eba55b848f7bd1exe_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

eba55b848f7bd1exe_JC.exe
Size

11.6MB
MD5

eba55b848f7bd1b8d1da2360a527a486
SHA1

c4f92066958a1bc6bf7a8a33bb6547160ca2c943
SHA256

54ed0fd33b538c3987418b6dcab6011149ff9c408c96723df38e139758499578
SHA512

6278d72a3950478aa0eb3707f9fb4f914b42ad21bb8206fb76eae3bfd7433569fbecd8b1e3361681ddc9824f5b734063a95bd5663cda244eafabffe929cac134
SSDEEP

196608:cu/2fd5k+ad31ZtZM6WsR3j1AiZ6KmGUwxzv9opj0cmGlehGzz:cHENxdAU6KBUOxoGHG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eba55b848f7bd1exe_JC.exe

Files

eba55b848f7bd1exe_JC.exe
.exe windows x86

2e12b6779eeed49d6fbfa4c1cdcd08f5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeBeginPeriod
timeEndPeriod
timeGetTime

ws2_32

connect
getnameinfo
inet_ntoa
getsockopt
setsockopt
accept
ioctlsocket
WSAGetLastError
socket
WSAStartup
ntohs
getsockname
gethostbyname
inet_addr
htons
ntohl
select
__WSAFDIsSet
bind
listen
gethostname
closesocket
shutdown
recv
send
htonl
sendto
recvfrom
WSACleanup
WSAIoctl

d3dx9_43

D3DXMatrixMultiply
D3DXVec3TransformNormal
D3DXMatrixRotationYawPitchRoll
D3DXMatrixTranspose
D3DXVec3Normalize
D3DXVec4Transform
D3DXVec3Transform
D3DXSaveTextureToFileA
D3DXVec3TransformCoord
D3DXMatrixInverse
D3DXMatrixRotationX
D3DXMatrixRotationAxis
D3DXMatrixScaling
D3DXQuaternionRotationYawPitchRoll
D3DXMatrixLookAtLH
D3DXQuaternionInverse
D3DXQuaternionRotationMatrix
D3DXMatrixRotationZ
D3DXSaveSurfaceToFileInMemory
D3DXMatrixRotationQuaternion
D3DXMatrixDecompose
D3DXVec2Normalize
D3DXPlaneTransform
D3DXQuaternionMultiply
D3DXSaveTextureToFileInMemory
D3DXGetShaderConstantTable
D3DXCreateTextureFromFileInMemoryEx
D3DXLoadSurfaceFromSurface
D3DXMatrixMultiplyTranspose
D3DXMatrixTranslation
D3DXMatrixRotationY
D3DXGetDeclVertexSize
D3DXMatrixTransformation2D
D3DXCompileShader
D3DXQuaternionNormalize
D3DXCreateFontA
D3DXCreateBox
D3DXVec3Project
D3DXSaveSurfaceToFileA
D3DXQuaternionSlerp
D3DXPlaneIntersectLine
D3DXPlaneFromPointNormal
D3DXCreateVolumeTextureFromFileInMemoryEx
D3DXMatrixOrthoLH
D3DXMatrixOrthoOffCenterLH
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXMatrixPerspectiveFovLH
D3DXMatrixPerspectiveOffCenterLH
D3DXPlaneFromPoints
D3DXGetImageInfoFromFileInMemory

d3d9

Direct3DCreate9
D3DPERF_SetOptions
D3DPERF_EndEvent
D3DPERF_BeginEvent

iphlpapi

GetPerAdapterInfo
IcmpCloseHandle
IcmpSendEcho
GetAdaptersInfo
SendARP
IcmpCreateFile

crypt32

CryptDecryptMessage
CryptMsgOpenToDecode
CryptMsgUpdate
CryptMsgClose
CryptEncodeObject
CertSetCertificateContextProperty
CertGetSubjectCertificateFromStore
CryptEncryptMessage
CryptMsgControl
CertOpenStore
CertFreeCertificateContext
CertNameToStrW
CertDuplicateCertificateContext
CertCloseStore
CryptDecodeObject
CertGetCertificateContextProperty
CertCreateCertificateContext
CertEnumCertificatesInStore
CryptMsgGetParam

