JustCause2[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

JustCause2.exe
Size

13.9MB
MD5

441dbce9a614e87e390906b57b5bb033
SHA1

fb3c6fc7ecd5af7fce4b60fb95f0f396fcccf1d3
SHA256

ec4dcb295470b7d2864e8b443071c745c6fd392897d501e4b588f666f142a2ea
SHA512

cbae3f935f12971a4a81ccb842e9c7b9970c937b5f6159481a2c30b88c2c866da211bf7b6d48e973abd61c6d2e195e3d6a1573c32509c0a9119ca87837597f89
SSDEEP

196608:xlXL3RPeUUKdntLPNTJdLBjwOUo9vpV3k9WEOdB6f/YA3d:xlXLhPeUfPhJdL+ApVU9Afqd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JustCause2.exe

Files

JustCause2.exe
.exe windows x86

3ff6a021d2e594442d4c10f4ca93362f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

steam_api

SteamAPI_WriteMiniDump
SteamAPI_SetMiniDumpComment
SteamAPI_Shutdown
SteamAPI_RegisterCallback
SteamAPI_RunCallbacks
SteamApps
SteamUtils
SteamClient
SteamAPI_Init
SteamFriends
SteamUserStats
SteamUser
SteamRemoteStorage
SteamAPI_RestartAppIfNecessary
SteamAPI_UnregisterCallback

kernel32

Thread32First
CreateToolhelp32Snapshot
GetCurrentProcessId
GlobalMemoryStatus
GetVersionExA
ReleaseMutex
WaitForSingleObject
GetLastError
CreateMutexA
CreateProcessW
LocalFree
FormatMessageW
OutputDebugStringA
SetThreadExecutionState
GlobalMemoryStatusEx
lstrcmpiA
GetLocalTime
FreeLibrary
GetProcAddress
LoadLibraryW
MultiByteToWideChar
VerifyVersionInfoA
VerSetConditionMask
SleepEx
GetCurrentDirectoryA
GetCommandLineA
FreeConsole
WriteConsoleA
GetStdHandle
AttachConsole
GetModuleFileNameW
GetCurrentDirectoryW
LoadLibraryA
SetUnhandledExceptionFilter
IsDebuggerPresent
SetEvent
InterlockedExchange
InterlockedCompareExchange
ExitProcess
HeapAlloc
HeapFree
GetProcessHeap
UnmapViewOfFile
CreateEventA
WriteFile
LockResource
LoadResource
SizeofResource
FindResourceW
GetConsoleWindow
GetEnvironmentStringsW
GetCommandLineW
GetStartupInfoW
GetModuleHandleA
SetLastError
ReleaseSemaphore
CreateFileA
InterlockedIncrement
GetModuleFileNameA
GetModuleHandleExA
MapViewOfFile
CreateFileMappingA
CreateSemaphoreA
CloseHandle
GetComputerNameA
GetSystemTime
FileTimeToSystemTime
GetSystemTimeAsFileTime
GetTickCount
GetFileInformationByHandle
lstrcmpiW
CreateFileW
lstrlenW
GetFullPathNameW
HeapSize
GetProcessTimes
GetCurrentProcess
GetFileTime
OpenFileMappingA
OpenEventA
GetSystemDirectoryW
GetWindowsDirectoryW
RaiseException
LeaveCriticalSection
GetFileSize
ReadFileEx
GetProcessAffinityMask
Sleep
SetThreadPriorityBoost
GetExitCodeThread
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
GetFileAttributesA
ReadFile
FormatMessageA
InterlockedExchangeAdd
SetThreadAffinityMask
SetThreadIdealProcessor
TlsSetValue
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
TlsAlloc
WaitForMultipleObjects
TlsFree
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SetThreadPriority
CreateThread
ResumeThread
ResetEvent
TlsGetValue
QueryPerformanceCounter
QueryPerformanceFrequency
FindClose
FindNextFileA
FindFirstFileA
OpenThread
SuspendThread
Thread32Next
GetCurrentThreadId
GetTimeZoneInformation
InterlockedDecrement
GetFullPathNameA
LocalAlloc

user32

PostMessageA
GetSystemMetrics
LoadIconA
RegisterClassExA
LoadCursorA
GetWindowLongA
SetWindowPos
SendMessageA
GetDC
ReleaseDC
ClientToScreen
ClipCursor
SetCursor
CreateWindowExA
AdjustWindowRect
DefWindowProcA
ValidateRect
PostQuitMessage
GetKeyState
ShowWindow
GetClientRect
GetCursorPos
SetCursorPos
SystemParametersInfoA
OpenDesktopA
EnumDesktopWindows
CloseDesktop
GetForegroundWindow
IsWindowVisible
EnableMenuItem
MessageBoxW
GetSystemMenu
DrawMenuBar
DispatchMessageA
PeekMessageA
TranslateMessage
ShowWindowAsync
MessageBoxA

