NFSMW TexMod & WideScreenFix by GiovuX[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

NFSMW TexMod & WideScreenFix by GiovuX.rar
Size

208.4MB
MD5

06a25cddedc0bc5dc7fb5b416a0829e9
SHA1

1729e92d5641447d791fc99de09bdc093e415095
SHA256

3d991c24fc6144ee293e7fe2c4108cfc49dacfabe2a1d82cc4fb636b609fb71f
SHA512

4f208e7dc972a74e27574fa5c2aea6e5a206f82eef3a9ef5a6c3d5bcf41ed028569239765036d2c662086a1fa7c24040f445c933e2be45dd9f161f8e98f01975
SSDEEP

6291456:ER0/hIzl3eAGqVh57ySjVrRlQdom1NQg801OwGinbdVk:ER1peANhESjRYb80UziRC

Score

3^/10

Malware Config

Signatures

Unsigned PE 6 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NFSMW TexMod/Texmod.exe
unpack001/NFSMW TexMod/d3d10.dll
unpack001/NFSMW TexMod/d3d9.dll
unpack001/WideScreenFix/dinput8.dll
unpack001/WideScreenFix/scripts/NFSMostWanted.WidescreenFix.asi
unpack001/WideScreenFix/scripts/modupdater.asi

Files

NFSMW TexMod & WideScreenFix by GiovuX.rar
.rar
Instrucciones (TexMod).txt
Instrucciones (WideScreenFix).txt
NFSMW TexMod/Texmod.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 353B - Virtual size: 776KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 582KB - Virtual size: 587KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
NFSMW TexMod/Texturas/HD Miscellaneous.tpf
NFSMW TexMod/Texturas/HD Trees.tpf
NFSMW TexMod/Texturas/NFSMWTexModr2.tpf
NFSMW TexMod/d3d10.dll
.dll windows x86

e1c4ea980bfd375519d2d88438dbd615

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsA

ws2_32

gethostbyname
connect
WSASetLastError

shell32

ShellExecuteA

kernel32

CloseHandle
SetEndOfFile
LCMapStringW
ExitProcess
GetLastError
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
GetCurrentDirectoryA
GetCommandLineA
VirtualProtect
LCMapStringA
CreateFileA
RtlUnwind
RaiseException
GetCurrentThreadId
GetVersionExA
HeapFree
HeapAlloc
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
SetUnhandledExceptionFilter
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
HeapReAlloc
TerminateProcess
GetCurrentProcess
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
WriteFile
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
InterlockedExchange
VirtualQuery
SetFilePointer
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
GetLocaleInfoA
SetStdHandle
FlushFileBuffers
GetSystemInfo
ReadFile

user32

MessageBoxA

Exports

Exports

Direct3DCreate9

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
NFSMW TexMod/d3d9.dll
.dll windows x86

4bd2d13a49fe585dff6d9f12926c3dc0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

d3dx9_26

D3DXMatrixInverse
D3DXVec4Transform
D3DXCreateEffect
D3DXCreateEffectFromFileA
D3DXMatrixMultiply
D3DXSaveSurfaceToFileA
D3DXCreateTextureFromFileExA
D3DXCreateFontA
D3DXCreateSprite

kernel32

DeleteCriticalSection
GetSystemInfo
VirtualProtect
FlushFileBuffers
GetStringTypeW
GetStringTypeA
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
CloseHandle
CreateFileA
GetCurrentDirectoryA
GetTickCount
GetSystemTime
ExitProcess
DisableThreadLibraryCalls
GetProcAddress
LoadLibraryA
FreeLibrary
GetSystemDirectoryA
QueryPerformanceFrequency
QueryPerformanceCounter
SetThreadAffinityMask
GetCurrentThread
GetProcessAffinityMask
GetCurrentProcess
RtlUnwind
HeapAlloc
HeapFree
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetModuleHandleA
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
HeapReAlloc
TerminateProcess
HeapSize
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
SetFilePointer
GetACP
GetOEMCP
GetCPInfo
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
InterlockedExchange
VirtualQuery
InitializeCriticalSection
SetStdHandle
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetLocaleInfoA

user32

GetAsyncKeyState
SetRect

Exports

Exports

D3DPERF_BeginEvent
D3DPERF_EndEvent
D3DPERF_GetStatus
D3DPERF_QueryRepeatFrame
D3DPERF_SetMarker
D3DPERF_SetOptions
D3DPERF_SetRegion
Direct3DCreate9

