8357e698d01874fe1cbd2df0f5e8f7eb6cb7c591d550750798608806af08615a

Sharing

Copy URL Twitter E-mail

General

Target

8357e698d01874fe1cbd2df0f5e8f7eb6cb7c591d550750798608806af08615a
Size

5.7MB
MD5

455fff2f8482c9c64fde90c205d2e853
SHA1

1cf0f4a0c96087c8b738ddb9b183c049da2be098
SHA256

8357e698d01874fe1cbd2df0f5e8f7eb6cb7c591d550750798608806af08615a
SHA512

89bb93a7ca5349d97ce7ebdd5ce3d0c924dfd8dae6d32668fa017786835d5aa56af8ca9871ffd155a7bde4f69cfebdc36f21ecdf431ab130156ec51342aad3e6
SSDEEP

98304:Xa3SkoMGlxqz8mjUsBBJ7ITcsMxn+xstdQ:qmlxqz8mjUuBNsMxn+aH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8357e698d01874fe1cbd2df0f5e8f7eb6cb7c591d550750798608806af08615a

Files

8357e698d01874fe1cbd2df0f5e8f7eb6cb7c591d550750798608806af08615a
.dll windows x86

3dee42f049c08a63fdbfd48dd31bf93c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

select
inet_addr
htons
sendto
socket
setsockopt
listen
connect
closesocket
bind
accept
WSASetLastError
send
recv
getnameinfo
freeaddrinfo
getaddrinfo
WSAGetLastError
gethostbyname
ntohs
getsockopt
getsockname
ioctlsocket
WSACleanup
WSAStartup
WSAPoll
WSASendTo
WSASend
WSARecvFrom
WSARecv
getpeername
ntohl
getservbyname
inet_pton
inet_ntop
gethostname
recvfrom
htonl
inet_ntoa
shutdown

iphlpapi

GetIpAddrTable
GetAdaptersAddresses
GetBestRoute

crypt32

CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CertGetCertificateContextProperty

kernel32

LoadLibraryA
FreeLibrary
GetCurrentProcess
GetUserDefaultLocaleName
GetModuleHandleA
GetVersion
MultiByteToWideChar
GetLastError
OutputDebugStringW
CloseHandle
GetProcAddress
WideCharToMultiByte
OutputDebugStringA
Sleep
CreateMutexW
ExitProcess
SetEnvironmentVariableA
GetEnvironmentVariableA
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetSystemTimeAsFileTime
CreateDirectoryW
GetFileAttributesW
FindClose
FindFirstFileW
FindNextFileW
GetEnvironmentVariableW
SetEnvironmentVariableW
GetSystemInfo
GetVersionExA
SetEvent
ResetEvent
ReleaseMutex
WaitForSingleObject
CreateEventW
WaitForMultipleObjects
SetLastError
GetModuleHandleExW
GetStdHandle
GetFileType
WriteFile
GetModuleHandleW
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SwitchToFiber
DeleteFiber
CreateFiber
QueryPerformanceCounter
GetCurrentProcessId
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
ConvertFiberToThread
ConvertThreadToFiber
LoadLibraryW
GetSystemTime
SystemTimeToFileTime
GetTickCount
CreateProcessW
OpenProcess
lstrcmpiW
K32EnumProcesses
K32GetModuleBaseNameW
TerminateProcess
VirtualProtect
VirtualQuery
LoadLibraryExA
WaitForSingleObjectEx
InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
EnterCriticalSection
GetCommandLineA
IsDebuggerPresent
SetConsoleTextAttribute
QueryPerformanceFrequency
SetThreadPriority
InitializeCriticalSection
CreateEventA
RaiseException
LoadLibraryExW
LeaveCriticalSection

user32

GetUserObjectInformationW
GetProcessWindowStation
MessageBoxA
MessageBoxW

advapi32

RegOpenKeyExW
MapGenericMask
DuplicateToken
RegQueryValueExW
GetFileSecurityW
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
CryptAcquireContextW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
AccessCheck
OpenProcessToken
GetUserNameW

