df-connected-v2[.]7[.]7-windows[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

df-connected-v2.7.7-windows.zip
Size

189.3MB
MD5

b865cb83dbc7cbe0ffd4a6c1d31136c0
SHA1

358c1737282e2dfe05101bb5fb5b42fde19a8322
SHA256

c07ef583f1a57110c0981eacf196d8c485258769c1927b88b3f2ad7b6b220c54
SHA512

64d65d65d4e54c6340690f2d9a48c29a9b32588cc520377e70a043a5b164a6ed5176191847ef8d44f20436a2bc9048fd7669bfc074707b5be2f6298b875ada02
SSDEEP

3145728:FLnkYNhZSi3soWAvqCR26ru8U1qg6B3SU++Yj8zCX4BeeX/UUkE:FLRntWA0ge1qg9j+Yj8zCGeIJJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 5 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DF CONNECTED v2.7.7 (Windows)/DF CONNECTED v2.7.7.exe
unpack001/DF CONNECTED v2.7.7 (Windows)/Dll.dll
unpack001/DF CONNECTED v2.7.7 (Windows)/execute_shell_simple.dll
unpack001/DF CONNECTED v2.7.7 (Windows)/expr.dll
unpack001/DF CONNECTED v2.7.7 (Windows)/rousrDissonance.dll

Files

df-connected-v2.7.7-windows.zip
.zip
DF CONNECTED v2.7.7 (Windows)/D3DX9_43.dll
.dll windows:6 windows x86

5fb75b2a87c1fa7cc3d7904a0b97084a

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

9b:28:ef:17:5d:cd:b3:d3:ec:10:d1:6d:64:92:d2:24:02:c3:2b:3e
Signer

Actual PE Digest

9b:28:ef:17:5d:cd:b3:d3:ec:10:d1:6d:64:92:d2:24:02:c3:2b:3e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_isatty
_write
_lseeki64
__pioinfo
__badioinfo
wctomb
_itoa
_snprintf
_fileno
isleadbyte
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
_amsg_exit
_initterm
_XcptFilter
srand
strtod
fread
fflush
fwrite
abort
_tempnam
exit
isalpha
atof
atol
isxdigit
_ultoa
wcstombs
_CIexp
_isnan
rand
atoi
isalnum
floor
_strtime
_strdate
sscanf
isspace
isdigit
_setjmp3
longjmp
ldexp
frexp
calloc
realloc
_CIlog
setlocale
_strdup
free
_clearfp
ceil
_controlfp
malloc
_CIatan
_CIcos
_CIasin
_finite
_CIsin
_CIatan2
_CIacos
memmove
qsort
_CIfmod
_purecall
_stricmp
modf
iswspace
iswalpha
iswdigit
iswpunct
_CIsqrt
memcpy
memset
_CIpow
??2@YAPAXI@Z
??3@YAXPAX@Z
_iob
_vsnprintf
_vsnwprintf
_errno
__CxxFrameHandler

gdi32

GetTextMetricsA
GetObjectA
GetGlyphOutlineA
CreateDIBSection
DeleteDC
DeleteObject
SelectObject
GetCharacterPlacementW
GetCharacterPlacementA
SetTextColor
SetBkColor
SetBkMode
GetTextMetricsW
GetFontLanguageInfo
CreateFontIndirectA
CreateFontIndirectW
SetTextAlign
SetMapMode
CreateCompatibleDC
ExtTextOutA
MoveToEx
ExtTextOutW
TranslateCharsetInfo
GetCurrentObject
GetOutlineTextMetricsA
GetGlyphOutlineW
GetObjectW

