godfather_60fps_normalFOV[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

godfather_60fps_normalFOV.exe
Size

11.8MB
MD5

f74cc16fee87fb2ff5f3e0eb4f6691f0
SHA1

ab0600a9794a6f5226293567adb45f284cdbea65
SHA256

ea17cdaef7b2af9a9b86aac0f13e1f7c3991ebb3c8e08946d1ebf4963448e66b
SHA512

d236603793a3d9ac7d2d784fedc817615f91186f10f157d2c5d7e751ae7a98df18c6d9a3fecadb9d6cf82f7707cb42e77432ec11c62f582f751ddca913230a87
SSDEEP

98304:2LSBEVi14ecjosAYNu5jPYyHZXRNAec6ebCG/5Tlh4RcR:V4ec4YNu5jvZXRVc601xyc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
godfather_60fps_normalFOV.exe

Files

godfather_60fps_normalFOV.exe
.exe windows x86

27f55af0db036289a66cabd7b3d27257

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

d3d9

Direct3DCreate9

d3dx9_27

D3DXMatrixInverse
D3DXMatrixLookAtLH
D3DXMatrixShadow
D3DXVec3Normalize
D3DXMatrixReflect
D3DXCreateTextureFromFileExA
D3DXVec3TransformCoord
D3DXVec3TransformNormal
D3DXMatrixMultiply
D3DXMatrixMultiplyTranspose
D3DXMatrixTranspose
D3DXAssembleShader
D3DXVec4Normalize
D3DXMatrixOrthoLH

dsound

ord6
ord1

kernel32

GetComputerNameA
LocalFree
GlobalUnlock
LocalLock
LocalAlloc
GetLastError
CloseHandle
GetThreadTimes
FileTimeToSystemTime
GetModuleFileNameA
VirtualQuery
VirtualProtect
GetCurrentProcess
GetProcAddress
LoadLibraryA
GetCurrentThread
GetCurrentThreadId
GetCurrentProcessId
GetCommandLineA
GetCurrentDirectoryA
GetLocalTime
SetFilePointer
SetEndOfFile
CreateFileA
GetDriveTypeA
GetLogicalDrives
GetTickCount
GetSystemTimeAsFileTime
DeleteFileA
WaitForSingleObject
ReleaseMutex
CreateMutexA
GetExitCodeThread
GetThreadPriority
SetThreadPriority
RaiseException
SetThreadAffinityMask
QueueUserAPC
ResumeThread
DeleteCriticalSection
InitializeCriticalSection
TryEnterCriticalSection
EnterCriticalSection
LeaveCriticalSection
TlsSetValue
TlsGetValue
TlsAlloc
DuplicateHandle
SleepEx
GetDiskFreeSpaceA
ReadFile
CreateEventA
GetOverlappedResult
GetFileAttributesA
GetFileSize
GetSystemInfo
QueryPerformanceFrequency
Sleep
QueryPerformanceCounter
GlobalMemoryStatusEx
OutputDebugStringA
VirtualFree
VirtualAlloc
SetEvent
ResetEvent
TerminateThread
SetWaitableTimer
SystemTimeToFileTime
GetSystemTime
CreateWaitableTimerA
GetDiskFreeSpaceExA
GetModuleHandleA
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetStdHandle
GetStdHandle
SetHandleCount
GetTimeZoneInformation
HeapSize
FlushFileBuffers
TlsFree
SetLastError
GetEnvironmentStringsW
IsBadWritePtr
HeapCreate
HeapDestroy
FatalAppExitA
GetCPInfo
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapReAlloc
HeapAlloc
GetFullPathNameA
ExitThread
GetStartupInfoA
GetFileType
FindNextFileA
FindFirstFileA
FileTimeToLocalFileTime
FindClose
RemoveDirectoryA
TerminateProcess
SetCurrentDirectoryA
SetEnvironmentVariableA
GetDateFormatA
GetTimeFormatA
RtlUnwind
ExitProcess
HeapFree
InterlockedExchange
WideCharToMultiByte
InterlockedIncrement
GlobalMemoryStatus
GetVersionExA
lstrcmpiA
GetWindowsDirectoryA
GetSystemDirectoryA
GetACP
GetOEMCP
GetUserDefaultLangID
GetSystemDefaultLangID
GetUserDefaultLCID
InterlockedDecrement
GlobalFree
GetSystemDefaultLCID
GetEnvironmentStrings
lstrlenA
FreeEnvironmentStringsA
WriteFile
GlobalAlloc
DebugBreak
GetLocaleInfoW
CompareStringW
CompareStringA
SetUnhandledExceptionFilter
FreeLibrary
CreateDirectoryA
IsBadCodePtr
IsBadReadPtr
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
SetConsoleCtrlHandler
GetThreadContext
CreateThread

