DOOMEternalx64vk[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

DOOMEternalx64vk.exe
Size

428.9MB
MD5

0837596fa36a34dcbc97475bd3d27e70
SHA1

cb204c954347cb1ab510901f85f2eb358dd95010
SHA256

d8fcca64be903a17ce1c8df3dcad8b29b1d0db85f6ac11863ec6abb32b3f560b
SHA512

4c2630d5f7c724b333e50e4856742a36448547b8f46fbb866f71bb89132de9f318dd0b37cb585b2b0fdbcddb7774d3ac9b072148c05cd26633bd0fd3d04f58f9
SSDEEP

3145728:rKWAbwSMlEpTPubj8+yxrsM7yHjwdDP5Ffx2hQjKJffrQ8MneKY:bSItbobWFwdDP5FoQj2Q8MTY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DOOMEternalx64vk.exe

Files

DOOMEternalx64vk.exe
.exe windows x64

f4bf54c936b9112713b5dfd75ef58192

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

AdjustTokenPrivileges
GetUserNameW
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegCreateKeyA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegOpenKeyA
RegOpenKeyExA
RegOpenKeyExW
RegQueryValueExA
RegQueryValueExW
RegSetValueExA

bcrypt

BCryptCloseAlgorithmProvider
BCryptCreateHash
BCryptDecrypt
BCryptDestroyHash
BCryptDestroyKey
BCryptDuplicateHash
BCryptDuplicateKey
BCryptEncrypt
BCryptFinishHash
BCryptGenRandom
BCryptGenerateSymmetricKey
BCryptGetProperty
BCryptHashData
BCryptOpenAlgorithmProvider
BCryptSetProperty

bink2w64

BinkClose
BinkDoFrameAsync
BinkDoFrameAsyncWait
BinkGetError
BinkGetFrameBuffersInfo
BinkGetSummary
BinkGoto
BinkNextFrame
BinkOpen
BinkOpenWithOptions
BinkOpenXAudio2
BinkPause
BinkRequestStopAsyncThread
BinkService
BinkSetMemory
BinkSetSoundSystem2
BinkSetSoundTrack
BinkSetSpeakerVolumes
BinkSetVolume
BinkSetWillLoop
BinkShouldSkip
BinkStartAsyncThread
BinkWait
BinkWaitStopAsyncThread

dbghelp

MiniDumpWriteDump
StackWalk64
SymCleanup
SymFromAddr
SymFunctionTableAccess64
SymGetLineFromAddr64
SymGetModuleBase64
SymGetModuleInfo64
SymGetOptions
SymInitialize
SymRefreshModuleList
SymSetHomeDirectory
SymSetOptions
UnDecorateSymbolName

gdi32

BitBlt
CombineRgn
CopyMetaFileA
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
CreateDIBSection
CreateDIBitmap
CreateEllipticRgn
CreateFontA
CreateFontIndirectA
CreateHatchBrush
CreatePalette
CreatePatternBrush
CreatePen
CreatePolygonRgn
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreateSolidBrush
DPtoLP
DeleteDC
DeleteObject
Ellipse
EnumFontFamiliesA
EnumFontFamiliesExA
Escape
ExcludeClipRect
ExtFloodFill
ExtSelectClipRgn
ExtTextOutA
FillRgn
FrameRgn
GetBkColor
GetBoundsRect
GetClipBox
GetDeviceCaps
GetLayout
GetNearestPaletteIndex
GetObjectA
GetObjectType
GetPaletteEntries
GetPixel
GetRgnBox
GetStockObject
GetSystemPaletteEntries
GetTextCharsetInfo
GetTextColor
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextFaceA
GetTextMetricsA
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
IntersectClipRect
LPtoDP
LineTo
MoveToEx
OffsetRgn
OffsetViewportOrgEx
OffsetWindowOrgEx
PatBlt
Polygon
Polyline
PtInRegion
PtVisible
RealizePalette
RectVisible
Rectangle
RestoreDC
RoundRect
SaveDC
ScaleViewportExtEx
ScaleWindowExtEx
SelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetDIBColorTable
SetLayout
SetMapMode
SetPaletteEntries
SetPixel
SetPixelV
SetPolyFillMode
SetROP2
SetRectRgn
SetTextAlign
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
StretchBlt
TextOutA

gdiplus

GdipAlloc
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCloneImage
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipCreateFromHDC
GdipDeleteGraphics
GdipDisposeImage
GdipDrawImageI
GdipDrawImageRectI
GdipFree
GdipGetImageGraphicsContext
GdipGetImageHeight
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageWidth
GdipSetInterpolationMode
GdiplusShutdown
GdiplusStartup