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
NFSMW TexMod/enbpalette.bmp
NFSMW TexMod/enbseries.ini
WideScreenFix/dinput8.dll
.dll regsvr32 windows x86

d6427ef7f02af824d915e7ace1f85c08

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
GetProcessHeap
GetNativeSystemInfo
VirtualAlloc
VirtualFree
VirtualProtect
FreeLibrary
GetProcAddress
LoadLibraryA
IsBadReadPtr
SetCurrentDirectoryW
GetCurrentDirectoryW
FindClose
FindFirstFileW
FindNextFileA
FindNextFileW
GetLastError
CreateEventA
CreateEventW
HeapAlloc
ExitProcess
GetStartupInfoW
GetSystemInfo
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
LoadResource
LockResource
SizeofResource
GetShortPathNameA
LoadLibraryW
GetStartupInfoA
FindResourceA
GetPrivateProfileIntW
MultiByteToWideChar
SetEndOfFile
CreateFileW
ReadConsoleW
WriteConsoleW
GetCurrentProcess
SetLastError
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
CloseHandle
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
WideCharToMultiByte
GetCPInfo
EncodePointer
DecodePointer
InitializeCriticalSectionAndSpinCount
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
RaiseException
RtlUnwind
LoadLibraryExW
InterlockedFlushSList
GetModuleHandleExW
GetModuleFileNameA
HeapReAlloc
GetACP
GetStdHandle
GetFileType
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
ReadFile
SetFilePointerEx
HeapSize
FindFirstFileExA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW

user32

MessageBoxA
ReleaseDC
MessageBoxW
GetDC

gdi32

GetDeviceCaps

shell32

ShellExecuteA
SHGetKnownFolderPath

ole32

CoTaskMemFree

d3d9

Direct3DCreate9

Exports

Exports

AcquireDDThreadLock
CloseDriver
CompleteCreateSysmemSurface
D3D11CoreCreateDevice
D3D11CoreCreateLayeredDevice
D3D11CoreGetLayeredDeviceSize
D3D11CoreRegisterLayers
D3D11CreateDevice
D3D11CreateDeviceAndSwapChain
D3DKMTCloseAdapter
D3DKMTCreateAllocation
D3DKMTCreateContext
D3DKMTCreateDevice
D3DKMTCreateSynchronizationObject
D3DKMTDestroyAllocation
D3DKMTDestroyContext
D3DKMTDestroyDevice
D3DKMTDestroySynchronizationObject
D3DKMTEscape
D3DKMTGetContextSchedulingPriority
D3DKMTGetDeviceState
D3DKMTGetDisplayModeList
D3DKMTGetMultisampleMethodList
D3DKMTGetRuntimeData
D3DKMTGetSharedPrimaryHandle
D3DKMTLock
D3DKMTOpenAdapterFromHdc
D3DKMTOpenResource
D3DKMTPresent
D3DKMTQueryAdapterInfo
D3DKMTQueryAllocationResidency
D3DKMTQueryResourceInfo
D3DKMTRender
D3DKMTSetAllocationPriority
D3DKMTSetContextSchedulingPriority
D3DKMTSetDisplayMode
D3DKMTSetDisplayPrivateDriverFormat
D3DKMTSetGammaRamp
D3DKMTSetVidPnSourceOwner
D3DKMTSignalSynchronizationObject
D3DKMTUnlock
D3DKMTWaitForSynchronizationObject
D3DKMTWaitForVerticalBlankEvent
D3DPERF_BeginEvent
D3DPERF_EndEvent
D3DPERF_GetStatus
D3DPERF_QueryRepeatFrame
D3DPERF_SetMarker
D3DPERF_SetOptions
D3DPERF_SetRegion
D3DParseUnknownCommand
D3DPerformance_BeginEvent
D3DPerformance_EndEvent
D3DPerformance_GetStatus
D3DPerformance_SetMarker
DDGetAttachedSurfaceLcl
DDInternalLock
DDInternalUnlock
DSoundHelp
DebugSetLevel
DebugSetMute
DefDriverProc
Direct3D9EnableMaximizedWindowedModeShim
Direct3DCreate8
Direct3DCreate9
Direct3DCreate9Ex
Direct3DShaderValidatorCreate9
DirectDrawCreate
DirectDrawCreateClipper
DirectDrawCreateEx
DirectDrawEnumerateA
DirectDrawEnumerateExA
DirectDrawEnumerateExW
DirectDrawEnumerateW
DirectInput8Create
DirectInputCreateA
DirectInputCreateEx
DirectInputCreateW
DirectSoundCaptureCreate
DirectSoundCaptureCreate8
DirectSoundCaptureEnumerateA
DirectSoundCaptureEnumerateW
DirectSoundCreate
DirectSoundCreate8
DirectSoundEnumerateA
DirectSoundEnumerateW
DirectSoundFullDuplexCreate
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
DrawDibBegin
DrawDibChangePalette
DrawDibClose
DrawDibDraw
DrawDibEnd
DrawDibGetBuffer
DrawDibGetPalette
DrawDibOpen
DrawDibProfileDisplay
DrawDibRealize
DrawDibSetPalette
DrawDibStart
DrawDibStop
DrawDibTime
DriverCallback
DrvGetModuleHandle
EnableFeatureLevelUpgrade
GetDDSurfaceLocal
GetDeviceID
GetDriverModuleHandle
GetOLEThunkData
GetOpenFileNamePreview
GetOpenFileNamePreviewA
GetOpenFileNamePreviewW
GetSaveFileNamePreviewA
GetSaveFileNamePreviewW
GetSurfaceFromDC
ICClose
ICCompress
ICCompressorChoose
ICCompressorFree
ICDecompress
ICDraw
ICDrawBegin
ICGetDisplayFormat
ICGetInfo
ICImageCompress
ICImageDecompress
ICInfo
ICInstall
ICLocate
ICMThunk32
ICOpen
ICOpenFunction
ICRemove
ICSendMessage
ICSeqCompressFrame
ICSeqCompressFrameEnd
ICSeqCompressFrameStart
MCIWndCreate
MCIWndCreateA
MCIWndCreateW
MCIWndRegisterClass
OpenAdapter10
OpenAdapter10_2
OpenDriver
PSGPError
PSGPSampleTexture
RegisterSpecialCase
ReleaseDDThreadLock
SendDriverMessage
SetAppCompatData
StretchDIB