kernel32

DeleteFileW
SetFilePointer
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
FindResourceA
LoadResource
LockResource
SizeofResource
FreeResource
CompareStringA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FormatMessageA
LocalFree
CreateFileW
GetFileSizeEx
GetFullPathNameW
GetLastError
IsDBCSLeadByte
WriteFile
GetTempPathA
MoveFileA
CreateFileA
ReadFile
CloseHandle
DeleteFileA
InterlockedDecrement
InterlockedIncrement
IsProcessorFeaturePresent
VirtualFree
GetACP
WideCharToMultiByte
MultiByteToWideChar
OutputDebugStringA
GetModuleHandleA
FreeLibrary
LoadLibraryA
GetVersionExA
GetSystemInfo
GetProcAddress
VirtualAlloc
GetProcessHeap
HeapFree
HeapAlloc
DisableThreadLibraryCalls
MoveFileW
GetTempFileNameW
GlobalMemoryStatus
SetEndOfFile
ExpandEnvironmentStringsA
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
WaitForSingleObject
ReleaseMutex
CreateMutexA
Sleep
InterlockedExchange
InterlockedCompareExchange
RtlUnwind
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetVersion
GetTempFileNameA
FindResourceW

advapi32

RegOpenKeyA
RegQueryValueExA
RegCloseKey

Exports

Exports

D3DXAssembleShader
D3DXAssembleShaderFromFileA
D3DXAssembleShaderFromFileW
D3DXAssembleShaderFromResourceA
D3DXAssembleShaderFromResourceW
D3DXBoxBoundProbe
D3DXCheckCubeTextureRequirements
D3DXCheckTextureRequirements
D3DXCheckVersion
D3DXCheckVolumeTextureRequirements
D3DXCleanMesh
D3DXColorAdjustContrast
D3DXColorAdjustSaturation
D3DXCompileShader
D3DXCompileShaderFromFileA
D3DXCompileShaderFromFileW
D3DXCompileShaderFromResourceA
D3DXCompileShaderFromResourceW
D3DXComputeBoundingBox
D3DXComputeBoundingSphere
D3DXComputeIMTFromPerTexelSignal
D3DXComputeIMTFromPerVertexSignal
D3DXComputeIMTFromSignal
D3DXComputeIMTFromTexture
D3DXComputeNormalMap
D3DXComputeNormals
D3DXComputeTangent
D3DXComputeTangentFrame
D3DXComputeTangentFrameEx
D3DXConcatenateMeshes
D3DXConvertMeshSubsetToSingleStrip
D3DXConvertMeshSubsetToStrips
D3DXCreateAnimationController
D3DXCreateBox
D3DXCreateBuffer
D3DXCreateCompressedAnimationSet
D3DXCreateCubeTexture
D3DXCreateCubeTextureFromFileA
D3DXCreateCubeTextureFromFileExA
D3DXCreateCubeTextureFromFileExW
D3DXCreateCubeTextureFromFileInMemory
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXCreateCubeTextureFromFileW
D3DXCreateCubeTextureFromResourceA
D3DXCreateCubeTextureFromResourceExA
D3DXCreateCubeTextureFromResourceExW
D3DXCreateCubeTextureFromResourceW
D3DXCreateCylinder
D3DXCreateEffect
D3DXCreateEffectCompiler
D3DXCreateEffectCompilerFromFileA
D3DXCreateEffectCompilerFromFileW
D3DXCreateEffectCompilerFromResourceA
D3DXCreateEffectCompilerFromResourceW
D3DXCreateEffectEx
D3DXCreateEffectFromFileA
D3DXCreateEffectFromFileExA
D3DXCreateEffectFromFileExW
D3DXCreateEffectFromFileW
D3DXCreateEffectFromResourceA
D3DXCreateEffectFromResourceExA
D3DXCreateEffectFromResourceExW
D3DXCreateEffectFromResourceW
D3DXCreateEffectPool
D3DXCreateFontA
D3DXCreateFontIndirectA
D3DXCreateFontIndirectW
D3DXCreateFontW
D3DXCreateKeyframedAnimationSet
D3DXCreateLine