kernel32

GlobalUnlock
InterlockedExchangeAdd
InterlockedCompareExchange
CreateFileA
UnmapViewOfFile
FlushFileBuffers
CreateFileMappingA
GetTempPathA
LocalFree
GetACP
GetOEMCP
GetComputerNameA
FormatMessageA
GetModuleFileNameA
GetFullPathNameW
GetFullPathNameA
GetCurrentDirectoryW
GetCurrentDirectoryA
GetTempPathW
MoveFileW
MoveFileA
DeleteFileW
DeleteFileA
SetFilePointer
GetFileAttributesW
CreateDirectoryW
SetFileAttributesW
SetFileAttributesA
GetFileAttributesA
FileTimeToSystemTime
SystemTimeToFileTime
GetSystemTime
CreateThread
GetFileTime
SetFileTime
GetModuleHandleA
WriteFile
GlobalLock
GetVersionExA
CreateFileW
FindFirstFileW
OutputDebugStringA
QueryPerformanceFrequency
IsDebuggerPresent
WideCharToMultiByte
QueryPerformanceCounter
DuplicateHandle
GetLastError
GetCurrentProcess
InitializeCriticalSection
IsBadReadPtr
TryEnterCriticalSection
GlobalMemoryStatusEx
CreateEventA
GetStdHandle
GlobalAlloc
ExitProcess
SwitchToThread
CloseHandle
LoadLibraryA
GetLocalTime
GetProcAddress
MultiByteToWideChar
Sleep
GetTickCount
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
InterlockedExchange
FindNextFileA
FindClose
FindFirstFileA
CreateDirectoryA
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
TerminateThread
DeleteCriticalSection
GetFileSize
ResetEvent
MapViewOfFile
SetEndOfFile
GetDiskFreeSpaceA
GetSystemInfo
InterlockedIncrement
InterlockedDecrement
Module32First
CreateToolhelp32Snapshot
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
SetHandleCount
GetConsoleCP
GetConsoleMode
GetCPInfo
IsValidCodePage
LCMapStringA
LCMapStringW
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
WaitForSingleObject
TerminateProcess
GetCurrentThread
SetEvent
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
CompareStringA
HeapCreate
CompareStringW
SetEnvironmentVariableA
GetThreadContext
QueryDosDeviceA
GetLogicalDriveStringsA
lstrlenA
IsWow64Process
Module32Next
MulDiv
GetExitCodeThread
WaitForMultipleObjects
GetCurrentProcessId
VirtualFree
VirtualAlloc
GlobalFree
CreateSemaphoreA
CreateMutexA
ReleaseSemaphore
ReleaseMutex
SuspendThread
SetThreadAffinityMask
SetErrorMode
WaitForSingleObjectEx
SetThreadPriority
HeapFree
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
GetDriveTypeA
ExitThread
GetModuleHandleW
GetCommandLineA
GetStartupInfoA
RtlUnwind
GetFileInformationByHandle
PeekNamedPipe
GetFileType
GetProcessHeap
HeapReAlloc
GetDriveTypeW
RaiseException
ReadFile
VirtualQuery

user32

SetRect
GetWindowLongA
PeekMessageW
GetDesktopWindow
SetWindowPos
TranslateMessage
DispatchMessageA
GetMonitorInfoA
GetMessageW
GetWindowRect
GetSystemMetrics
CloseClipboard
GetKeyState
IsClipboardFormatAvailable
GetClipboardData
EmptyClipboard
OpenClipboard
AdjustWindowRect
SetClipboardData
SetCursorPos
LoadIconA
SetFocus
MessageBoxA
ShowWindow
MoveWindow
GetWindowDC
GetWindowInfo
ReleaseDC
ClipCursor
GetClientRect
ClientToScreen
GetCursorPos
ShowCursor
ScreenToClient
RegisterClassA
GetCapture
SetClipboardViewer
LoadCursorA
UpdateWindow
GetActiveWindow
DefWindowProcA
ChangeClipboardChain
CreateWindowExA
InvalidateRect
SetWindowLongA
BeginPaint
SendMessageA
PostQuitMessage
EndPaint
wsprintfW
wvsprintfW
UnregisterClassA
DestroyWindow
PeekMessageA
RegisterClassExA
SetCursor
IsChild
GetForegroundWindow
ReleaseCapture
SetCapture