Exports

Exports

??0AptBoolean@@AAE@_N@Z
??0AptFloat@@AAE@M@Z
??0AptFrameStack@@QAE@PAV0@@Z
??0AptFrameStack@@QAE@PAV0@H@Z
??0AptInteger@@AAE@H@Z
??0AptValue@@IAE@W4AptVirtualFunctionTable_Indices@@@Z
??0AptValue@@IAE@W4AptVirtualFunctionTable_Indices@@W4CIH_ONLY@0@@Z
??0EAStringC@@AAE@W4EmptyString@0@@Z
??0EAStringC@@QAE@ABV0@@Z
??0EAStringC@@QAE@QBD@Z
??0EAStringC@@QAE@XZ
??1AptDate@@MAE@XZ
??1AptExtern@@UAE@XZ
??1AptGlobal@@MAE@XZ
??1AptGlobalExtensionObject@@MAE@XZ
??1AptKey@@MAE@XZ
??1AptMathObj@@MAE@XZ
??1AptMouse@@MAE@XZ
??1AptMovieClip@@MAE@XZ
??1AptNone@@MAE@XZ
??1AptSound@@MAE@XZ
??1AptStage@@MAE@XZ
??1AptTextFormat@@MAE@XZ
??1AptValue@@MAE@XZ
??8EAStringC@@QBE_NQBD@Z
??9EAStringC@@QBE_NABV0@@Z
??9EAStringC@@QBE_NQBD@Z
??AEAStringC@@QBEIH@Z
??BEAStringC@@QBEPBDXZ
??MEAStringC@@QBE_NABV0@@Z
??MEAStringC@@QBE_NQBD@Z
??NEAStringC@@QBE_NABV0@@Z
??NEAStringC@@QBE_NQBD@Z
??OEAStringC@@QBE_NABV0@@Z
??OEAStringC@@QBE_NQBD@Z
??PEAStringC@@QBE_NABV0@@Z
??PEAStringC@@QBE_NQBD@Z
?AllocateBuffer@EAStringC@@AAEXI@Z
?CalculateHashValue@EAStringC@@SAGQBD@Z
?CanFitBytes@_DOGMA_MemPool@@QBE_NI@Z
?CharTypeToAptVFT@AptPseudoDisplayList@@SA?AW4AptVirtualFunctionTable_Indices@@W4AptCharacterType@@@Z
?ClearReleaseAtEnd@AptValue@@QAEXXZ
?ClearScope@AptFrameStack@@QAEXXZ
?ClipStackGetTop@AptMath@@SAPAUClipTransform_t@1@XZ
?ClipStackIsEmpty@AptMath@@SA_NXZ
?ClipStackPop@AptMath@@SAPAUClipTransform_t@1@XZ
?ClipStackPush@AptMath@@SAPAUClipTransform_t@1@XZ
?Compare@EAStringC@@QBEHABV1@@Z
?Compare@EAStringC@@QBEHQBD@Z
?CompareNoCase@EAStringC@@QBEHABV1@@Z
?CompareNoCase@EAStringC@@QBEHQBD@Z
?ConstRawPtr@EAStringC@@QBEPBDXZ
?ConsumeBytes@_DOGMA_MemPool@@QAEPAXI@Z
?ConvertAptValue@AptArray@@SAPAVAptValue@@PAV2@@Z
?CreateNewAptFunction@AptExtObject@@KAPAVAptNativeFunction@@PAX@Z
?CreateNewAptObject@AptExtObject@@KAPAVAptValue@@H@Z
?CreateNewAptObject@AptExtObject@@KAPAVAptValue@@XZ
?DeallocateBuffer@EAStringC@@CAXQBXI@Z
?DecreaseInternalRefCount@EAStringC@@CAXQAVStringDataC@1@@Z
?DecrementDequeLocation@AptActionQueueC@@AAEPAUAptActionPool@1@PAU21@@Z
?Destroy@AptBoolean@@QAEXXZ
?Destroy@AptFloat@@QAEXXZ
?Destroy@AptInteger@@QAEXXZ
?Destroy@AptString@@QAEXXZ
?Equal@EAStringC@@QBE_NABV1@@Z
?Equal@EAStringC@@QBE_NQBD@Z
?EqualNoCase@EAStringC@@QBE_NQBD@Z
?ExistsInLocalScope@AptFrameStack@@QAE_NPAVEAStringC@@@Z
?ExistsInLocalScope@AptScriptFunctionBase@@QAE_NPAVEAStringC@@@Z
?FirstAllocation@AptNativeHash@@AAEXXZ
?GetActionPool@AptAnimationPoolData@@QAEPAVAptActionQueueC@@XZ
?GetAt@AptArray@@QBEPAVAptValue@@H@Z
?GetAt@AptNativeHash@@ABEPAVAptValue@@H@Z
?GetAt@AptNativeHash@@CAPAVAptValue@@QAUAptHashItem@@@Z
?GetAt@AptValueVector@@QAEPAVAptValue@@H@Z
?GetBool@AptBoolean@@QBE_NXZ
?GetBuffer@EAStringC@@QBEPBDXZ
