIK@Z
?Malloc@MemoryMgr@AK@@YAPAXJI@Z
?Open@DynamicSequence@SoundEngine@AK@@YAKIKP6AXW4AkCallbackType@@PAUAkCallbackInfo@@@ZPAXW4DynamicSequenceType@123@@Z
?Pause@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@KJW4AkCurveInterpolation@@@Z
?Play@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@KJW4AkCurveInterpolation@@@Z
?PlaySourcePlugin@SoundEngine@AK@@YAKKKI@Z
?PostCode@Monitor@AK@@YA?AW4AKRESULT@@W4ErrorCode@12@W4ErrorLevel@12@@Z
?PostEvent@SoundEngine@AK@@YAKKIKP6AXW4AkCallbackType@@PAUAkCallbackInfo@@@ZPAXKPAUAkExternalSourceInfo@@K@Z
?PostEvent@SoundEngine@AK@@YAKPBDIKP6AXW4AkCallbackType@@PAUAkCallbackInfo@@@ZPAXKPAUAkExternalSourceInfo@@K@Z
?PostEvent@SoundEngine@AK@@YAKPB_WIKP6AXW4AkCallbackType@@PAUAkCallbackInfo@@@ZPAXKPAUAkExternalSourceInfo@@K@Z
?PostString@Monitor@AK@@YA?AW4AKRESULT@@PBDW4ErrorLevel@12@@Z
?PostString@Monitor@AK@@YA?AW4AKRESULT@@PB_WW4ErrorLevel@12@@Z
?PostTrigger@SoundEngine@AK@@YA?AW4AKRESULT@@KI@Z
?PostTrigger@SoundEngine@AK@@YA?AW4AKRESULT@@PBDI@Z
?PostTrigger@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WI@Z
?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@KP6AXKW43@JPAX@Z2W4AkBankContent@12@@Z
?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@KW4AkBankContent@12@@Z
?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PBDP6AXKW43@JPAX@Z3W4AkBankContent@12@@Z
?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PBDW4AkBankContent@12@@Z
?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PB_WP6AXKW43@JPAX@Z3W4AkBankContent@12@@Z
?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PB_WW4AkBankContent@12@@Z
?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PAKK@Z
?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PAKKP6AXKW43@JPAX@Z3@Z
?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PAPBDK@Z
?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PAPBDKP6AXKW43@JPAX@Z3@Z
?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PAPB_WK@Z
?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PAPB_WKP6AXKW43@JPAX@Z3@Z
?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@KPAKK@Z
?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@KPAKKP6AXKW43@JPAX@Z4@Z
?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@PBDPAPBDK@Z
?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@PBDPAPBDKP6AXKW43@JPAX@Z5@Z
?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@PB_WPAPB_WK@Z
?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@PB_WPAPB_WKP6AXKW43@JPAX@Z5@Z
?QueryAudioObjectIDs@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KAAKPAUAkObjectInfo@@@Z
?QueryAudioObjectIDs@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PBDAAKPAUAkObjectInfo@@@Z
?QueryAudioObjectIDs@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WAAKPAUAkObjectInfo@@@Z
?RegisterCodec@SoundEngine@AK@@YA?AW4AKRESULT@@KKP6APAVIAkSoftwareCodec@@PAX@Z1@Z
?RegisterGameObj@SoundEngine@AK@@YA?AW4AKRESULT@@I@Z
?RegisterGameObj@SoundEngine@AK@@YA?AW4AKRESULT@@IPBD@Z
?RegisterGlobalCallback@SoundEngine@AK@@YA?AW4AKRESULT@@P6AX_N@Z@Z
?RegisterMotionDevice@MotionEngine@AK@@YAXKKP6APAVIAkPlugin@2@PAVIAkPluginMemAlloc@2@@Z@Z
?RegisterPlugin@SoundEngine@AK@@YA?AW4AKRESULT@@W4AkPluginType@@KKP6APAVIAkPlugin@2@PAVIAkPluginMemAlloc@2@@ZP6APAVIAkPluginParam@2@1@Z@Z