ValidatePixelShader
ValidateVertexShader
VideoForWindowsVersion
_XCancelOverlapped@4
_XCloseHandle@4
_XCreateSocket@12
_XCustomGetLastActionPress@12
_XEnumerate@20
_XFriendsCreateEnumerator@20
_XGetOverlappedExtendedError@4
_XGetOverlappedResult@12
_XHVCreateEngine@12
_XInviteGetAcceptedInfo@8
_XInviteSend@20
_XLiveCalculateSkill@20
_XLiveCloseProtectedDataContext@4
_XLiveContentCreateAccessHandle@28
_XLiveContentCreateEnumerator@16
_XLiveContentGetPath@16
_XLiveContentRetrieveOffersByDate@24
_XLiveContentUninstall@12
_XLiveCreateProtectedDataContext@8
_XLiveGetUpdateInformation@4
_XLiveInitialize@4
_XLiveInitializeEx@8
_XLiveInput@4
_XLiveOnCreateDevice@8
_XLiveOnResetDevice@4
_XLivePBufferAllocate@8
_XLivePBufferFree@4
_XLivePBufferGetByte@12
_XLivePBufferGetByteArray@16
_XLivePBufferGetDWORD@12
_XLivePBufferSetByte@12
_XLivePBufferSetByteArray@16
_XLivePBufferSetDWORD@12
_XLivePreTranslateMessage@4
_XLiveProtectData@20
_XLiveProtectedVerifyFile@12
_XLiveQueryProtectedDataInformation@8
_XLiveRender@0
_XLiveSetDebugLevel@8
_XLiveSetSponsorToken@8
_XLiveUninitialize@0
_XLiveUnprotectData@20
_XLiveUpdateSystem@4
_XNetCleanup@0
_XNetConnect@4
_XNetCreateKey@8
_XNetGetConnectStatus@4
_XNetGetEthernetLinkStatus@0
_XNetGetTitleXnAddr@4
_XNetInAddrToXnAddr@12
_XNetQosListen@20
_XNetQosLookup@48
_XNetQosRelease@4
_XNetQosServiceLookup@12
_XNetRegisterKey@8
_XNetServerToInAddr@12
_XNetSetSystemLinkPort@4
_XNetStartup@4
_XNetUnregisterInAddr@4
_XNetUnregisterKey@4
_XNetXnAddrToInAddr@12
_XNotifyCreateListener@8
_XNotifyGetNext@16
_XNotifyPositionUI@4
_XOnlineCleanup@0
_XOnlineGetNatType@0
_XOnlineStartup@0
_XSessionArbitrationRegister@28
_XSessionCreate@32
_XSessionDelete@8
_XSessionEnd@8
_XSessionFlushStats@8
_XSessionGetDetails@16
_XSessionJoinLocal@20
_XSessionJoinRemote@20
_XSessionLeaveLocal@16
_XSessionLeaveRemote@16
_XSessionMigrateHost@16
_XSessionModify@20
_XSessionSearchEx@44
_XSessionStart@12
_XSessionWriteStats@24
_XShowFriendsUI@4
_XShowGamerCardUI@12
_XShowGuideUI@4
_XShowKeyboardUI@32
_XShowMarketplaceUI@20
_XShowPlayerReviewUI@12
_XShowSigninUI@8
_XSockeClose@4
_XSocketAccept@12
_XSocketBind@12
_XSocketConnect@12
_XSocketGetSockName@12
_XSocketIOCTLSocket@12
_XSocketInet_Addr@4
_XSocketListen@8
_XSocketNTOHL@4
_XSocketNTOHS@4
_XSocketRecv@16
_XSocketRecvFrom@24
_XSocketSelect@20
_XSocketSend@16
_XSocketSendTo@24
_XSocketSetSockOpt@20
_XSocketShutdown@8
_XStorageBuildServerPath@28
_XStorageDownloadToMemory@28
_XStorageEnumerate@28
_XStorageUploadFromMemory@20
_XStringVerify@28
_XTitleServerCreateEnumerator@16
_XUserAreUsersFriends@20
_XUserCheckPrivilege@12
_XUserCreateAchievementEnumerator@36
_XUserCreateStatsEnumeratorByRank@28
_XUserCreateStatsEnumeratorByXuid@32
_XUserGetName@12
_XUserGetSigninInfo@12
_XUserGetSigninState@4
_XUserGetXUID@8
_XUserMuteListQuery@16
_XUserReadGamerpictureByKey@24
_XUserReadProfileSettings@28
_XUserReadProfileSettingsByXuid@36
_XUserReadStats@32
_XUserSetContext@12
_XUserSetContextEx@16
_XUserSetProperty@16
_XUserSetPropertyEx@20
_XUserWriteAchievements@12
_XUserWriteProfileSettings@16
_XWSACleanup@0
_XWSAGetLastError@0
_XWSAStartup@8
_xlive_5367@20
_xlive_5372@24
acmDriverAddA
acmDriverAddW