advapi32

RegQueryValueExA
RegQueryValueExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegOpenKeyExW
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey

shell32

SHGetFolderPathA
SHGetFolderPathW

ole32

CoUninitialize
CoCreateInstance
CoInitialize
StringFromGUID2

oleaut32

SysFreeString
SysAllocString
VariantClear

msvcp80

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?allocate@?$allocator@D@std@@QAEPADI@Z
?deallocate@?$allocator@D@std@@QAEXPADI@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?construct@?$allocator@D@std@@QAEXPADABD@Z
?destroy@?$allocator@D@std@@QAEXPAD@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?push_back@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?_Xran@_String_base@std@@SAXXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V32@0@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IABV12@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?compare@?$char_traits@D@std@@SAHPBD0I@Z
?_Xlen@_String_base@std@@SAXXZ
??0?$allocator@D@std@@QAE@XZ
?max_size@?$allocator@D@std@@QBEIXZ
?assign@?$char_traits@D@std@@SAXAADABD@Z
?length@?$char_traits@D@std@@SAIPBD@Z
?_Throw@std@@YAXABVexception@stdext@@@Z
?_Raise_handler@std@@3P6AXABVexception@stdext@@@ZA
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z

msvcr80

_exit
fprintf
__iob_func
free
strcpy_s
malloc
memcpy
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
memmove_s
exit
wcsncpy
strncpy
__CxxFrameHandler3
fwrite
_wmkdir
fclose
fread
_wfopen
fflush
sscanf
atof
atoi
strchr
printf
strncmp
_vsnprintf
rand
__libm_sse2_atan2
_isnan
_localtime64
_time64
strftime
fopen
_CIpow
_CIacos
_CIasin
__libm_sse2_acos
__libm_sse2_asin
__libm_sse2_pow
__libm_sse2_exp
__libm_sse2_cos
__libm_sse2_sin
__libm_sse2_atan
ispunct
isspace
tolower
strpbrk
sprintf_s
memset
floor
memmove
_aligned_malloc
_aligned_free
ftell
fseek
isdigit
qsort
strtok
strrchr
_stat64i32
strncat
vfprintf
toupper
remove
_finite
_findfirst64i32
_findnext64i32
_findclose
_fileno
_mkdir
__libm_sse2_log10
vsprintf
_CIfmod
srand
feof
fscanf
modf
memcpy_s
_isatty
_wassert
_amsg_exit
__getmainargs
_cexit
_XcptFilter
_ismbblead
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
isalnum
_strnicmp
_stricmp
_snprintf
sprintf
_invalid_parameter_noinfo
_purecall
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
strstr
memchr
strtod
atol
fputs
isalpha
realloc
_CIsqrt
_CIatan2
vsprintf_s
_CIcos
_CIsin
strerror
_errno
ferror
isprint
ungetc
getc
fgets
_difftime64
_gmtime64
_mktime64
system
rename
tmpnam
getenv
clock
setlocale
_CItan
_CIatan
ceil
_CIlog
_CIlog10
_CIexp
frexp
ldexp
isxdigit
isupper
iscntrl
islower
strtoul
longjmp
_setjmp3
strcoll
strcspn
_ftime64
abort
calloc
?_open@@YAHPBDHH@Z
_ctime64
vprintf
putc
__libm_sse2_log