D3DXCreateMatrixStack
D3DXCreateMesh
D3DXCreateMeshFVF
D3DXCreateNPatchMesh
D3DXCreatePMeshFromStream
D3DXCreatePRTBuffer
D3DXCreatePRTBufferTex
D3DXCreatePRTCompBuffer
D3DXCreatePRTEngine
D3DXCreatePatchMesh
D3DXCreatePolygon
D3DXCreateRenderToEnvMap
D3DXCreateRenderToSurface
D3DXCreateSPMesh
D3DXCreateSkinInfo
D3DXCreateSkinInfoFVF
D3DXCreateSkinInfoFromBlendedMesh
D3DXCreateSphere
D3DXCreateSprite
D3DXCreateTeapot
D3DXCreateTextA
D3DXCreateTextW
D3DXCreateTexture
D3DXCreateTextureFromFileA
D3DXCreateTextureFromFileExA
D3DXCreateTextureFromFileExW
D3DXCreateTextureFromFileInMemory
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateTextureFromFileW
D3DXCreateTextureFromResourceA
D3DXCreateTextureFromResourceExA
D3DXCreateTextureFromResourceExW
D3DXCreateTextureFromResourceW
D3DXCreateTextureGutterHelper
D3DXCreateTextureShader
D3DXCreateTorus
D3DXCreateVolumeTexture
D3DXCreateVolumeTextureFromFileA
D3DXCreateVolumeTextureFromFileExA
D3DXCreateVolumeTextureFromFileExW
D3DXCreateVolumeTextureFromFileInMemory
D3DXCreateVolumeTextureFromFileInMemoryEx
D3DXCreateVolumeTextureFromFileW
D3DXCreateVolumeTextureFromResourceA
D3DXCreateVolumeTextureFromResourceExA
D3DXCreateVolumeTextureFromResourceExW
D3DXCreateVolumeTextureFromResourceW
D3DXDebugMute
D3DXDeclaratorFromFVF
D3DXDisassembleEffect
D3DXDisassembleShader
D3DXFVFFromDeclarator
D3DXFileCreate
D3DXFillCubeTexture
D3DXFillCubeTextureTX
D3DXFillTexture
D3DXFillTextureTX
D3DXFillVolumeTexture
D3DXFillVolumeTextureTX
D3DXFilterTexture
D3DXFindShaderComment
D3DXFloat16To32Array
D3DXFloat32To16Array
D3DXFrameAppendChild
D3DXFrameCalculateBoundingSphere
D3DXFrameDestroy
D3DXFrameFind
D3DXFrameNumNamedMatrices
D3DXFrameRegisterNamedMatrices
D3DXFresnelTerm
D3DXGenerateOutputDecl
D3DXGeneratePMesh
D3DXGetDeclLength
D3DXGetDeclVertexSize
D3DXGetDriverLevel
D3DXGetFVFVertexSize
D3DXGetImageInfoFromFileA
D3DXGetImageInfoFromFileInMemory
D3DXGetImageInfoFromFileW
D3DXGetImageInfoFromResourceA
D3DXGetImageInfoFromResourceW
D3DXGetPixelShaderProfile
D3DXGetShaderConstantTable
D3DXGetShaderConstantTableEx
D3DXGetShaderInputSemantics
D3DXGetShaderOutputSemantics
D3DXGetShaderSamplers
D3DXGetShaderSize
D3DXGetShaderVersion
D3DXGetVertexShaderProfile
D3DXIntersect
D3DXIntersectSubset
D3DXIntersectTri
D3DXLoadMeshFromXA
D3DXLoadMeshFromXInMemory
D3DXLoadMeshFromXResource
D3DXLoadMeshFromXW
D3DXLoadMeshFromXof
D3DXLoadMeshHierarchyFromXA
D3DXLoadMeshHierarchyFromXInMemory
D3DXLoadMeshHierarchyFromXW
D3DXLoadPRTBufferFromFileA
D3DXLoadPRTBufferFromFileW
D3DXLoadPRTCompBufferFromFileA
D3DXLoadPRTCompBufferFromFileW
D3DXLoadPatchMeshFromXof
D3DXLoadSkinMeshFromXof
D3DXLoadSurfaceFromFileA
D3DXLoadSurfaceFromFileInMemory
D3DXLoadSurfaceFromFileW
D3DXLoadSurfaceFromMemory
D3DXLoadSurfaceFromResourceA
D3DXLoadSurfaceFromResourceW
D3DXLoadSurfaceFromSurface
D3DXLoadVolumeFromFileA
D3DXLoadVolumeFromFileInMemory
D3DXLoadVolumeFromFileW
D3DXLoadVolumeFromMemory
D3DXLoadVolumeFromResourceA
D3DXLoadVolumeFromResourceW
D3DXLoadVolumeFromVolume