shell32

SHGetFolderPathW
ShellExecuteA

ole32

CoInitializeEx
CoTaskMemFree
CoUninitialize

msvcp140

?classic@locale@std@@SAABV12@XZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?id@?$ctype@D@std@@2V0locale@2@A
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?_Xinvalid_argument@std@@YAXPBD@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
_Cnd_signal
?_Throw_Cpp_error@std@@YAXH@Z
?_Throw_C_error@std@@YAXH@Z
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_init_in_situ
_Cnd_do_broadcast_at_thread_exit
_Cnd_destroy
_Thrd_sleep
_Cnd_wait
_Mtx_init
_Thrd_start
_Thrd_id
_Xtime_get_ticks
_Mtx_destroy
_Cnd_init
_Thrd_join
_Mtx_unlock
?_Xbad_function_call@std@@YAXXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Random_device@std@@YAIXZ
?_Xbad_alloc@std@@YAXXZ
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_Schedule_chore@details@Concurrency@@YAHPAU_Threadpool_chore@12@@Z
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QAEX_N@Z
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AAEXXZ
?_Capture@_ContextCallback@details@Concurrency@@AAEXXZ
?_Reset@_ContextCallback@details@Concurrency@@AAEXXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QBEXV?$function@$$A6AXXZ@std@@_N@Z
??0task_continuation_context@Concurrency@@AAE@XZ
_Mtx_current_owns
_Cnd_unregister_at_thread_exit
?__ExceptionPtrCreate@@YAXPAX@Z
_Cnd_init_in_situ
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?_Throw_future_error@std@@YAXABVerror_code@1@@Z
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?_XGetLastError@std@@YAXXZ
?_Syserror_map@std@@YAPBDH@Z
_Cnd_timedwait
?__ExceptionPtrToBool@@YA_NPBX@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrRethrow@@YAXPBX@Z
_Cnd_register_at_thread_exit
_Cnd_broadcast
_Cnd_destroy_in_situ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?pubsync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@AAD@Z
?putback@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
_Query_perf_counter
_Query_perf_frequency
_Mtx_trylock
_Thrd_yield
?uncaught_exceptions@std@@YAHXZ
?_BADOFF@std@@3_JB
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??Bid@locale@std@@QAEIXZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Release_chore@details@Concurrency@@YAXPAU_Threadpool_chore@12@@Z

vcruntime140

memmove
memcpy
_CxxThrowException
__std_type_info_compare
__std_exception_copy
__std_type_info_name
strstr
__std_terminate
_purecall
__CxxFrameHandler3
memset
memchr
_except_handler4_common
__RTDynamicCast
__RTtypeid
strchr
strrchr
wcsstr
__std_type_info_destroy_list
__std_exception_destroy

api-ms-win-crt-runtime-l1-1-0

perror
signal
_beginthreadex
_wassert
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
strerror_s
_register_onexit_function
_errno
raise
_initialize_onexit_table
_initialize_narrow_environment
terminate
_exit
_configure_narrow_argv
exit
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_invalid_parameter_noinfo

api-ms-win-crt-stdio-l1-1-0

fputs
__stdio_common_vsnprintf_s
fclose
_wfopen
fgets
feof
fwrite
fseek
fflush
ferror
ftell
__stdio_common_vsprintf
__stdio_common_vsprintf_s
__stdio_common_vfprintf_s
__acrt_iob_func
_fileno
__stdio_common_vfprintf
_setmode
__stdio_common_vswprintf
__stdio_common_vsscanf
__stdio_common_vswprintf_s
fopen
fread

api-ms-win-crt-string-l1-1-0

toupper
strncpy
tolower
strcmp
_stricmp
isxdigit
_memicmp
isspace
strncmp
_strnicmp
strncpy_s
isdigit
towupper
strcspn
strspn
towlower
_strdup