?GetBytesUsed@_DOGMA_MemPool@@QAEIXZ
?GetCurItem@AptActionQueueC@@QAEPAUAptActionPool@1@XZ
?GetFirstItem@AptActionQueueC@@QAEPAUAptActionPool@1@XZ
?GetFirstItem@AptPseudoDisplayList@@QAEPAUAptPseudoCIH_t@@XZ
?GetFirstItem@_DOGMA_MemPool@@QAEPAXXZ
?GetFloat@AptFloat@@QBEMXZ
?GetHashSize@AptFrameStack@@QAEXXZ
?GetHashValue@EAStringC@@QBEGXZ
?GetInScopeChain@AptScriptFunctionBase@@QAEPAVAptValue@@PAVEAStringC@@@Z
?GetInt@AptInteger@@QBEHXZ
?GetInternalBuffer@EAStringC@@ABEPADXZ
?GetInternalMaxSize@EAStringC@@QBEIXZ
?GetInternalRefCount@EAStringC@@QBEIXZ
?GetInternalSize@EAStringC@@QBEIXZ
?GetLastItem@AptActionQueueC@@QAEPAUAptActionPool@1@XZ
?GetLength@EAStringC@@QBEIXZ
?GetMaxRefCountHit@AptValue@@QBE_NXZ
?GetNextItem@AptActionQueueC@@QAEPAUAptActionPool@1@PAU21@@Z
?GetNextPool@_DOGMA_MemPool@@QBEPAU1@XZ
?GetNumValues@AptValueVector@@QBEHXZ
?GetParam@AptExtObject@@KAPAVAptValue@@H@Z
?GetParentSprite@AptPseudoDisplayList@@QAEPAVAptCIH@@XZ
?GetPrototype@AptNativeHash@@QBEPAVAptValue@@XZ
?GetReturnedPointer@_OutsideAllocationT@DOGMA_PoolManager@@QAEPAXXZ
?GetString@StringPool@@SAPBVEAStringC@@W4StringCode@@@Z
?GetStructOverHead@_OutsideAllocationT@DOGMA_PoolManager@@SAIXZ
?GetStructPointerFromReturnedPointer@_OutsideAllocationT@DOGMA_PoolManager@@SAPAU12@PBX@Z
?GetSuperConstructor@AptPrototype@@QBEPAVAptValue@@XZ
?GetUndefinedValue@AptExtObject@@KAPAVAptValue@@XZ
?GetVariable@AptExtObject@@KAPAVAptValue@@PAV2@QBVEAStringC@@@Z
?Get__Proto__@AptNativeHash@@QBEPAVAptValue@@XZ
?HasClipAction@AptCharacterSpriteInstBase@@QAEHH@Z
?HasEventHandler@AptNativeHash@@QAEHH@Z
?HasFreeBlockBySize@DOGMA_PoolManager@@IAE_NI@Z
?IncreaseInternalRefCount@EAStringC@@AAEXXZ
?IncrementDequeLocation@AptActionQueueC@@AAEPAUAptActionPool@1@PAU21@@Z
?Invalidate@EAStringC@@QAEXXZ
?InvalidateHashValue@EAStringC@@ABEXXZ
?IsEmpty@AptNativeHash@@QBE_NXZ
?IsEmpty@EAStringC@@QBE_NXZ
?IsInCtor@AptCIH@@QBE_NXZ
?IsLastItem@AptActionQueueC@@QAE_NPAUAptActionPool@1@@Z
?IsReleaseAtEnd@AptValue@@QBE_NXZ
?IsValid@EAStringC@@QBE_NXZ
?IsVectorFull@AptValueVector@@QBEHXZ
?Lookup@AptFrameStack@@QAEPAVAptValue@@QBVEAStringC@@@Z
?Lookup@AptGlobal@@QBEPAVAptValue@@QBVEAStringC@@@Z
?Lookup@AptGlobalExtensionObject@@QAEPAVAptValue@@QBVEAStringC@@@Z
?Lookup@AptObject@@QBEPAVAptValue@@QBVEAStringC@@@Z
?MatConvert@AptMath@@SAXPAUMat44_t@1@PAUAptMatrix@@@Z
?MatMul2d@AptMath@@SAXPAUMat44_t@1@00@Z
?MemInitialize@EAStringC@@SAXQAUAptUserFunctions@@@Z
?MemUninitialize@EAStringC@@SAXXZ
?OverwriteAt@AptNativeHash@@AAEXHPAVAptValue@@@Z
?OverwriteAt@AptNativeHash@@CAXQAUAptHashItem@@PAVAptValue@@@Z
?PopValue@AptValueVector@@QAEPAVAptValue@@XZ
?PtrIsInThisPool@_DOGMA_MemPool@@QBE_NPBX@Z
?PushValue@AptValueVector@@QAEXQAVAptValue@@@Z