acmDriverClose
acmDriverDetailsA
acmDriverDetailsW
acmDriverEnum
acmDriverID
acmDriverMessage
acmDriverOpen
acmDriverPriority
acmDriverRemove
acmFilterChooseA
acmFilterChooseW
acmFilterDetailsA
acmFilterDetailsW
acmFilterEnumA
acmFilterEnumW
acmFilterTagDetailsA
acmFilterTagDetailsW
acmFilterTagEnumA
acmFilterTagEnumW
acmFormatChooseA
acmFormatChooseW
acmFormatDetailsA
acmFormatDetailsW
acmFormatEnumA
acmFormatEnumW
acmFormatSuggest
acmFormatTagDetailsA
acmFormatTagDetailsW
acmFormatTagEnumA
acmFormatTagEnumW
acmGetVersion
acmMetrics
acmStreamClose
acmStreamConvert
acmStreamMessage
acmStreamOpen
acmStreamPrepareHeader
acmStreamReset
acmStreamSize
acmStreamUnprepareHeader
auxGetDevCapsA
auxGetDevCapsW
auxGetNumDevs
auxGetVolume
auxOutMessage
auxSetVolume
joyConfigChanged
joyGetDevCapsA
joyGetDevCapsW
joyGetNumDevs
joyGetPos
joyGetPosEx
joyGetThreshold
joyReleaseCapture
joySetCapture
joySetThreshold
midiConnect
midiDisconnect
midiInAddBuffer
midiInClose
midiInGetDevCapsA
midiInGetDevCapsW
midiInGetErrorTextA
midiInGetErrorTextW
midiInGetID
midiInGetNumDevs
midiInMessage
midiInOpen
midiInPrepareHeader
midiInReset
midiInStart
midiInStop
midiInUnprepareHeader
midiOutCacheDrumPatches
midiOutCachePatches
midiOutClose
midiOutGetDevCapsA
midiOutGetDevCapsW
midiOutGetErrorTextA
midiOutGetErrorTextW
midiOutGetID
midiOutGetNumDevs
midiOutGetVolume
midiOutLongMsg
midiOutMessage
midiOutOpen
midiOutPrepareHeader
midiOutReset
midiOutSetVolume
midiOutShortMsg
midiOutUnprepareHeader
midiStreamClose
midiStreamOpen
midiStreamOut
midiStreamPause
midiStreamPosition
midiStreamProperty
midiStreamRestart
midiStreamStop
mixerClose
mixerGetControlDetailsA
mixerGetControlDetailsW
mixerGetDevCapsA
mixerGetDevCapsW
mixerGetID
mixerGetLineControlsA
mixerGetLineControlsW
mixerGetLineInfoA
mixerGetLineInfoW
mixerGetNumDevs
mixerMessage
mixerOpen
mixerSetControlDetails
mmDrvInstall
mmGetCurrentTask
mmTaskBlock
mmTaskCreate
mmTaskSignal
mmTaskYield
mmioAdvance
mmioAscend
mmioClose
mmioCreateChunk
mmioDescend
mmioFlush
mmioGetInfo
mmioInstallIOProcA
mmioInstallIOProcW
mmioOpenA
mmioOpenW
mmioRead
mmioRenameA
mmioRenameW
mmioSeek
mmioSendMessage
mmioSetBuffer
mmioSetInfo
mmioStringToFOURCCA
mmioStringToFOURCCW
mmioWrite
ov_bitrate
ov_bitrate_instant
ov_clear
ov_comment
ov_crosslap
ov_halfrate
ov_halfrate_p
ov_info
ov_open
ov_open_callbacks
ov_pcm_seek
ov_pcm_seek_lap
ov_pcm_seek_page
ov_pcm_seek_page_lap
ov_pcm_tell
ov_pcm_total
ov_raw_seek
ov_raw_seek_lap
ov_raw_tell
ov_raw_total
ov_read
ov_read_float
ov_seekable
ov_serialnumber
ov_streams
ov_test
ov_test_callbacks
ov_test_open
ov_time_seek
ov_time_seek_lap
ov_time_seek_page
ov_time_seek_page_lap
ov_time_tell
ov_time_total
sndOpenSound
waveInAddBuffer
waveInClose
waveInGetDevCapsA
waveInGetDevCapsW
waveInGetErrorTextA
waveInGetErrorTextW
waveInGetID
waveInGetNumDevs
waveInGetPosition
waveInMessage
waveInOpen
waveInPrepareHeader
waveInReset
waveInStart
waveInStop
waveInUnprepareHeader
waveOutBreakLoop
waveOutClose
waveOutGetDevCapsA
waveOutGetDevCapsW
waveOutGetErrorTextA
waveOutGetErrorTextW
waveOutGetID
waveOutGetNumDevs
waveOutGetPitch
waveOutGetPlaybackRate
waveOutGetPosition
waveOutGetVolume
waveOutMessage