D3DXMatrixAffineTransformation
D3DXMatrixAffineTransformation2D
D3DXMatrixDecompose
D3DXMatrixDeterminant
D3DXMatrixInverse
D3DXMatrixLookAtLH
D3DXMatrixLookAtRH
D3DXMatrixMultiply
D3DXMatrixMultiplyTranspose
D3DXMatrixOrthoLH
D3DXMatrixOrthoOffCenterLH
D3DXMatrixOrthoOffCenterRH
D3DXMatrixOrthoRH
D3DXMatrixPerspectiveFovLH
D3DXMatrixPerspectiveFovRH
D3DXMatrixPerspectiveLH
D3DXMatrixPerspectiveOffCenterLH
D3DXMatrixPerspectiveOffCenterRH
D3DXMatrixPerspectiveRH
D3DXMatrixReflect
D3DXMatrixRotationAxis
D3DXMatrixRotationQuaternion
D3DXMatrixRotationX
D3DXMatrixRotationY
D3DXMatrixRotationYawPitchRoll
D3DXMatrixRotationZ
D3DXMatrixScaling
D3DXMatrixShadow
D3DXMatrixTransformation
D3DXMatrixTransformation2D
D3DXMatrixTranslation
D3DXMatrixTranspose
D3DXOptimizeFaces
D3DXOptimizeVertices
D3DXPlaneFromPointNormal
D3DXPlaneFromPoints
D3DXPlaneIntersectLine
D3DXPlaneNormalize
D3DXPlaneTransform
D3DXPlaneTransformArray
D3DXPreprocessShader
D3DXPreprocessShaderFromFileA
D3DXPreprocessShaderFromFileW
D3DXPreprocessShaderFromResourceA
D3DXPreprocessShaderFromResourceW
D3DXQuaternionBaryCentric
D3DXQuaternionExp
D3DXQuaternionInverse
D3DXQuaternionLn
D3DXQuaternionMultiply
D3DXQuaternionNormalize
D3DXQuaternionRotationAxis
D3DXQuaternionRotationMatrix
D3DXQuaternionRotationYawPitchRoll
D3DXQuaternionSlerp
D3DXQuaternionSquad
D3DXQuaternionSquadSetup
D3DXQuaternionToAxisAngle
D3DXRectPatchSize
D3DXSHAdd
D3DXSHDot
D3DXSHEvalConeLight
D3DXSHEvalDirection
D3DXSHEvalDirectionalLight
D3DXSHEvalHemisphereLight
D3DXSHEvalSphericalLight
D3DXSHMultiply2
D3DXSHMultiply3
D3DXSHMultiply4
D3DXSHMultiply5
D3DXSHMultiply6
D3DXSHPRTCompSplitMeshSC
D3DXSHPRTCompSuperCluster
D3DXSHProjectCubeMap
D3DXSHRotate
D3DXSHRotateZ
D3DXSHScale
D3DXSaveMeshHierarchyToFileA
D3DXSaveMeshHierarchyToFileW
D3DXSaveMeshToXA
D3DXSaveMeshToXW
D3DXSavePRTBufferToFileA
D3DXSavePRTBufferToFileW
D3DXSavePRTCompBufferToFileA
D3DXSavePRTCompBufferToFileW
D3DXSaveSurfaceToFileA
D3DXSaveSurfaceToFileInMemory
D3DXSaveSurfaceToFileW
D3DXSaveTextureToFileA
D3DXSaveTextureToFileInMemory
D3DXSaveTextureToFileW
D3DXSaveVolumeToFileA
D3DXSaveVolumeToFileInMemory
D3DXSaveVolumeToFileW
D3DXSimplifyMesh
D3DXSphereBoundProbe
D3DXSplitMesh
D3DXTessellateNPatches
D3DXTessellateRectPatch
D3DXTessellateTriPatch
D3DXTriPatchSize
D3DXUVAtlasCreate
D3DXUVAtlasPack
D3DXUVAtlasPartition
D3DXValidMesh
D3DXValidPatchMesh
D3DXVec2BaryCentric
D3DXVec2CatmullRom
D3DXVec2Hermite
D3DXVec2Normalize
D3DXVec2Transform
D3DXVec2TransformArray
D3DXVec2TransformCoord
D3DXVec2TransformCoordArray
D3DXVec2TransformNormal
D3DXVec2TransformNormalArray
D3DXVec3BaryCentric
D3DXVec3CatmullRom
D3DXVec3Hermite
D3DXVec3Normalize
D3DXVec3Project
D3DXVec3ProjectArray
D3DXVec3Transform
D3DXVec3TransformArray
D3DXVec3TransformCoord
D3DXVec3TransformCoordArray
D3DXVec3TransformNormal
D3DXVec3TransformNormalArray
D3DXVec3Unproject
D3DXVec3UnprojectArray
D3DXVec4BaryCentric
D3DXVec4CatmullRom
D3DXVec4Cross
D3DXVec4Hermite
D3DXVec4Normalize
D3DXVec4Transform
D3DXVec4TransformArray
D3DXWeldVertices