?RemoveAt@AptValueVector@@QAEXH@Z
?RemoveClipAction@AptCharacterSpriteInstBase@@QAEXH@Z
?RemoveEventHandler@AptNativeHash@@QAEXH@Z
?Reserve@EAStringC@@QAEXH@Z
?Set@AptFrameStack@@QAEXQBVEAStringC@@QAVAptValue@@@Z
?Set@AptGlobal@@QAEXQBVEAStringC@@QAVAptValue@@@Z
?Set@AptGlobalExtensionObject@@QAEXQBVEAStringC@@QAVAptValue@@@Z
?Set@AptObject@@QAEXQBVEAStringC@@QAVAptValue@@@Z
?SetAt@AptNativeHash@@AAEXHQAVAptValue@@@Z
?SetAt@AptNativeHash@@CAXQAUAptHashItem@@QAVAptValue@@@Z
?SetAt@AptValueVector@@QAEXHPAVAptValue@@@Z
?SetClipAction@AptCharacterSpriteInstBase@@QAEXH@Z
?SetCurItem@AptActionQueueC@@QAEXPAUAptActionPool@1@@Z
?SetEventHandler@AptNativeHash@@QAEXH@Z
?SetInCtor@AptCIH@@QAEXI@Z
?SetInLocalScope@AptFrameStack@@QAEXPAVEAStringC@@PAVAptValue@@@Z
?SetInLocalScope@AptScriptFunctionBase@@QAEXPAVEAStringC@@PAVAptValue@@@Z
?SetInternalMaxSize@EAStringC@@AAEXI@Z
?SetInternalRefCount@EAStringC@@AAEXI@Z
?SetInternalSize@EAStringC@@AAEXI@Z
?SetMaxRefCountHit@AptValue@@QAEX_N@Z
?SetPrototype@AptNativeHash@@QAEXQAVAptValue@@@Z
?SetPrototype@AptObject@@QAEXQAVAptValue@@@Z
?SetReleaseAtEnd@AptValue@@QAEXXZ
?SetSuperConstructor@AptPrototype@@QAEXPAVAptValue@@@Z
?SetVariable@AptExtObject@@KA_NPAVAptValue@@QBVEAStringC@@QAV2@@Z
?SetWhereExistsInScopeChain@AptScriptFunctionBase@@QAE_NPAVEAStringC@@PAVAptValue@@@Z
?Set__Proto__@AptNativeHash@@QAEXQAVAptValue@@@Z
?Set__Proto__@AptObject@@QAEXQAVAptValue@@@Z
?SetupPool@_DOGMA_MemPool@@QAEXPAU1@I@Z
?Size@EAStringC@@QBEHXZ
?UTF8_GetBuffer@EAStringC@@SAPBDQBDH@Z
?UTF8_GetCharacter@EAStringC@@SAHQBD@Z
?UTF8_GetCharacterSize@EAStringC@@SAHH@Z
?UTF8_GetCharacterSize@EAStringC@@SAHQBD@Z
?UTF8_GetSize@EAStringC@@SAHQBD@Z
?UTF8_IsValid@EAStringC@@SA_NH@Z
?UTF8_ReadCharacter@EAStringC@@SAPBDQBDQAH@Z
?UTF8_SetCharacter@EAStringC@@SAXQADH@Z
?UTF8_SetOneCharacter@EAStringC@@QAEXH@Z
?UnSet@AptGlobalExtensionObject@@QAEXQBVEAStringC@@@Z
?UnsetAt@AptNativeHash@@CAXQAUAptHashItem@@@Z
?UnsetPrototype@AptNativeHash@@QAEXXZ
?Unset__Proto__@AptNativeHash@@QAEXXZ
?UpdateHashValue@EAStringC@@QBEGXZ
?Validate@EAStringC@@QAEXABV1@@Z
?Validate@EAStringC@@QAEXXZ
?_isNaN@@YA_NPAVAptValue@@@Z
?addActionBack@AptAnimationPoolData@@QAEXPAUAptActionBlock@@PAVAptCIH@@I@Z
?addActionFront@AptAnimationPoolData@@QAEXPAUAptActionBlock@@PAVAptCIH@@I@Z
?addFunctionBack@AptAnimationPoolData@@QAEXPAVAptCIH@@PAVAptValue@@HI@Z
?addFunctionFront@AptAnimationPoolData@@QAEXPAVAptCIH@@PAVAptValue@@HI@Z
?c_array@AptValue@@QBEPAVAptArray@@XZ
?c_boolean@AptValue@@QBEPAVAptBoolean@@XZ
?c_cih@AptValue@@QBEPAVAptCIH@@_N@Z
?c_date@AptValue@@QBEPAVAptDate@@XZ
?c_float@AptValue@@QBEPAVAptFloat@@XZ
?c_global@AptValue@@QBEPAVAptGlobal@@XZ
?c_integer@AptValue@@QBEPAVAptInteger@@XZ