Sections

.text
Size: 245KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 827KB - Virtual size: 826KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WideScreenFix/scripts/NFSMostWanted.WidescreenFix.asi
.dll windows x86

5bb29b1af20621c72698cd584d30b0a6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CreateDirectoryA
Sleep
CreateThread
VirtualProtect
GetModuleFileNameA
GetModuleHandleExA
WritePrivateProfileStringA
SetEndOfFile
CreateFileW
ReadConsoleW
WriteConsoleW
SetStdHandle
GetLastError
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
MultiByteToWideChar
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
CloseHandle
SetEvent
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RaiseException
RtlUnwind
FreeLibrary
LoadLibraryExW
InterlockedFlushSList
HeapAlloc
HeapFree
HeapReAlloc
ExitProcess
GetModuleHandleExW
GetACP
GetStdHandle
GetFileType
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
ReadFile
SetFilePointerEx
GetProcessHeap
HeapSize
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW

user32

GetMonitorInfoA
MonitorFromWindow
GetDesktopWindow
VkKeyScanA
keybd_event

Sections

.text
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WideScreenFix/scripts/NFSMostWanted.WidescreenFix.ini
WideScreenFix/scripts/PSGLOBALB.BUN
WideScreenFix/scripts/XBOXGLOBALB.BUN
WideScreenFix/scripts/modupdater.asi
.dll windows x86

3dd0da53141951301df81adc7bc76bd4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoW
GetFileVersionInfoSizeW

ws2_32

ntohl
sendto
recvfrom
listen
gethostname
freeaddrinfo
getaddrinfo
ioctlsocket
WSAIoctl
setsockopt
ntohs
htons
getsockopt
getsockname
getpeername
connect
closesocket
bind
send
recv
WSASetLastError
select
__WSAFDIsSet
socket
WSAGetLastError
WSACleanup
WSAStartup
accept
htonl

advapi32

CryptDestroyHash
CryptReleaseContext
CryptGetHashParam
CryptEncrypt
CryptImportKey
CryptDestroyKey
CryptAcquireContextA
CryptHashData
CryptCreateHash
CryptGenRandom

crypt32

CertFreeCertificateContext

wldap32

ord143
ord46
ord301
ord200
ord30
ord79
ord35
ord33
ord32
ord27
ord26
ord22
ord41
ord50
ord45
ord60
ord211