fmodex

?setOutput@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_OUTPUTTYPE@@@Z
?getCPUUsage@System@FMOD@@QAG?AW4FMOD_RESULT@@PAM000@Z
?getSoftwareChannels@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getSoundRAM@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH00@Z
?getMemoryInfo@System@FMOD@@QAG?AW4FMOD_RESULT@@IIPAI0@Z
?release@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?setScale@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_VECTOR@@@Z
?setRotation@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_VECTOR@@0@Z
?setPolygonAttributes@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@HMM_N@Z
?getNumPolygons@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?setActive@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?getBypass@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?setMix@DSPConnection@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setParameter@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HM@Z
?addDSP@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAVDSP@2@PAPAVDSPConnection@2@@Z
?disconnectAll@DSP@FMOD@@QAG?AW4FMOD_RESULT@@_N0@Z
?setBypass@DSP@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?setPosition@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_VECTOR@@@Z
?createDSPByType@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_DSP_TYPE@@PAPAVDSP@2@@Z
?release@DSP@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?addPolygon@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@MM_NHPBUFMOD_VECTOR@@PAH@Z
?createGeometry@System@FMOD@@QAG?AW4FMOD_RESULT@@HHPAPAVGeometry@2@@Z
FMOD_Memory_Initialize
FMOD_Memory_GetStats
FMOD_Debug_SetLevel
FMOD_File_SetDiskBusy
FMOD_File_GetDiskBusy
?release@Sound@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?getInfo@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PADPAIPAH22@Z
?getOpenState@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAW4FMOD_OPENSTATE@@PAIPA_N@Z
?getChannelsPlaying@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?setSoftwareFormat@System@FMOD@@QAG?AW4FMOD_RESULT@@HW4FMOD_SOUND_FORMAT@@HHW4FMOD_DSP_RESAMPLER@@@Z
?getDriverInfo@System@FMOD@@QAG?AW4FMOD_RESULT@@HPADHPAUFMOD_GUID@@@Z
?setDSPBufferSize@System@FMOD@@QAG?AW4FMOD_RESULT@@IH@Z
?setSpeakerMode@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_SPEAKERMODE@@@Z
?getDriverCaps@System@FMOD@@QAG?AW4FMOD_RESULT@@HPAIPAH1PAW4FMOD_SPEAKERMODE@@@Z
?createStream@System@FMOD@@QAG?AW4FMOD_RESULT@@PBDIPAUFMOD_CREATESOUNDEXINFO@@PAPAVSound@2@@Z
?setCallback@System@FMOD@@QAG?AW4FMOD_RESULT@@P6G?AW43@PAUFMOD_SYSTEM@@W4FMOD_SYSTEM_CALLBACKTYPE@@PAX2@Z@Z
?setAdvancedSettings@System@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_ADVANCEDSETTINGS@@@Z
?setSoftwareChannels@System@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?setHardwareChannels@System@FMOD@@QAG?AW4FMOD_RESULT@@HHHH@Z
?setStreamBufferSize@System@FMOD@@QAG?AW4FMOD_RESULT@@II@Z
?setGeometrySettings@System@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?getSpeakerMode@System@FMOD@@QAG?AW4FMOD_RESULT@@PAW4FMOD_SPEAKERMODE@@@Z
?getVersion@System@FMOD@@QAG?AW4FMOD_RESULT@@PAI@Z
?setFileSystem@System@FMOD@@QAG?AW4FMOD_RESULT@@P6G?AW43@PBDHPAIPAPAX2@ZP6G?AW43@PAX4@ZP6G?AW43@44I14@ZP6G?AW43@4I4@ZH@Z
?createSound@System@FMOD@@QAG?AW4FMOD_RESULT@@PBDIPAUFMOD_CREATESOUNDEXINFO@@PAPAVSound@2@@Z
?getNumDrivers@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?overridePan@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?attachFileSystem@System@FMOD@@QAG?AW4FMOD_RESULT@@P6G?AW43@PBDHPAIPAPAX2@ZP6G?AW43@PAX4@ZP6G?AW43@44I14@ZP6G?AW43@4I4@Z@Z
?getSubSound@Sound@FMOD@@QAG?AW4FMOD_RESULT@@HPAPAV12@@Z

fmod_event

?setCallback@Event@FMOD@@QAG?AW4FMOD_RESULT@@P6G?AW43@PAUFMOD_EVENT@@W4FMOD_EVENT_CALLBACKTYPE@@PAX22@Z2@Z
?getChannelGroup@Event@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVChannelGroup@2@@Z
?setPropertyByIndex@Event@FMOD@@QAG?AW4FMOD_RESULT@@HPAX_N@Z
?getState@Event@FMOD@@QAG?AW4FMOD_RESULT@@PAI@Z
?setValue@EventParameter@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?keyOff@EventParameter@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?getInfo@EventParameter@FMOD@@QAG?AW4FMOD_RESULT@@PAHPAPAD@Z
?getParameter@Event@FMOD@@QAG?AW4FMOD_RESULT@@PBDPAPAVEventParameter@2@@Z
?getParameterByIndex@Event@FMOD@@QAG?AW4FMOD_RESULT@@HPAPAVEventParameter@2@@Z
?getValue@EventParameter@FMOD@@QAG?AW4FMOD_RESULT@@PAM@Z
?getNumParameters@Event@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getRange@EventParameter@FMOD@@QAG?AW4FMOD_RESULT@@PAM0@Z
?setPaused@Event@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?setVolume@Event@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?start@Event@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?set3DAttributes@Event@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_VECTOR@@00@Z
?getInfo@Event@FMOD@@QAG?AW4FMOD_RESULT@@PAHPAPADPAUFMOD_EVENT_INFO@@@Z
?stop@Event@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
_FMOD_EventSystem_Create@4
?getPropertyByIndex@Event@FMOD@@QAG?AW4FMOD_RESULT@@HPAX_N@Z