api-ms-win-crt-heap-l1-1-0

_callnewh
_aligned_malloc
_aligned_free
calloc
malloc
free
realloc

api-ms-win-crt-convert-l1-1-0

strtol
strtoull
strtoll
strtoul
strtod
strtof
_itoa_s
atoi
_itoa

api-ms-win-crt-time-l1-1-0

_localtime64
strftime
_time32
_time64
_gmtime32_s

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-filesystem-l1-1-0

_stat32
_wsplitpath_s

api-ms-win-crt-math-l1-1-0

_except1
_copysign
floor

Exports

Exports

GetDenuvoTicketLocation
GetDenuvoTimeTicketRequest
SW_CCSys_CreateInternalModule
SW_CCSys_GetPInterface
SW_CCSys_GetUInterface
THQNO_APIResultToString
THQNO_Activity
THQNO_Apps
THQNO_AutomatchmakingPlayerEntry_AddOption
THQNO_AutomatchmakingPlayerEntry_AddOptionArray
THQNO_AutomatchmakingPlayerEntry_ClearOptions
THQNO_AutomatchmakingPlayerEntry_Create
THQNO_AutomatchmakingPlayerEntry_CreateCopy
THQNO_AutomatchmakingPlayerEntry_Destroy
THQNO_AutomatchmakingPlayerEntry_GetConnectionInfo
THQNO_AutomatchmakingPlayerEntry_GetInitiallyPassedMatchingSeconds
THQNO_AutomatchmakingPlayerEntry_GetOptions
THQNO_AutomatchmakingPlayerEntry_GetScoreName
THQNO_AutomatchmakingPlayerEntry_SetConnectionInfo
THQNO_AutomatchmakingPlayerEntry_SetInitiallyPassedMatchingSeconds
THQNO_AutomatchmakingPlayerEntry_SetScoreName
THQNO_Chat
THQNO_Content
THQNO_ExtMatchmaking
THQNO_Friends
THQNO_GameLobbyId_Create
THQNO_GameLobbyId_CreateCopy
THQNO_GameLobbyId_CreateInvalid
THQNO_GameLobbyId_CreateWithType
THQNO_GameLobbyId_Destroy
THQNO_GameLobbyId_FromString
THQNO_GameLobbyId_GetNumberPart
THQNO_GameLobbyId_GetStringPart
THQNO_GameLobbyId_GetType
THQNO_GameLobbyId_GetVersion
THQNO_GameLobbyId_IsValid
THQNO_GameLobbyId_ToString
THQNO_GetCurrentBetaName
THQNO_Init
THQNO_IsDefined
THQNO_JSON_Create
THQNO_JSON_CreateCopy
THQNO_JSON_Destroy
THQNO_JSON_Empty
THQNO_JSON_GetArrayBool
THQNO_JSON_GetArrayF32
THQNO_JSON_GetArrayF64
THQNO_JSON_GetArrayLength
THQNO_JSON_GetArrayS32
THQNO_JSON_GetArrayS64
THQNO_JSON_GetArrayString
THQNO_JSON_GetArrayU32
THQNO_JSON_GetArrayU64
THQNO_JSON_GetBool
THQNO_JSON_GetF32
THQNO_JSON_GetF64
THQNO_JSON_GetS32
THQNO_JSON_GetS64
THQNO_JSON_GetString
THQNO_JSON_GetU32
THQNO_JSON_GetU64
THQNO_LeaderboardEntry_Create
THQNO_LeaderboardEntry_CreateCopy
THQNO_LeaderboardEntry_CreateInvalid
THQNO_LeaderboardEntry_Destroy
THQNO_LeaderboardEntry_GetAdditonalData
THQNO_LeaderboardEntry_GetRank
THQNO_LeaderboardEntry_GetScore
THQNO_LeaderboardEntry_GetScoreName
THQNO_LeaderboardEntry_GetScoresNum
THQNO_LeaderboardEntry_GetSortMode
THQNO_LeaderboardEntry_GetUserId
THQNO_LeaderboardEntry_HasScore
THQNO_Leaderboard_Create
THQNO_Leaderboard_CreateCopy
THQNO_Leaderboard_CreateInvalid
THQNO_Leaderboard_Destroy
THQNO_Leaderboard_GetName
THQNO_Leaderboard_GetSortMode
THQNO_Leaderboard_IsValid
THQNO_Leaderboard_SetAdditonalData
THQNO_Leaderboard_SetScore
THQNO_MatchId_Create
THQNO_MatchId_CreateCopy
THQNO_MatchId_CreateInvalid
THQNO_MatchId_CreateNative
THQNO_MatchId_Destroy
THQNO_MatchId_FromString
THQNO_MatchId_GetNumberPart
THQNO_MatchId_IsValid
THQNO_MatchId_ToString
THQNO_MatchInitData_Create
THQNO_MatchInitData_CreateCopy
THQNO_MatchInitData_Destroy
THQNO_MatchInitData_FromJSONString
THQNO_MatchInitData_GetBackendConnectionInfo
THQNO_MatchInitData_GetConnection
THQNO_MatchInitData_GetFixedOptions
THQNO_MatchInitData_GetMatchingMode
THQNO_MatchInitData_GetPlayerEntriesNum
THQNO_MatchInitData_GetPlayer_Entry_ByIndex
THQNO_MatchInitData_GetPlayer_UserId
THQNO_MatchInitData_GetTeamMember_UserId
THQNO_MatchInitData_GetTeamMembersNum
THQNO_MatchInitData_GetTeamsNum
THQNO_MatchInitData_ToJSONString
THQNO_MatchRecordsRequest_AddScoreName
THQNO_MatchRecordsRequest_Create
THQNO_MatchRecordsRequest_CreateCopy
THQNO_MatchRecordsRequest_Destroy
THQNO_MatchRecordsResponse_Create
THQNO_MatchRecordsResponse_CreateCopy
THQNO_MatchRecordsResponse_Destroy
THQNO_MatchRecordsResponse_GetEntryNumRecords
THQNO_MatchRecordsResponse_GetEntryRecordOutcomes