?ReleaseBlock@MemoryMgr@AK@@YA?AW4AKRESULT@@JPAX@Z
?RemoveBehavioralExtension@SoundEngine@AK@@YA?AW4AKRESULT@@P6AX_N@Z@Z
?RemoveLanguageChangeObserver@StreamMgr@AK@@YAXPAX@Z
?RemovePlayerMotionDevice@MotionEngine@AK@@YAXEKK@Z
?RenderAudio@SoundEngine@AK@@YA?AW4AKRESULT@@XZ
?ResetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@KIJW4AkCurveInterpolation@@@Z
?ResetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@PBDIJW4AkCurveInterpolation@@@Z
?ResetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WIJW4AkCurveInterpolation@@@Z
?ResolveDialogueEvent@DynamicDialogue@SoundEngine@AK@@YAKKPAKKK@Z
?ResolveDialogueEvent@DynamicDialogue@SoundEngine@AK@@YAKPBDPAPBDKK@Z
?ResolveDialogueEvent@DynamicDialogue@SoundEngine@AK@@YAKPB_WPAPB_WKK@Z
?Resume@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@KJW4AkCurveInterpolation@@@Z
?SeekOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@KIJ_N@Z
?SeekOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@KIM_N@Z
?SeekOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PBDIJ_N@Z
?SeekOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PBDIM_N@Z
?SeekOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WIJ_N@Z
?SeekOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WIM_N@Z
?SetActiveListeners@SoundEngine@AK@@YA?AW4AKRESULT@@IK@Z
?SetActorMixerEffect@SoundEngine@AK@@YA?AW4AKRESULT@@KKK@Z
?SetAttenuationScalingFactor@SoundEngine@AK@@YA?AW4AKRESULT@@IM@Z
?SetAudioInputCallbacks@@YAXP6AXKPAVAkAudioBuffer@@@ZP6AXKAAUAkAudioFormat@@@ZP6AMK@Z@Z
?SetAuxBusVolumes@SoundEngine@AK@@YA?AW4AKRESULT@@KABUAkSpeakerVolumes@@@Z
?SetBankLoadIOSettings@SoundEngine@AK@@YA?AW4AKRESULT@@MD@Z
?SetBusEffect@SoundEngine@AK@@YA?AW4AKRESULT@@KKK@Z
?SetBusEffect@SoundEngine@AK@@YA?AW4AKRESULT@@PBDKK@Z
?SetBusEffect@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WKK@Z
?SetCurrentLanguage@StreamMgr@AK@@YA?AW4AKRESULT@@PB_W@Z
?SetFileLocationResolver@StreamMgr@AK@@YAXPAVIAkFileLocationResolver@12@@Z
?SetGameObjectAuxSendValues@SoundEngine@AK@@YA?AW4AKRESULT@@IPAUAkAuxSendValue@@K@Z
?SetGameObjectOutputBusVolume@SoundEngine@AK@@YA?AW4AKRESULT@@IM@Z
?SetIdentity@?$Matrix2x4@M@Render@Scaleform@@QAEXXZ
?SetIdentity@?$Matrix3x4@M@Render@Scaleform@@QAEXXZ
?SetIdentity@?$Matrix4x4@M@Render@Scaleform@@QAEXXZ
?SetListenerPipeline@SoundEngine@AK@@YA?AW4AKRESULT@@K_N0@Z
?SetListenerPosition@SoundEngine@AK@@YA?AW4AKRESULT@@ABUAkListenerPosition@@K@Z
?SetListenerScalingFactor@SoundEngine@AK@@YA?AW4AKRESULT@@KM@Z
?SetListenerSpatialization@SoundEngine@AK@@YA?AW4AKRESULT@@K_NPAUAkSpeakerVolumes@@@Z
?SetLocalOutput@Monitor@AK@@YA?AW4AKRESULT@@KP6AXW4ErrorCode@12@PB_WW4ErrorLevel@12@KI@Z@Z
?SetMaxNumVoicesLimit@SoundEngine@AK@@YA?AW4AKRESULT@@G@Z
?SetMonitoring@MemoryMgr@AK@@YA?AW4AKRESULT@@J_N@Z
?SetMultiplePositions@SoundEngine@AK@@YA?AW4AKRESULT@@IPBUAkSoundPosition@@GW4MultiPositionType@12@@Z
?SetObjectObstructionAndOcclusion@SoundEngine@AK@@YA?AW4AKRESULT@@IKMM@Z
?SetPanningRule@SoundEngine@AK@@YA?AW4AKRESULT@@W4AkPanningRule@@@Z
?SetPlayerListener@MotionEngine@AK@@YAXEE@Z
?SetPlayerVolume@MotionEngine@AK@@YAXEM@Z
?SetPoolName@MemoryMgr@AK@@YA?AW4AKRESULT@@JPBD@Z
?SetPoolName@MemoryMgr@AK@@YA?AW4AKRESULT@@JPB_W@Z