cudart

cudaLaunch
cudaUnbindTexture
cudaBindTexture2D
__cudaUnregisterFatBinary
cudaCreateChannelDesc
cudaD3D10SetDirect3DDevice
cudaD3D10UnmapResources
cudaSetupArgument
cudaD3D10ResourceGetMappedPointer
cudaD3D10ResourceGetMappedPitch
cudaD3D10UnregisterResource
cudaD3D10ResourceSetMapFlags
cudaD3D10RegisterResource
cudaD3D10GetDevice
cudaGetLastError
cudaGetDeviceProperties
cudaD3D9MapResources
cudaD3D9ResourceGetMappedPointer
cudaD3D9UnmapResources
cudaMemcpyAsync
cudaEventRecord
cudaFreeHost
__cudaRegisterVar
__cudaRegisterTexture
__cudaRegisterFunction
__cudaRegisterFatBinary
cudaEventDestroy
cudaConfigureCall
cudaEventQuery
cudaEventSynchronize
cudaMemcpy
cudaFree
cudaMemset
cudaEventCreate
cudaMallocHost
cudaMalloc
cudaD3D9RegisterResource
cudaD3D9UnregisterResource
cudaD3D10MapResources

d3d9

D3DPERF_SetOptions

dinput8

DirectInput8Create

xinput1_3

ord2
ord3

winmm

timeEndPeriod
timeBeginPeriod
timeGetTime

gdi32

CreateDCA
DeleteDC
SetDeviceGammaRamp
DeleteObject
ExtEscape

ws2_32

htonl
ntohs
gethostbyname
ntohl
select
__WSAFDIsSet
accept
recv
shutdown
closesocket
socket
ioctlsocket
inet_addr
htons
connect
WSAGetLastError
bind
listen
WSAStartup
WSACleanup
setsockopt
WSAAsyncSelect
send
gethostname
inet_ntoa

cufft

cufftDestroy
cufftPlan2d
cufftExecC2R

Exports

Exports

??4_Init_locks@std@@QAEAAV01@ABV01@@Z
_MD2_Final@8
_MD2_Init@4
_MD2_Update@12
_MD5_Final@8
_MD5_Init@4
_MD5_Update@12
_RNG_initialize@8
_RNG_terminate@0
_ax_calloc@8
_ax_malloc@4
_ax_open@8
_ax_realloc@8
_base64_decode@16
_get_random@8
_getdomainname@8
_gettimeofday@8
_ssl_client_new@16
_ssl_ctx_free@4
_ssl_ctx_new@8
_ssl_display_error@4
_ssl_find@8
_ssl_free@4
_ssl_get_cert_dn@8
_ssl_get_cipher_id@4
_ssl_get_config@4
_ssl_get_session_id@4
_ssl_get_session_id_size@4
_ssl_handshake_status@4
_ssl_obj_load@16
_ssl_obj_memory_load@20
_ssl_read@8
_ssl_renegotiate@4
_ssl_server_new@8
_ssl_verify_cert@4
_ssl_version@0
_ssl_write@12
_strcasecmp@8
print_blob

Sections

.text
Size: 9.6MB - Virtual size: 9.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.2MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.version
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 25B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nvFatBi
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 317KB - Virtual size: 317KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ff6a021d2e594442d4c10f4ca93362f

Headers

File Characteristics

Imports

steam_api

kernel32

user32

advapi32

shell32

ole32

oleaut32

msvcp80

msvcr80

fmodex

fmod_event

cudart

d3d9

dinput8

xinput1_3

winmm

gdi32

ws2_32

cufft

Exports

Exports

Sections

.text Size: 9.6MB - Virtual size: 9.6MB

.rdata Size: 2.8MB - Virtual size: 2.8MB

.data Size: 1.2MB - Virtual size: 4.1MB

.version Size: 512B - Virtual size: 4B

.tls Size: 512B - Virtual size: 25B

.nvFatBi Size: 512B - Virtual size: 120B

.rsrc Size: 317KB - Virtual size: 317KB

.text
Size: 9.6MB - Virtual size: 9.6MB

.rdata
Size: 2.8MB - Virtual size: 2.8MB

.data
Size: 1.2MB - Virtual size: 4.1MB

.version
Size: 512B - Virtual size: 4B

.tls
Size: 512B - Virtual size: 25B

.nvFatBi
Size: 512B - Virtual size: 120B

.rsrc
Size: 317KB - Virtual size: 317KB