THQNO_MatchRecordsResponse_GetEntryRecordScoreName
THQNO_MatchRecordsResponse_GetEntryUserId
THQNO_MatchRecordsResponse_GetNumEntries
THQNO_MatchResultReport_Create
THQNO_MatchResultReport_CreateCopy
THQNO_MatchResultReport_Destroy
THQNO_MatchResultReport_GetOutcome
THQNO_MatchResultReport_SetOutcome
THQNO_MatchResultReport_SetVariableF64
THQNO_MatchResultReport_SetVariableS64
THQNO_MatchResult_Create
THQNO_MatchResult_CreateCopy
THQNO_MatchResult_Destroy
THQNO_MatchResult_GetMatchResult
THQNO_MatchResult_GetMatchResultState
THQNO_MatchScoresRequest_AddScoreName
THQNO_MatchScoresRequest_Create
THQNO_MatchScoresRequest_CreateCopy
THQNO_MatchScoresRequest_Destroy
THQNO_MatchScoresResponse_Create
THQNO_MatchScoresResponse_CreateCopy
THQNO_MatchScoresResponse_Destroy
THQNO_MatchScoresResponse_GetEntryNumScores
THQNO_MatchScoresResponse_GetEntryScoreName
THQNO_MatchScoresResponse_GetEntryScoresEloScore
THQNO_MatchScoresResponse_GetEntryUserId
THQNO_MatchScoresResponse_GetNumEntries
THQNO_Matchmaking
THQNO_Networking
THQNO_Overlay_DisableEpicAccountControl
THQNO_Overlay_EnableEpicAccountControl
THQNO_Overlay_Initialize
THQNO_Platform
THQNO_PlayerDataGetPersonalDataResponse_Create
THQNO_PlayerDataGetPersonalDataResponse_CreateCopy
THQNO_PlayerDataGetPersonalDataResponse_CreateInvalid
THQNO_PlayerDataGetPersonalDataResponse_Destroy
THQNO_PlayerDataGetPersonalDataResponse_GetPlayerName
THQNO_PlayerDataGetPersonalDataResponse_GetResultNum
THQNO_PlayerDataGetPersonalDataResponse_GetUserId
THQNO_PlayerStat_Create
THQNO_PlayerStat_CreateCopy
THQNO_PlayerStat_Destroy
THQNO_PlayerStat_GetAdditionalData
THQNO_PlayerStat_GetFloat
THQNO_PlayerStat_GetInt
THQNO_PlayerStat_GetMovingAvg
THQNO_PlayerStat_GetType
THQNO_PlayerStatsRequest_AddStatName
THQNO_PlayerStatsRequest_Create
THQNO_PlayerStatsRequest_CreateCopy
THQNO_PlayerStatsRequest_Destroy
THQNO_PlayerStatsResponse_Create
THQNO_PlayerStatsResponse_CreateCopy
THQNO_PlayerStatsResponse_Destroy
THQNO_PlayerStatsResponse_GetEntryNumStats
THQNO_PlayerStatsResponse_GetEntryUserId
THQNO_PlayerStatsResponse_GetNumEntries
THQNO_PlayerStatsResponse_GetStat
THQNO_Process
THQNO_ProjectDocumentsRequest_AddEntry
THQNO_ProjectDocumentsRequest_Clear
THQNO_ProjectDocumentsRequest_Create
THQNO_ProjectDocumentsRequest_CreateCopy
THQNO_ProjectDocumentsRequest_Destroy
THQNO_ProjectDocumentsRequest_GetEntriesNum
THQNO_ProjectDocumentsRequest_GetEntryName
THQNO_ProjectDocumentsRequest_SetHash
THQNO_ProjectDocumentsRequest_SetMode
THQNO_ProjectDocumentsResponse_AddEntry
THQNO_ProjectDocumentsResponse_Create
THQNO_ProjectDocumentsResponse_CreateCopy
THQNO_ProjectDocumentsResponse_Destroy
THQNO_ProjectDocumentsResponse_GetEntriesNum
THQNO_ProjectDocumentsResponse_GetEntry
THQNO_ProjectDocumentsResponse_GetEntryState
THQNO_RegisterCallback
THQNO_RestartAppIfNecessary
THQNO_Shutdown
THQNO_Stats
THQNO_UnregisterCallback
THQNO_User
THQNO_UserId_Create
THQNO_UserId_CreateCopy
THQNO_UserId_CreateInvalid
THQNO_UserId_CreateWithType
THQNO_UserId_Destroy
THQNO_UserId_FromString
THQNO_UserId_GetNumberPart
THQNO_UserId_GetType
THQNO_UserId_GetVersion
THQNO_UserId_IsValid
THQNO_UserId_ToString
THQNO_Utils

Sections

.text
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 233KB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 254KB - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3dee42f049c08a63fdbfd48dd31bf93c

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

iphlpapi

crypt32

kernel32

user32

advapi32

shell32

ole32

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 4.1MB - Virtual size: 4.1MB

.rdata Size: 1.1MB - Virtual size: 1.1MB

.data Size: 233KB - Virtual size: 2.4MB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 254KB - Virtual size: 253KB

.text
Size: 4.1MB - Virtual size: 4.1MB

.rdata
Size: 1.1MB - Virtual size: 1.1MB

.data
Size: 233KB - Virtual size: 2.4MB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 254KB - Virtual size: 253KB