kernel32

SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
FlushFileBuffers
GetProcessHeap
FindFirstFileExA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetACP
GetConsoleCP
ReadConsoleW
GetConsoleMode
HeapReAlloc
GetFullPathNameW
HeapFree
HeapAlloc
GetModuleHandleExW
ExitThread
GetCurrentDirectoryW
SetCurrentDirectoryW
SetEnvironmentVariableW
SetEnvironmentVariableA
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
RtlUnwind
RaiseException
LoadLibraryW
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteConsoleW
HeapSize
GetTimeZoneInformation
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
FindClose
FindNextFileA
CloseHandle
CreateDirectoryW
DeleteFileW
FindFirstFileW
FindNextFileW
GetFileAttributesW
GetLastError
SetLastError
GetCurrentProcessId
ExitProcess
CreateThread
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleExA
lstrcmpW
MoveFileW
FileTimeToSystemTime
CreateFileW
ReadFile
WriteFile
GetTickCount64
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
FreeLibrary
GetProcAddress
Sleep
SleepEx
GetModuleHandleA
ExpandEnvironmentStringsA
FormatMessageA
WaitForSingleObjectEx
VerSetConditionMask
GetSystemDirectoryA
LoadLibraryA
VerifyVersionInfoA
GetStdHandle
GetFileType
PeekNamedPipe
WaitForMultipleObjects
GetThreadTimes
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
VirtualFree
VirtualProtect
VirtualAlloc
GetVersionExW
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
LoadLibraryExW
FormatMessageW
WideCharToMultiByte
DuplicateHandle
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetExitCodeThread
QueryPerformanceCounter
TryEnterCriticalSection
MultiByteToWideChar
GetStringTypeW
GetFileAttributesExW
SetEndOfFile
SetFilePointerEx
EncodePointer
DecodePointer
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
GetModuleHandleW
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
SetEvent
ResetEvent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
CreateTimerQueue
SignalObjectAndWait
SwitchToThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
FreeLibraryAndExitThread

user32

SendMessageA
GetWindowThreadProcessId
EnumWindows
SwitchToThisWindow

shell32

ShellExecuteExW
ShellExecuteW

rstrtmgr

RmEndSession
RmStartSession
RmRegisterResources
RmGetList
RmShutdown

comctl32

ord345

Sections

.text
Size: 772KB - Virtual size: 771KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

Size: 353B - Virtual size: 776KB

Size: 582KB - Virtual size: 587KB

e1c4ea980bfd375519d2d88438dbd615

Headers

File Characteristics

Imports

shlwapi

ws2_32

shell32

kernel32

user32

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 54KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 10KB

.reloc Size: 8KB - Virtual size: 4KB

4bd2d13a49fe585dff6d9f12926c3dc0

Headers

File Characteristics

Imports

d3dx9_26

kernel32

user32

Exports

Exports

Sections

.text Size: 92KB - Virtual size: 91KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 100KB - Virtual size: 109KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 12KB - Virtual size: 10KB

d6427ef7f02af824d915e7ace1f85c08

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

d3d9

Exports

Exports

Sections

.text Size: 245KB - Virtual size: 244KB

.rdata Size: 115KB - Virtual size: 115KB

.data Size: 5KB - Virtual size: 9KB

.rsrc Size: 827KB - Virtual size: 826KB

.reloc Size: 15KB - Virtual size: 14KB

5bb29b1af20621c72698cd584d30b0a6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 190KB - Virtual size: 190KB

.rdata Size: 66KB - Virtual size: 65KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 11KB - Virtual size: 10KB

3dd0da53141951301df81adc7bc76bd4

Headers

DLL Characteristics

File Characteristics

Imports

version

ws2_32

.text
Size: 56KB - Virtual size: 54KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 10KB

.reloc
Size: 8KB - Virtual size: 4KB

.text
Size: 92KB - Virtual size: 91KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 100KB - Virtual size: 109KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 12KB - Virtual size: 10KB

.text
Size: 245KB - Virtual size: 244KB

.rdata
Size: 115KB - Virtual size: 115KB

.data
Size: 5KB - Virtual size: 9KB

.rsrc
Size: 827KB - Virtual size: 826KB

.reloc
Size: 15KB - Virtual size: 14KB

.text
Size: 190KB - Virtual size: 190KB

.rdata
Size: 66KB - Virtual size: 65KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 11KB - Virtual size: 10KB

.text
Size: 772KB - Virtual size: 771KB

.rdata
Size: 166KB - Virtual size: 166KB

.data
Size: 11KB - Virtual size: 16KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 35KB - Virtual size: 34KB