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DF CONNECTED v2.7.7 (Windows)/DF CONNECTED v2.7.7.exe
.exe windows:5 windows x86

3edc4485030b7bbdd74e32ebc647287c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetOpenA
HttpEndRequestW
InternetWriteFile
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
InternetCrackUrlA
InternetCanonicalizeUrlA
HttpSendRequestA
InternetGetConnectedState
InternetConnectA
HttpOpenRequestA

d3dx9_43

D3DXGetVertexShaderProfile
D3DXCompileShader
D3DXGetPixelShaderProfile
D3DXCreateTextureFromFileW
D3DXGetImageInfoFromFileInMemory
D3DXCreateTextureFromFileInMemoryEx

dbghelp

MiniDumpWriteDump
SymInitialize
SymFromAddr

winmm

mciGetErrorStringA
joyGetPos
joyGetPosEx
joyGetDevCapsA
mciSendStringA

ws2_32

bind
socket
ioctlsocket
setsockopt
inet_addr
WSACleanup
WSAStartup
shutdown
closesocket
gethostname
listen
getaddrinfo
WSAAddressToStringA
freeaddrinfo
getpeername
select
__WSAFDIsSet
htons
htonl
ntohs
ntohl
accept
recv
inet_ntoa
recvfrom
WSAGetLastError
send
connect
sendto
getsockopt