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

iphlpapi

GetAdaptersInfo
GetBestInterface
GetAdaptersAddresses

kernel32

AcquireSRWLockExclusive
AcquireSRWLockShared
ActivateActCtx
AddVectoredExceptionHandler
AllocConsole
AssignProcessToJobObject
CancelIo
ChangeTimerQueueTimer
CloseHandle
CompareFileTime
CompareStringA
CompareStringW
ConnectNamedPipe
ConvertThreadToFiber
CopyFileA
CopyFileW
CreateActCtxW
CreateDirectoryW
CreateEventA
CreateEventW
CreateFileA
CreateFileMappingW
CreateFileW
CreateIoCompletionPort
CreateJobObjectA
CreateMutexA
CreateNamedPipeA
CreatePipe
CreateProcessA
CreateSemaphoreA
CreateSemaphoreW
CreateThread
CreateTimerQueue
CreateTimerQueueTimer
CreateToolhelp32Snapshot
CreateWaitableTimerA
DeactivateActCtx
DecodePointer
DeleteCriticalSection
DeleteFileW
DeleteProcThreadAttributeList
DeleteTimerQueueTimer
DuplicateHandle
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
ExitThread
FileTimeToDosDateTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FindActCtxSectionStringW
FindClose
FindFirstFileA
FindFirstFileExA
FindFirstFileExW
FindFirstFileW
FindNextFileA
FindNextFileW
FindResourceA
FindResourceExW
FindResourceW
FlushFileBuffers
FormatMessageA
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetComputerNameW
GetConsoleCP
GetConsoleMode
GetConsoleScreenBufferInfo
GetConsoleWindow
GetCurrentDirectoryA
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetDiskFreeSpaceA
GetDiskFreeSpaceExW
GetDriveTypeA
GetDriveTypeW
GetEnvironmentStringsW
GetEnvironmentVariableA
GetExitCodeProcess
GetExitCodeThread
GetFileAttributesA
GetFileAttributesExA
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileSize
GetFileSizeEx
GetFileTime
GetFileType
GetFullPathNameA
GetFullPathNameW
GetLargePageMinimum
GetLastError
GetLocalTime
GetLocaleInfoEx
GetLocaleInfoW
GetLogicalProcessorInformation
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetNumaHighestNodeNumber
GetOEMCP
GetOverlappedResult
GetProcAddress
GetProcessAffinityMask
GetProcessHeap
GetProcessId
GetProcessTimes
GetProfileIntA
GetQueuedCompletionStatus
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathA
GetThreadContext
GetThreadId
GetThreadPriority
GetThreadTimes
GetTickCount
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetUserDefaultUILanguage
GetVersionExA
GetVersionExW
GetVolumeInformationA
GetWindowsDirectoryA
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomA
GlobalFlags
GlobalFree
GlobalGetAtomNameA
GlobalHandle
GlobalLock
GlobalMemoryStatus
GlobalMemoryStatusEx
GlobalReAlloc
GlobalSize
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapQueryInformation
HeapReAlloc
HeapSetInformation
HeapSize
HeapWalk
InitializeConditionVariable
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeProcThreadAttributeList
InitializeSListHead
InitializeSRWLock
InterlockedFlushSList
InterlockedPopEntrySList
InterlockedPushEntrySList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
K32EnumProcessModules
K32EnumProcessModulesEx
K32EnumProcesses
K32GetModuleBaseNameA
K32GetProcessMemoryInfo
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LocalReAlloc
LockFile
LockFileEx
LockResource
MapViewOfFile
MoveFileExW
MulDiv
MultiByteToWideChar
OpenProcess
OpenThread
OutputDebugStringA
OutputDebugStringW
PeekNamedPipe
QueryActCtxW
QueryDepthSList
QueryPerformanceCounter
QueryPerformanceFrequency
QueryUnbiasedInterruptTime
QueueUserAPC
RaiseException
ReadConsoleW
ReadDirectoryChangesW
ReadFile
ReadFileScatter
RegisterWaitForSingleObject
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ReleaseSemaphore
RemoveDirectoryW
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SearchPathA
SetConsoleMode
SetConsoleScreenBufferSize
SetConsoleTitleA
SetEndOfFile
SetEnvironmentVariableA
SetEnvironmentVariableW
SetErrorMode
SetEvent
SetFileAttributesW
SetFilePointer
SetFilePointerEx
SetHandleInformation
SetInformationJobObject
SetLastError
SetPriorityClass
SetStdHandle
SetThreadAffinityMask
SetThreadContext
SetThreadGroupAffinity
SetThreadPriority
SetThreadPriorityBoost
SetUnhandledExceptionFilter
SetWaitableTimer
SignalObjectAndWait
SizeofResource
Sleep
SleepConditionVariableCS
SleepEx
SuspendThread
SwitchToThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TerminateThread
Thread32First
Thread32Next
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
TryEnterCriticalSection
UnhandledExceptionFilter
UnlockFile
UnlockFileEx
UnmapViewOfFile
UnregisterWait
UnregisterWaitEx
UpdateProcThreadAttribute
VerSetConditionMask
VerifyVersionInfoA
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForMultipleObjectsEx
WaitForSingleObject
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
__chkstk
lstrcatW
lstrcmpA
lstrcmpW
lstrcmpiA
lstrcpyA
lstrcpyW
lstrlenA
lstrlenW