gdi32

ExtEscape
CreateDCA
ExtTextOutA
SetTextAlign
CreatePen
SetMapMode
SetBkColor
CreateFontA
CreateDIBSection
SetTextColor
LineTo
GetTextExtentPoint32A
MoveToEx
CreateICA
GetDeviceCaps
GetStockObject
BitBlt
DeleteDC
GetDIBits
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
RestoreDC
StretchBlt
SaveDC

advapi32

CryptGetProvParam
CryptExportKey
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
GetUserNameA
CryptAcquireContextA
CryptReleaseContext
CryptGenRandom
CryptDestroyKey
CryptGetUserKey
CryptEnumProvidersA
CryptAcquireContextW

shell32

ShellExecuteA
SHGetFolderPathA

fmodex

?getDriverCaps@System@FMOD@@QAG?AW4FMOD_RESULT@@HPAIPAHPAW4FMOD_SPEAKERMODE@@@Z
?setSoftwareFormat@System@FMOD@@QAG?AW4FMOD_RESULT@@HW4FMOD_SOUND_FORMAT@@HHW4FMOD_DSP_RESAMPLER@@@Z
?setDSPBufferSize@System@FMOD@@QAG?AW4FMOD_RESULT@@IH@Z
?setOutput@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_OUTPUTTYPE@@@Z
?getDriverInfo@System@FMOD@@QAG?AW4FMOD_RESULT@@HPADHPAUFMOD_GUID@@@Z
?getNumDrivers@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?setSpeakerMode@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_SPEAKERMODE@@@Z
?release@Sound@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?setReverbAmbientProperties@System@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_REVERB_PROPERTIES@@@Z
?createSound@System@FMOD@@QAG?AW4FMOD_RESULT@@PBDIPAUFMOD_CREATESOUNDEXINFO@@PAPAVSound@2@@Z
?getVersion@System@FMOD@@QAG?AW4FMOD_RESULT@@PAI@Z
?set3DSettings@System@FMOD@@QAG?AW4FMOD_RESULT@@MMM@Z
?setFileSystem@System@FMOD@@QAG?AW4FMOD_RESULT@@P6G?AW43@PBDHPAIPAPAX2@ZP6G?AW43@PAX4@ZP6G?AW43@44I14@ZP6G?AW43@4I4@ZP6G?AW43@PAUFMOD_ASYNCREADINFO@@4@Z5H@Z

fmod_event

?getSystemObject@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVSystem@2@@Z
?load@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PBDPAUFMOD_EVENT_LOADINFO@@PAPAVEventProject@2@@Z
?getCategory@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PBDPAPAVEventCategory@2@@Z
?getEvent@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PBDIPAPAVEvent@2@@Z
?getReverbPreset@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PBDPAUFMOD_REVERB_PROPERTIES@@PAH@Z
?createReverb@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVEventReverb@2@@Z
?set3DListenerAttributes@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@HPBUFMOD_VECTOR@@000@Z
?get3DListenerAttributes@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@HPAUFMOD_VECTOR@@000@Z
?preloadFSB@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PBDHPAVSound@2@_N@Z
?unloadFSB@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PBDH@Z
FMOD_EventSystem_Create
?setMediaPath@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PBD@Z
?update@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?release@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?setValue@EventParameter@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?keyOff@EventParameter@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?release@Event@FMOD@@QAG?AW4FMOD_RESULT@@_N0@Z
?start@Event@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?init@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@HIPAXI@Z
?set3DAttributes@Event@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_VECTOR@@00@Z
?getPaused@Event@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?setPaused@Event@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?stop@Event@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?getInfo@Event@FMOD@@QAG?AW4FMOD_RESULT@@PAHPAPADPAUFMOD_EVENT_INFO@@@Z
?getState@Event@FMOD@@QAG?AW4FMOD_RESULT@@PAI@Z
?getParentGroup@Event@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVEventGroup@2@@Z
?getParameter@Event@FMOD@@QAG?AW4FMOD_RESULT@@PBDPAPAVEventParameter@2@@Z
?getPropertyByIndex@Event@FMOD@@QAG?AW4FMOD_RESULT@@HPAX_N@Z
?setPropertyByIndex@Event@FMOD@@QAG?AW4FMOD_RESULT@@HPAX_N@Z