?c_key@AptValue@@QBEPAVAptKey@@XZ
?c_loadvars@AptValue@@QBEPAVAptLoadVars@@XZ
?c_lookup@AptValue@@QBEPAVAptLookup@@XZ
?c_math@AptValue@@QBEPAVAptMathObj@@XZ
?c_mouse@AptValue@@QBEPAVAptMouse@@XZ
?c_movieClip@AptValue@@QBEPAVAptMovieClip@@XZ
?c_nativefunction@AptValue@@QBEPAVAptNativeFunction@@XZ
?c_object@AptValue@@QBEPAVAptObject@@XZ
?c_prototype@AptValue@@QBEPAVAptPrototype@@XZ
?c_register@AptValue@@QBEPAVAptRegister@@XZ
?c_scriptcolour@AptValue@@QBEPAVAptScriptColour@@XZ
?c_scriptfunction@AptValue@@QBEPAVAptScriptFunctionBase@@XZ
?c_sound@AptValue@@QBEPAVAptSound@@XZ
?c_stage@AptValue@@QBEPAVAptStage@@XZ
?c_str@EAStringC@@QBEPBDXZ
?c_string@AptValue@@QBEPAVAptString@@XZ
?c_textformat@AptValue@@QBEPAVAptTextFormat@@XZ
?c_xml@AptValue@@QBEPAVAptXml@@XZ
?c_xmlattributes@AptValue@@QBEPAVAptXmlAttributes@@XZ
?c_xmlnode@AptValue@@QBEPAVAptXmlNode@@XZ
?decGCRoot@AptValue@@QAEXXZ
?dragMovieClip@AptAnimationPoolData@@QAEXXZ
?getGCMark@AptValue@@QBE_NXZ
?getGCRoot@AptValue@@QBEIXZ
?getIsDefined@AptValue@@QBE_NXZ
?getRefCount@AptValue@@QBEIXZ
?getVtblIndex@AptValue@@QBE?AW4AptVirtualFunctionTable_Indices@@XZ
?incGCRoot@AptValue@@QAEXXZ
?isArray@AptValue@@QBE_NXZ
?isBoolean@AptValue@@QBE_NXZ
?isCIH@AptValue@@QBE_N_N@Z
?isDate@AptValue@@QBE_NXZ
?isExtern@AptValue@@QBE_NXZ
?isFloat@AptValue@@QBE_NXZ
?isFrameStack@AptValue@@QBE_NXZ
?isInteger@AptValue@@QBE_NXZ
?isKey@AptValue@@QBE_NXZ
?isLoadVars@AptValue@@QBE_NXZ
?isLookup@AptValue@@QBE_NXZ
?isMath@AptValue@@QBE_NXZ
?isMouse@AptValue@@QBE_NXZ
?isMovieClip@AptValue@@QBE_NXZ
?isNativeFunction@AptValue@@QBE_NXZ
?isNone@AptValue@@QBE_NXZ
?isObject@AptValue@@QBE_NXZ
?isPrototype@AptValue@@QBE_NXZ
?isRegister@AptValue@@QBE_NXZ
?isScriptColour@AptValue@@QBE_NXZ
?isScriptFunction@AptValue@@QBE_NXZ
?isSound@AptValue@@QBE_NXZ
?isStage@AptValue@@QBE_NXZ
?isString@AptValue@@QBE_NXZ
?isTextFormat@AptValue@@QBE_NXZ
?isUndefined@AptValue@@QBE_NXZ
?isXml@AptValue@@QBE_NXZ
?isXmlAttributes@AptValue@@QBE_NXZ
?isXmlNode@AptValue@@QBE_NXZ
?length@AptArray@@QAEHXZ
?setGCMark@AptValue@@QAEX_N@Z
?setGCRoot@AptValue@@QAEXI@Z
?setIsDefined@AptValue@@QAEX_N@Z
?setRefCount@AptValue@@QAEXI@Z
?setVtblIndex@AptValue@@QAEXW4AptVirtualFunctionTable_Indices@@@Z
?stackAt@AptActionInterpreter@@QBEPAVAptValue@@H@Z
?stackGetPop@AptActionInterpreter@@QAEPAVAptValue@@XZ
?stackPop@AptActionInterpreter@@QAEXH@Z
?stackPop@AptActionInterpreter@@QAEXXZ
?stackPopAndPush@AptActionInterpreter@@QAEXHQAVAptValue@@@Z
?stackPopNoDec@AptActionInterpreter@@QAEXXZ
?stackPush@AptActionInterpreter@@QAEXQAVAptValue@@@Z
?stackPushIndirect@AptActionInterpreter@@QAEXQAVAptValue@@@Z
?stackPushNoInc@AptActionInterpreter@@QAEXQAVAptValue@@@Z
?stackSafePop@AptActionInterpreter@@QAEXH@Z