msimg32

TransparentBlt
AlphaBlend

emp

EMP

ole32

CoCreateInstance
CoDisconnectObject
CoInitialize
CoInitializeEx
CoInitializeSecurity
CoLockObjectExternal
CoSetProxyBlanket
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CreateStreamOnHGlobal
DoDragDrop
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleDuplicateData
OleGetClipboard
OleLockRunning
OleTranslateAccelerator
RegisterDragDrop
ReleaseStgMedium
RevokeDragDrop

oleacc

CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow

oleaut32

VariantCopy
VarBstrFromDate
VariantChangeType
SysAllocStringByteLen
LoadTypeLi
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocString
SysAllocStringLen
SysFreeString
SysStringLen
VariantInit
VariantClear

oo2core_8_win64

OodleLZDecoder_Create
OodleLZDecoder_DecodeSome
OodleLZDecoder_Destroy
OodleLZDecoder_MemorySizeNeeded
OodleLZ_Compress
OodleLZ_Decompress
OodleLZ_GetCompressedBufferSizeNeeded
OodleLZ_GetCompressedStepForRawStep

shell32

CommandLineToArgvW
DragFinish
DragQueryFileA
SHAppBarMessage
SHBrowseForFolderA
SHGetDesktopFolder
SHGetFileInfoA
SHGetFolderPathW
SHGetKnownFolderPath
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ShellExecuteA
ShellExecuteW

shlwapi

PathFileExistsW
PathFindExtensionA
PathFindFileNameA
PathIsUNCA
PathRemoveFileSpecW
PathStripToRootA
StrFormatKBSizeA

steam_api64

SteamAPI_GetHSteamUser
SteamAPI_Init
SteamAPI_RegisterCallResult
SteamAPI_RegisterCallback
SteamAPI_RunCallbacks
SteamAPI_Shutdown
SteamAPI_UnregisterCallResult
SteamAPI_UnregisterCallback
SteamInternal_ContextInit
SteamInternal_CreateInterface
SteamInternal_FindOrCreateUserInterface