fmod_event_net

?NetEventSystem_Update@FMOD@@YG?AW4FMOD_RESULT@@XZ
?NetEventSystem_Shutdown@FMOD@@YG?AW4FMOD_RESULT@@XZ

physx3_x86

?getGeometry@PxShapeGeometryPropertyHelper@physx@@QBE_NPBVPxShape@2@AAVPxConvexMeshGeometry@2@@Z
?getGeometry@PxShapeGeometryPropertyHelper@physx@@QBE_NPBVPxShape@2@AAVPxTriangleMeshGeometry@2@@Z
PxCreateBasePhysics
PxRegisterHeightFields
PxRegisterArticulations
?getGeometry@PxShapeGeometryPropertyHelper@physx@@QBE_NPBVPxShape@2@AAVPxHeightFieldGeometry@2@@Z
?getGeometry@PxShapeGeometryPropertyHelper@physx@@QBE_NPBVPxShape@2@AAVPxBoxGeometry@2@@Z
?getGeometry@PxShapeGeometryPropertyHelper@physx@@QBE_NPBVPxShape@2@AAVPxCapsuleGeometry@2@@Z
?getGeometry@PxShapeGeometryPropertyHelper@physx@@QBE_NPBVPxShape@2@AAVPxSphereGeometry@2@@Z
?getGeometry@PxShapeGeometryPropertyHelper@physx@@QBE_NPBVPxShape@2@AAVPxPlaneGeometry@2@@Z
??0PxHeightFieldDescGeneratedInfo@physx@@QAE@XZ
??0PxAggregateGeneratedInfo@physx@@QAE@XZ
??0PxArticulationGeneratedInfo@physx@@QAE@XZ
??0PxArticulationLinkGeneratedInfo@physx@@QAE@XZ
??0PxArticulationJointGeneratedInfo@physx@@QAE@XZ
??0PxClothGeneratedInfo@physx@@QAE@XZ
PxGetSDKMetaData
??0PxTolerancesScaleGeneratedInfo@physx@@QAE@XZ
??0PxParticleSystemGeneratedInfo@physx@@QAE@XZ
??0PxParticleFluidGeneratedInfo@physx@@QAE@XZ
??0PxMaterialGeneratedInfo@physx@@QAE@XZ
??0PxSphereGeometryGeneratedInfo@physx@@QAE@XZ
??0PxClothFabricGeneratedInfo@physx@@QAE@XZ
??0PxRigidDynamicGeneratedInfo@physx@@QAE@XZ
??0PxPlaneGeometryGeneratedInfo@physx@@QAE@XZ
??0PxCapsuleGeometryGeneratedInfo@physx@@QAE@XZ
??0PxBoxGeometryGeneratedInfo@physx@@QAE@XZ
??0PxConvexMeshGeometryGeneratedInfo@physx@@QAE@XZ
??0PxTriangleMeshGeometryGeneratedInfo@physx@@QAE@XZ
??0PxHeightFieldGeometryGeneratedInfo@physx@@QAE@XZ
??0PxRigidStaticGeneratedInfo@physx@@QAE@XZ
??0PxShapeGeneratedInfo@physx@@QAE@XZ
??0PxMeshScaleGeneratedInfo@physx@@QAE@XZ
?createShape@PxRigidActorShapeCollectionHelper@physx@@QBEPAVPxShape@2@PAVPxRigidActor@2@ABVPxGeometry@2@PBQAVPxMaterial@2@IABVPxTransform@2@@Z