Sections

.text
Size: 6.5MB - Virtual size: 6.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_rwcseg
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 844KB - Virtual size: 844KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3.9MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_rwdseg
Size: 2B - Virtual size: 265B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 242KB - Virtual size: 307KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

stxt774
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.name0
Size: 156KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.name1
Size: 4KB - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

27f55af0db036289a66cabd7b3d27257

Headers

File Characteristics

Imports

d3d9

d3dx9_27

dsound

kernel32

Exports

Exports

Sections

.text Size: 6.5MB - Virtual size: 6.5MB

_rwcseg Size: 5KB - Virtual size: 5KB

.rdata Size: 844KB - Virtual size: 844KB

.data Size: 3.9MB - Virtual size: 5.0MB

.idata Size: 8KB - Virtual size: 8KB

_rwdseg Size: 2B - Virtual size: 265B

.rsrc Size: 3KB - Virtual size: 3KB

Size: 242KB - Virtual size: 307KB

stxt774 Size: 5KB - Virtual size: 5KB

.name0 Size: 156KB - Virtual size: 152KB

.name1 Size: 4KB - Virtual size: 528B

.text
Size: 6.5MB - Virtual size: 6.5MB

_rwcseg
Size: 5KB - Virtual size: 5KB

.rdata
Size: 844KB - Virtual size: 844KB

.data
Size: 3.9MB - Virtual size: 5.0MB

.idata
Size: 8KB - Virtual size: 8KB

_rwdseg
Size: 2B - Virtual size: 265B

.rsrc
Size: 3KB - Virtual size: 3KB

stxt774
Size: 5KB - Virtual size: 5KB

.name0
Size: 156KB - Virtual size: 152KB

.name1
Size: 4KB - Virtual size: 528B