user32

AdjustWindowRect
AdjustWindowRectEx
AppendMenuA
AttachThreadInput
BeginDeferWindowPos
BeginPaint
BringWindowToTop
CallNextHookEx
CallWindowProcA
ChangeDisplaySettingsExA
CharUpperA
CharUpperBuffA
CheckDlgButton
CheckMenuItem
ClientToScreen
ClipCursor
CloseClipboard
CloseWindow
CopyAcceleratorTableA
CopyIcon
CopyImage
CopyRect
CreateAcceleratorTableA
CreateCursor
CreateDialogIndirectParamA
CreateMenu
CreatePopupMenu
CreateWindowExA
CreateWindowExW
DefFrameProcA
DefMDIChildProcA
DefWindowProcA
DefWindowProcW
DeferWindowPos
DeleteMenu
DestroyAcceleratorTable
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
DialogBoxParamA
DisableProcessWindowsGhosting
DispatchMessageA
DrawEdge
DrawFocusRect
DrawFrameControl
DrawIcon
DrawIconEx
DrawMenuBar
DrawStateA
DrawTextA
DrawTextExA
DrawTextW
EmptyClipboard
EnableMenuItem
EnableScrollBar
EnableWindow
EndDeferWindowPos
EndDialog
EndPaint
EnumDisplayMonitors
EnumDisplaySettingsA
EnumDisplaySettingsExA
EnumThreadWindows
EqualRect
FillRect
FrameRect
GetActiveWindow
GetAncestor
GetAsyncKeyState
GetCapture
GetClassInfoA
GetClassInfoExA
GetClassLongA
GetClassLongPtrA
GetClassNameA
GetClientRect
GetClipboardData
GetComboBoxInfo
GetCursorPos
GetDC
GetDesktopWindow
GetDlgCtrlID
GetDlgItem
GetDlgItemTextA
GetDoubleClickTime
GetFocus
GetForegroundWindow
GetIconInfo
GetKeyNameTextA
GetKeyState
GetKeyboardLayout
GetKeyboardState
GetLastActivePopup
GetMenu
GetMenuCheckMarkDimensions
GetMenuDefaultItem
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoA
GetMenuState
GetMenuStringA
GetMessageA
GetMessagePos
GetMessageTime
GetMonitorInfoA
GetNextDlgGroupItem
GetNextDlgTabItem
GetParent
GetPropA
GetRawInputData
GetScrollInfo
GetScrollPos
GetScrollRange
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetTopWindow
GetUpdateRect
GetWindow
GetWindowDC
GetWindowLongA
GetWindowLongPtrA
GetWindowPlacement
GetWindowRect
GetWindowRgn
GetWindowTextA
GetWindowTextLengthA
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
GrayStringA
HideCaret
InflateRect
InsertMenuA
InsertMenuItemA
IntersectRect
InvalidateRect
InvertRect
IsCharLowerA
IsChild
IsClipboardFormatAvailable
IsDialogMessageA
IsIconic
IsMenu
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowVisible
IsZoomed
KillTimer
LoadAcceleratorsA
LoadAcceleratorsW
LoadBitmapW
LoadCursorA
LoadCursorW
LoadIconA
LoadIconW
LoadImageA
LoadImageW
LoadMenuA
LoadMenuW
LockWindowUpdate
MapDialogRect
MapVirtualKeyA
MapVirtualKeyExA
MapWindowPoints
MessageBeep
MessageBoxA
MessageBoxW
ModifyMenuA
MonitorFromPoint
MonitorFromWindow
MoveWindow
NotifyWinEvent
OffsetRect
OpenClipboard
PeekMessageA
PostMessageA
PostQuitMessage
PostThreadMessageA
PtInRect
RealChildWindowFromPoint
RedrawWindow
RegisterClassA
RegisterClassExW
RegisterClassW
RegisterClipboardFormatA
RegisterDeviceNotificationA
RegisterRawInputDevices
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropA
ReuseDDElParam
ScreenToClient
ScrollWindow
SendDlgItemMessageA
SendMessageA
SetActiveWindow
SetCapture
SetClassLongPtrA
SetClipboardData
SetCursor
SetCursorPos
SetDlgItemTextA
SetFocus
SetForegroundWindow
SetLayeredWindowAttributes
SetMenu
SetMenuDefaultItem
SetMenuItemBitmaps
SetMenuItemInfoA
SetParent
SetPropA
SetRect
SetRectEmpty
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongA
SetWindowLongPtrA
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextA
SetWindowTextW
SetWindowsHookExA
ShowCursor
ShowOwnedPopups
ShowScrollBar
ShowWindow
SubtractRect
SystemParametersInfoA
TabbedTextOutA
ToAsciiEx
ToUnicode
TrackMouseEvent
TrackPopupMenu
TranslateAcceleratorA
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnionRect
UnpackDDElParam
UnregisterDeviceNotification
UpdateLayeredWindow
UpdateWindow
ValidateRect
WaitMessage
WinHelpA
WindowFromPoint
wsprintfA
wsprintfW