physx3cooking_x86

PxCreateCooking

physx3common_x86

?CompleteBoxPruning@Gu@physx@@YA_NPBVPxBounds3@2@IAAV?$Array@IV?$ReflectionAllocator@I@shdfnd@physx@@@shdfnd@2@ABVAxes@12@@Z
?distanceSegmentSegmentSquaredOLD@Gu@physx@@YAMABVPxVec3@2@000PAM1@Z
?allocate@Allocator@shdfnd@physx@@QAEPAXIPBDH@Z
?incRefCount@Foundation@shdfnd@physx@@SAXXZ
?decRefCount@Foundation@shdfnd@physx@@SAXXZ
?intersectTriangleBox@Gu@physx@@YAHABVPxVec3@2@0000@Z
?getTriangle@PxMeshQuery@physx@@SAXABVPxHeightFieldGeometry@2@ABVPxTransform@2@IAAVPxTriangle@2@PAI3@Z
?getTriangle@PxMeshQuery@physx@@SAXABVPxTriangleMeshGeometry@2@ABVPxTransform@2@IAAVPxTriangle@2@PAI3@Z
??0RenderOutput@Cm@physx@@QAE@AAVRenderBuffer@12@@Z
??0Box@Gu@physx@@QAE@XZ
??1Box@Gu@physx@@QAE@XZ
?intersectOBBOBB@Gu@physx@@YA_NABVPxVec3@2@0ABVPxMat33@2@001_N@Z
?distanceSegmentBoxSquared@Gu@physx@@YAMABVPxVec3@2@000ABVPxMat33@2@PAMPAV32@@Z
?sweep@GeometryQuery@Gu@physx@@SA_NABVPxVec3@3@MABVPxGeometry@3@ABVPxTransform@3@IPBVPxTriangle@3@AAUPxSweepHit@3@V?$PxFlags@W4Enum@PxSceneQueryFlag@physx@@I@3@PBIM@Z
??0?$PxFlags@W4Enum@PxSerialFlag@physx@@G@physx@@QAE@W4Enum@PxSerialFlag@1@@Z
??0Thread@shdfnd@physx@@QAE@XZ
?quitIsSignalled@Thread@shdfnd@physx@@QAE_NXZ
?quit@Thread@shdfnd@physx@@QAEXXZ
?setAffinityMask@Thread@shdfnd@physx@@UAEII@Z
??1Thread@shdfnd@physx@@UAE@XZ
?wait@Sync@shdfnd@physx@@QAE_NI@Z
?findOverlapHeightField@PxMeshQuery@physx@@SAIABVPxGeometry@2@ABVPxTransform@2@ABVPxHeightFieldGeometry@2@1PAIIIAA_N@Z
?findOverlapTriangleMesh@PxMeshQuery@physx@@SAIABVPxGeometry@2@ABVPxTransform@2@ABVPxTriangleMeshGeometry@2@1PAIIIAA_N@Z
??0FPUGuard@shdfnd@physx@@QAE@XZ
??1FPUGuard@shdfnd@physx@@QAE@XZ
??0Sync@shdfnd@physx@@QAE@XZ
?getDefaultStackSize@Thread@shdfnd@physx@@SAIXZ
?start@Thread@shdfnd@physx@@QAEXI@Z
?setName@Thread@shdfnd@physx@@QAEXPBD@Z
?signalQuit@Thread@shdfnd@physx@@QAEXXZ
?waitForQuit@Thread@shdfnd@physx@@QAE_NXZ
??1Sync@shdfnd@physx@@QAE@XZ
?getSize@SListImpl@shdfnd@physx@@SAABIXZ
??0SListImpl@shdfnd@physx@@QAE@XZ
??1SListImpl@shdfnd@physx@@QAE@XZ
?pop@SListImpl@shdfnd@physx@@QAEPAVSListEntry@23@XZ