gdiplus

GdiplusShutdown
GdiplusStartup

comctl32

InitCommonControlsEx

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

kernel32

GetTimeZoneInformation
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
LCMapStringA
CreateFileA
GetFullPathNameA
SetConsoleCtrlHandler
SetFilePointer
SetStdHandle
ReadFile
VirtualAlloc
VirtualFree
HeapDestroy
HeapCreate
FatalAppExitA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
WriteFile
HeapSize
SetLastError
GetStdHandle
SetHandleCount
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
CreateDirectoryA
GetFileType
PeekNamedPipe
GetFileInformationByHandle
DeleteFileA
FindNextFileA
GetDateFormatA
GetTimeFormatA
GetFileAttributesA
DebugBreak
GetSystemTimeAsFileTime
SetFileAttributesW
HeapReAlloc
FindFirstFileA
MultiByteToWideChar
GetConsoleWindow
WideCharToMultiByte
OutputDebugStringW
FormatMessageW
GetLastError
GetProcAddress
LoadLibraryW
GetFullPathNameW
GetCurrentDirectoryW
LocalFree
GetModuleHandleW
FreeEnvironmentStringsA
InterlockedIncrement
CreateThread
GetExitCodeThread
CloseHandle
DeleteFileW
Sleep
FreeLibrary
SetCurrentDirectoryA
GetCurrentDirectoryA
GetExitCodeProcess
CreateProcessW
GetEnvironmentVariableW
FindClose
FindNextFileW
RemoveDirectoryW
FindFirstFileW
GetFileAttributesW
CreateDirectoryW
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
SetWaitableTimer
CreateWaitableTimerW
SetThreadPriority
SetPriorityClass
GetCurrentProcess
GetCurrentThread
GlobalUnlock
GlobalLock
GlobalAlloc
GetVersionExW
GetUserDefaultLCID
GetLocaleInfoW
GetSystemInfo
GlobalMemoryStatusEx
ExitProcess
lstrlenA
ExpandEnvironmentStringsW
GetModuleFileNameW
GetCurrentThreadId
MoveFileA
SetUnhandledExceptionFilter
SetErrorMode
GetCommandLineW
GetCurrentProcessId
CreateFileW
RtlCaptureStackBackTrace
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
LeaveCriticalSection
TlsAlloc
TlsSetValue
TlsGetValue
TlsFree
RtlUnwind
RaiseException
LoadLibraryA
InterlockedExchange
LocalAlloc
HeapWalk
HeapFree
HeapAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
GetEnvironmentStrings
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
GetProcessHeap
SetEnvironmentVariableW
InterlockedDecrement
VirtualQuery
HeapValidate

user32

GetDC
GetDlgItem
DialogBoxParamW
MoveWindow
ClientToScreen
GetMonitorInfoW
SetCursorPos
MapWindowPoints
GetRawInputDeviceInfoA
GetRawInputDeviceList
GetCursorPos
GetForegroundWindow
wsprintfW
GetActiveWindow
DispatchMessageW
TranslateMessage
GetMessageW
EnumDisplaySettingsW
ChangeDisplaySettingsW
SetWindowLongW
UpdateWindow
EnumDisplaySettingsExW
EnumDisplayDevicesA
keybd_event
DrawTextW
SetWindowTextA
SetWindowTextW
CloseClipboard
GetClipboardData
OpenClipboard
SetClipboardData
EmptyClipboard
GetFocus
MessageBoxA
SetDlgItemTextA
IsDialogMessageW
PeekMessageW
DestroyWindow
ShowWindow
BringWindowToTop
SetForegroundWindow
SetWindowPos
GetSystemMetrics
AdjustWindowRectEx
LoadImageW
LoadCursorW
RegisterClassExW
CreateWindowExW
SendMessageW
ReleaseDC
GetAsyncKeyState
ScreenToClient
SetCursor
GetClientRect
GetWindowRect
PostMessageW
CreateDialogParamW
EndDialog
GetDlgItemTextW
IsClipboardFormatAvailable
SetFocus
DefWindowProcW
ReleaseCapture
SetCapture
GetKeyState
CallNextHookEx
MessageBoxW
SetDlgItemTextW

gdi32

GetDeviceCaps
CreateFontA
SelectObject
DeleteObject

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

shell32

ShellExecuteW
SHGetFolderPathW

ole32

CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

SysAllocString
VariantClear
SysFreeString

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 896KB - Virtual size: 895KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 310KB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mydata
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wdata
Size: 155.3MB - Virtual size: 155.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l2
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DF CONNECTED v2.7.7 (Windows)/Dll.dll
.dll windows:6 windows x86