uxtheme

CloseThemeData
DrawThemeBackground
DrawThemeParentBackground
DrawThemeText
GetCurrentThemeName
GetThemeColor
GetThemePartSize
GetThemeSysColor
GetWindowTheme
IsAppThemed
IsThemeBackgroundPartiallyTransparent
OpenThemeData

vulkan-1

vkAcquireNextImageKHR
vkAllocateCommandBuffers
vkAllocateDescriptorSets
vkAllocateMemory
vkBeginCommandBuffer
vkBindBufferMemory
vkCmdBeginQuery
vkCmdBlitImage
vkCmdClearAttachments
vkCmdClearColorImage
vkCmdCopyBuffer
vkCmdCopyBufferToImage
vkCmdCopyImage
vkCmdCopyImageToBuffer
vkCmdCopyQueryPoolResults
vkCmdEndQuery
vkCmdPipelineBarrier
vkCmdResetQueryPool
vkCmdWriteTimestamp
vkCreateDevice
vkCreateInstance
vkCreateSwapchainKHR
vkCreateWin32SurfaceKHR
vkDestroyDevice
vkDestroyInstance
vkDestroySwapchainKHR
vkDeviceWaitIdle
vkEndCommandBuffer
vkEnumerateDeviceExtensionProperties
vkEnumerateInstanceExtensionProperties
vkEnumeratePhysicalDevices
vkFreeDescriptorSets
vkFreeMemory
vkGetBufferMemoryRequirements
vkGetDeviceProcAddr
vkGetDeviceQueue
vkGetFenceStatus
vkGetInstanceProcAddr
vkGetPhysicalDeviceFeatures2
vkGetPhysicalDeviceFormatProperties
vkGetPhysicalDeviceMemoryProperties
vkGetPhysicalDeviceProperties
vkGetPhysicalDeviceProperties2
vkGetPhysicalDeviceQueueFamilyProperties
vkGetPhysicalDeviceSurfaceCapabilitiesKHR
vkGetPhysicalDeviceSurfaceFormatsKHR
vkGetPhysicalDeviceSurfacePresentModesKHR
vkGetPhysicalDeviceSurfaceSupportKHR
vkGetQueryPoolResults
vkGetSwapchainImagesKHR
vkMapMemory
vkQueueBindSparse
vkQueuePresentKHR
vkQueueSubmit
vkResetDescriptorPool
vkResetFences
vkUnmapMemory
vkUpdateDescriptorSets
vkWaitForFences

winhttp

WinHttpAddRequestHeaders
WinHttpCheckPlatform
WinHttpCloseHandle
WinHttpConnect
WinHttpOpen
WinHttpOpenRequest
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpReadData
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpSetOption
WinHttpSetStatusCallback
WinHttpSetTimeouts
WinHttpWriteData

wininet

HttpOpenRequestA
HttpSendRequestA
InternetCloseHandle
InternetConnectA
InternetOpenA
InternetQueryOptionA
InternetReadFile
InternetSetOptionA

winmm

timeBeginPeriod
timeEndPeriod
timeGetTime
PlaySoundA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

ws2_32

inet_ntoa
gethostname
WSASendMsg
WSASocketW
freeaddrinfo
getaddrinfo
inet_ntop
inet_pton

wsock32

accept
ioctlsocket
WSAGetLastError
WSAStartup
WSACleanup
inet_ntoa
listen
ntohl
ntohs
__WSAFDIsSet
recv
recvfrom
select
send
bind
sendto
setsockopt
socket
closesocket
connect
gethostbyname
getsockname
htonl
htons