?push@SListImpl@shdfnd@physx@@QAEXPAVSListEntry@23@@Z
?reset@Sync@shdfnd@physx@@QAEXXZ
?set@Sync@shdfnd@physx@@QAEXXZ
?addToStringTable@Cm@physx@@YAIAAV?$Array@DV?$ReflectionAllocator@D@shdfnd@physx@@@shdfnd@2@PBD@Z
??I?$PxFlags@W4Enum@PxSerialFlag@physx@@G@physx@@QBE?AV01@W4Enum@PxSerialFlag@1@@Z
??B?$PxFlags@W4Enum@PxSerialFlag@physx@@G@physx@@QBE_NXZ
??0?$PxFlags@W4Enum@PxSerialFlag@physx@@G@physx@@QAE@ABV01@@Z
??0?$PxFlags@W4Enum@PxSerialFlag@physx@@G@physx@@QAE@XZ
??_4?$PxFlags@W4Enum@PxSerialFlag@physx@@G@physx@@QAEAAV01@ABV01@@Z
??S?$PxFlags@W4Enum@PxSerialFlag@physx@@G@physx@@QBE?AV01@XZ
?allocate@TempAllocator@shdfnd@physx@@QAEPAXIPBDH@Z
?PxDiagonalize@physx@@YA?AVPxVec3@1@ABVPxMat33@1@AAVPxQuat@1@@Z
?deallocate@TempAllocator@shdfnd@physx@@QAEXPAX@Z
?error@Foundation@shdfnd@physx@@QAAXW4Enum@PxErrorCode@3@PBDH1ZZ
?getInstance@Foundation@shdfnd@physx@@SAAAV123@XZ
?raycast_capsule@Gu@physx@@YAIABVPxGeometry@2@ABVPxTransform@2@ABVPxVec3@2@2MV?$PxFlags@W4Enum@PxSceneQueryFlag@physx@@I@2@IPIAUPxRaycastHit@2@_NP6A_NAAU72@PAX@Z7@Z
?raycast_box@Gu@physx@@YAIABVPxGeometry@2@ABVPxTransform@2@ABVPxVec3@2@2MV?$PxFlags@W4Enum@PxSceneQueryFlag@physx@@I@2@IPIAUPxRaycastHit@2@_NP6A_NAAU72@PAX@Z7@Z
??1MutexImpl@shdfnd@physx@@QAE@XZ
?lock@MutexImpl@shdfnd@physx@@QAE_NXZ
?unlock@MutexImpl@shdfnd@physx@@QAE_NXZ
??0MutexImpl@shdfnd@physx@@QAE@XZ
?getSize@MutexImpl@shdfnd@physx@@SAABIXZ
??6RenderOutput@Cm@physx@@QAEAAV012@ABVPxTransform@2@@Z
??6RenderOutput@Cm@physx@@QAEAAV012@I@Z
?outputCapsule@RenderOutput@Cm@physx@@QAEAAV123@MMABVMatrix34@23@@Z
??6Cm@physx@@YAAAVRenderOutput@01@AAV201@ABUDebugBox@01@@Z
??0SIMDGuard@shdfnd@physx@@QAE@XZ
??1SIMDGuard@shdfnd@physx@@QAE@XZ
?getAllocator@shdfnd@physx@@YAAAVPxAllocatorCallback@2@XZ
?getId@Thread@shdfnd@physx@@SAIXZ
?getCurrentCounterValue@Time@shdfnd@physx@@SA_KXZ
PxGetFoundation
PxCreateFoundation
?deallocate@Allocator@shdfnd@physx@@QAEXPAX@Z
?sweep@PxGeometryQuery@physx@@SA_NABVPxVec3@2@MABVPxGeometry@2@ABVPxTransform@2@12AAUPxSweepHit@2@V?$PxFlags@W4Enum@PxSceneQueryFlag@physx@@I@2@M@Z
?PxTransformFromSegment@physx@@YA?AVPxTransform@1@ABVPxVec3@1@0PAM@Z