?SetPosition@SoundEngine@AK@@YA?AW4AKRESULT@@IABUAkSoundPosition@@K@Z
?SetPositionInternal@SoundEngine@AK@@YA?AW4AKRESULT@@IABUAkSoundPosition@@K@Z
?SetRTPCInternal@CAkRTPCMgr@@QAE?AW4AKRESULT@@KMPAVCAkRegisteredObj@@AAUTransParams@@W4AkValueMeaning@@@Z
?SetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@KMIJW4AkCurveInterpolation@@@Z
?SetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@PBDMIJW4AkCurveInterpolation@@@Z
?SetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WMIJW4AkCurveInterpolation@@@Z
?SetState@SoundEngine@AK@@YA?AW4AKRESULT@@KK@Z
?SetState@SoundEngine@AK@@YA?AW4AKRESULT@@PBD0@Z
?SetState@SoundEngine@AK@@YA?AW4AKRESULT@@PB_W0@Z
?SetSwitch@SoundEngine@AK@@YA?AW4AKRESULT@@KKI@Z
?SetSwitch@SoundEngine@AK@@YA?AW4AKRESULT@@PBD0I@Z
?SetSwitch@SoundEngine@AK@@YA?AW4AKRESULT@@PB_W0I@Z
?SetVolumeThreshold@SoundEngine@AK@@YA?AW4AKRESULT@@M@Z
?StartOutputCapture@SoundEngine@AK@@YA?AW4AKRESULT@@PB_W@Z
?StartProfilerCapture@SoundEngine@AK@@YA?AW4AKRESULT@@PB_W@Z
?Stop@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@KJW4AkCurveInterpolation@@@Z
?StopAll@SoundEngine@AK@@YAXI@Z
?StopOutputCapture@SoundEngine@AK@@YA?AW4AKRESULT@@XZ
?StopPlayingID@SoundEngine@AK@@YAXKJW4AkCurveInterpolation@@@Z
?StopProfilerCapture@SoundEngine@AK@@YA?AW4AKRESULT@@XZ
?StopSourcePlugin@SoundEngine@AK@@YA?AW4AKRESULT@@KKK@Z
?Term@MemoryMgr@AK@@YAXXZ
?Term@MusicEngine@AK@@YAXXZ
?Term@SoundEngine@AK@@YAXXZ
?Transform@?$Matrix2x4@M@Render@Scaleform@@QBEXPAV?$Point@M@23@ABV423@@Z
?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@KP6AXKW43@JPAX@Z1@Z
?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@KPAJ@Z
?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PBDP6AXKW43@JPAX@Z2@Z
?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PBDPAJ@Z
?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WP6AXKW43@JPAX@Z2@Z
?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WPAJ@Z
?UnlockPlaylist@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@K@Z
?UnregisterAllGameObj@SoundEngine@AK@@YA?AW4AKRESULT@@XZ
?UnregisterGameObj@SoundEngine@AK@@YA?AW4AKRESULT@@I@Z
?UnregisterGlobalCallback@SoundEngine@AK@@YA?AW4AKRESULT@@P6AX_N@Z@Z
?g_DefaultPoolId@@3JA
?g_LEngineDefaultPoolId@@3JA
?g_pAssertHook@@3P6AXPBD0H@ZA
?g_pRTPCMgr@@3PAVCAkRTPCMgr@@A
?g_pRegistryMgr@@3PAVCAkRegistryMgr@@A
?m_pStreamMgr@IAkStreamMgr@AK@@1PAV12@A

Sections

.text
Size: 7.2MB - Virtual size: 7.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.2MB - Virtual size: 20.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 664KB - Virtual size: 664KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dc350c91cf2724a28b28ebcd69b9cadd

Headers

DLL Characteristics

File Characteristics

Imports

winmm

shlwapi

ws2_32

xinput1_3

bink2w32

dinput8

msvcr100

wtsapi32

kernel32

user32

gdi32

advapi32

shell32

ole32

Exports

Exports

Sections

.text Size: 7.2MB - Virtual size: 7.2MB

.rdata Size: 1.4MB - Virtual size: 1.4MB

.data Size: 1.2MB - Virtual size: 20.6MB

.rsrc Size: 664KB - Virtual size: 664KB

.text
Size: 7.2MB - Virtual size: 7.2MB

.rdata
Size: 1.4MB - Virtual size: 1.4MB

.data
Size: 1.2MB - Virtual size: 20.6MB

.rsrc
Size: 664KB - Virtual size: 664KB