xinput1_3

ord3
ord2

Exports

Exports

NVSDK_NGX_Parameter_GetD
NVSDK_NGX_Parameter_GetD3d11Resource
NVSDK_NGX_Parameter_GetD3d12Resource
NVSDK_NGX_Parameter_GetF
NVSDK_NGX_Parameter_GetI
NVSDK_NGX_Parameter_GetUI
NVSDK_NGX_Parameter_GetULL
NVSDK_NGX_Parameter_GetVoidPointer
NVSDK_NGX_Parameter_SetD
NVSDK_NGX_Parameter_SetD3d11Resource
NVSDK_NGX_Parameter_SetD3d12Resource
NVSDK_NGX_Parameter_SetF
NVSDK_NGX_Parameter_SetI
NVSDK_NGX_Parameter_SetUI
NVSDK_NGX_Parameter_SetULL
NVSDK_NGX_Parameter_SetVoidPointer
NVSDK_NGX_VULKAN_AllocateParameters
NVSDK_NGX_VULKAN_CreateFeature
NVSDK_NGX_VULKAN_DestroyParameters
NVSDK_NGX_VULKAN_EvaluateFeature
NVSDK_NGX_VULKAN_EvaluateFeature_C
NVSDK_NGX_VULKAN_GetCapabilityParameters
NVSDK_NGX_VULKAN_GetParameters
NVSDK_NGX_VULKAN_GetScratchBufferSize
NVSDK_NGX_VULKAN_Init
NVSDK_NGX_VULKAN_ReleaseFeature
NVSDK_NGX_VULKAN_RequiredExtensions
NVSDK_NGX_VULKAN_Shutdown
g_pAKPluginList

Sections

.bss
Size: 41.0MB - Virtual size: 41.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.didata
Size: 14.1MB - Virtual size: 14.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.udata
Size: 9.6MB - Virtual size: 52.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xcode
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls$
Size: 71KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.trace
Size: 355.0MB - Virtual size: 355.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rodata
Size: 512B - Virtual size: 501B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xpdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sbss
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.srdata
Size: 512B - Virtual size: 5B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.shared
Size: 512B - Virtual size: 97B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sxdata
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f4bf54c936b9112713b5dfd75ef58192

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

bcrypt

bink2w64

dbghelp

gdi32

gdiplus

imm32

iphlpapi

kernel32

msimg32

emp

ole32

oleacc

oleaut32

oo2core_8_win64

shell32

shlwapi

steam_api64

user32

uxtheme

vulkan-1

winhttp

wininet

winmm

winspool.drv

ws2_32

wsock32

xinput1_3

Exports

Exports

Sections

.bss Size: 41.0MB - Virtual size: 41.0MB

.didata Size: 14.1MB - Virtual size: 14.1MB

.udata Size: 9.6MB - Virtual size: 52.1MB

.pdata Size: 2.3MB - Virtual size: 2.3MB

.xcode Size: 512B - Virtual size: 4KB

.tls$ Size: 71KB - Virtual size: 72KB

.trace Size: 355.0MB - Virtual size: 355.0MB

.00cfg Size: 37KB - Virtual size: 37KB

.rodata Size: 512B - Virtual size: 501B

.rsrc Size: 512B - Virtual size: 20B

.xpdata Size: 2KB - Virtual size: 1KB

.sbss Size: 13KB - Virtual size: 13KB

.rdata Size: 3KB - Virtual size: 3KB

.srdata Size: 512B - Virtual size: 5B

.shared Size: 512B - Virtual size: 97B

.text Size: 36KB - Virtual size: 36KB

.idata Size: 2.8MB - Virtual size: 2.8MB

.sxdata Size: 4.0MB - Virtual size: 4.0MB

.bss
Size: 41.0MB - Virtual size: 41.0MB

.didata
Size: 14.1MB - Virtual size: 14.1MB

.udata
Size: 9.6MB - Virtual size: 52.1MB

.pdata
Size: 2.3MB - Virtual size: 2.3MB

.xcode
Size: 512B - Virtual size: 4KB

.tls$
Size: 71KB - Virtual size: 72KB

.trace
Size: 355.0MB - Virtual size: 355.0MB

.00cfg
Size: 37KB - Virtual size: 37KB

.rodata
Size: 512B - Virtual size: 501B

.rsrc
Size: 512B - Virtual size: 20B

.xpdata
Size: 2KB - Virtual size: 1KB

.sbss
Size: 13KB - Virtual size: 13KB

.rdata
Size: 3KB - Virtual size: 3KB

.srdata
Size: 512B - Virtual size: 5B

.shared
Size: 512B - Virtual size: 97B

.text
Size: 36KB - Virtual size: 36KB

.idata
Size: 2.8MB - Virtual size: 2.8MB

.sxdata
Size: 4.0MB - Virtual size: 4.0MB