ts3client_win32

ts3client_getErrorMessage
ts3client_openPlaybackDevice
ts3client_getDefaultPlaybackDevice
ts3client_destroyClientLib
ts3client_openCaptureDevice
ts3client_createIdentity
ts3client_getClientVariableAsString
ts3client_getClientID
ts3client_setPreProcessorConfigValue
ts3client_closeCaptureDevice
ts3client_getDefaultPlayBackMode
ts3client_channelset3DAttributes
ts3client_requestMuteClients
ts3client_getPlaybackDeviceList
ts3client_setClientSelfVariableAsInt
ts3client_initClientLib
ts3client_requestUnmuteClients
ts3client_getDefaultCaptureMode
ts3client_closePlaybackDevice
ts3client_flushClientSelfUpdates
ts3client_stopConnection
ts3client_getDefaultCaptureDevice
ts3client_startConnection
ts3client_systemset3DListenerAttributes
ts3client_spawnNewServerConnectionHandler
ts3client_getCaptureDeviceList
ts3client_destroyServerConnectionHandler
ts3client_setPlaybackConfigValue
ts3client_freeMemory

crashrpt1403

ord9
ord7
ord11
ord16
ord12
ord24

gdiplus

GdiplusStartup
GdipCloneImage
GdipGetImageEncoders
GdiplusShutdown
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipGetImageEncodersSize
GdipAlloc
GdipFree
GdipSaveImageToFile

libcurl

curl_slist_append
curl_easy_setopt
curl_easy_perform
curl_easy_strerror
curl_easy_cleanup
curl_global_init
curl_formadd
curl_formfree
curl_easy_init
curl_slist_free_all

bcrypt

BCryptGenRandom
BCryptOpenAlgorithmProvider
BCryptCloseAlgorithmProvider

dwmapi

DwmExtendFrameIntoClientArea

imm32

ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow

dinput8

DirectInput8Create

xinput1_3

ord2

oleaut32

SysAllocStringLen
SysStringLen
SysFreeString
SysAllocString

Exports

Exports

??0System@Scaleform@@QAE@ABUHeapDesc@MemoryHeap@1@PAVSysAllocBase@1@@Z
??0System@Scaleform@@QAE@PAVSysAllocBase@1@@Z
??1AcquireInterface@Scaleform@@UAE@XZ
??1DefaultAcquireInterface@Scaleform@@UAE@XZ
??1System@Scaleform@@QAE@XZ
??_FEvent@Scaleform@@QAEXXZ
??_FMutex@Scaleform@@QAEXXZ
??_FSemaphore@Scaleform@@QAEXXZ
??_FSysAllocPagedMalloc@Scaleform@@QAEXXZ
??_FSysAllocStatic@Scaleform@@QAEXXZ
??_FSysAllocWinAPI@Scaleform@@QAEXXZ
??_FSystem@Scaleform@@QAEXXZ
??_FThread@Scaleform@@QAEXXZ
?GetXScale@?$Matrix2x4@M@Render@Scaleform@@QBEMXZ
?GetYScale@?$Matrix2x4@M@Render@Scaleform@@QBEMXZ
?Init@System@GFx@Scaleform@@SAXPAVSysAllocBase@3@@Z
?Init@System@Scaleform@@SAXPAVSysAllocBase@2@@Z
?Prepend@?$Matrix2x4@M@Render@Scaleform@@QAEAAV123@ABV123@@Z
?SetIdentity@?$Matrix2x4@M@Render@Scaleform@@QAEXXZ
?SetIdentity@?$Matrix3x4@M@Render@Scaleform@@QAEXXZ
?SetIdentity@?$Matrix4x4@M@Render@Scaleform@@QAEXXZ

Sections

.text
Size: 8.3MB - Virtual size: 8.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 9.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata1
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 202KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 484KB - Virtual size: 483KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2e12b6779eeed49d6fbfa4c1cdcd08f5

Headers

DLL Characteristics

File Characteristics

Imports

winmm

ws2_32

d3dx9_43

d3d9

iphlpapi

crypt32

kernel32

user32

gdi32

advapi32

shell32

fmodex

fmod_event

fmod_event_net

physx3_x86

physx3cooking_x86

physx3common_x86

ts3client_win32

crashrpt1403

gdiplus

libcurl

bcrypt

dwmapi

imm32

dinput8

xinput1_3

oleaut32

Exports

Exports

Sections

.text Size: 8.3MB - Virtual size: 8.3MB

.rdata Size: 1.5MB - Virtual size: 1.5MB

.data Size: 1.1MB - Virtual size: 9.2MB

.sdata1 Size: 512B - Virtual size: 4B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 202KB - Virtual size: 201KB

.reloc Size: 484KB - Virtual size: 483KB

.text
Size: 8.3MB - Virtual size: 8.3MB

.rdata
Size: 1.5MB - Virtual size: 1.5MB

.data
Size: 1.1MB - Virtual size: 9.2MB

.sdata1
Size: 512B - Virtual size: 4B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 202KB - Virtual size: 201KB

.reloc
Size: 484KB - Virtual size: 483KB