922256c94ed110b859677142c01fd795

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
GetCurrentProcessId
OpenProcess
K32EnumProcessModules
K32GetModuleFileNameExA
CloseHandle
K32QueryWorkingSetEx
CreateFileA
GetProcAddress
Sleep
VirtualAlloc
GetLastError
CreateProcessA
OutputDebugStringA
LoadLibraryA
GetCurrentProcess
SetFileAttributesA
SetEndOfFile
WriteConsoleW
GetFileAttributesA
GetModuleFileNameA
GetSystemInfo
IsDebuggerPresent
GetTickCount
HeapSize
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
GetProcessHeap
CreateDirectoryW
MoveFileExW
DeleteFileW
ReadConsoleW
SetFilePointerEx
GetCurrentDirectoryW
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
DuplicateHandle
WaitForSingleObjectEx
GetCurrentThread
GetCurrentThreadId
GetExitCodeThread
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
SetEvent
ResetEvent
GetStartupInfoW
InitializeSListHead
LocalFree
GetThreadTimes
CreateTimerQueue
SignalObjectAndWait
SwitchToThread
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
FreeLibrary
FreeLibraryAndExitThread
GetModuleFileNameW
LoadLibraryExW
GetVersionExW
VirtualFree
VirtualProtect
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
LoadLibraryW
RaiseException
RtlUnwind
CreateFileW
GetDriveTypeW
GetFileType
ReadFile
ExitProcess
GetModuleHandleExW
GetFullPathNameA
HeapAlloc
ExitThread
HeapFree
HeapReAlloc
GetACP
GetStdHandle
FlushFileBuffers
WriteFile

user32

MessageBoxA
GetWindowThreadProcessId
GetForegroundWindow
GetWindowTextA
EnumWindows

advapi32

RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
CryptAcquireContextA
CryptReleaseContext
CryptGenRandom
RegOpenKeyExW

shell32

SHGetFolderPathA

ole32

CoInitializeSecurity
CoCreateInstance
CoSetProxyBlanket
CoUninitialize
CoInitializeEx

oleaut32

SysAllocString
SysStringLen
SysFreeString
VariantClear

ws2_32

send
WSAGetLastError
inet_addr
shutdown
setsockopt
WSAStartup
getsockopt
__WSAFDIsSet
select
inet_ntoa
socket
gethostbyname
htons
connect
ioctlsocket
closesocket
WSACleanup
recv

Exports

Exports

BailOut
EnableDebugging
ExpectedML
FinishUpdate
SetPositionOutputFile
StartVirtualConnection
Step
XGms_trusted_transaction_send
XGms_trusted_transaction_set_real
XGms_trusted_transaction_set_string
XServer_connectdebug
XServer_debug_cleanup
achievementCount
achievementGetText
achievementIsReached
achievementReach
actionGotoNext
addScoreNormal
banPlayer
findAchievementSNameByN
findPlayerByN
findPlayerByName
findStatisticSNameByN
friendRequest
friendsNum
gameINIDelete
gameINIExists
gameINIGetReal
gameINIGetString
gameINISetReal
gameINISetString
gameINISize
gameINIisReal
getActionArgumentIsReal
getActionArgumentName
getActionArgumentReal
getActionArgumentString
getActionArgumentStringLength
getActionFrom
getActionID
getFriendID
getFriendName
getFriendOnline
getGlobalVarReal
getGlobalVarString
getMaster
getMasterPlayer
getStatus
getVersionNumber
globalVarExists
globalVarIsReal
gms_admin_unban
gms_bdb_close
gms_bdb_read_hex
gms_bdb_read_real
gms_bdb_read_string
gms_bdb_seek
gms_bdb_size
gms_bdb_tell
gms_bdb_write_hex
gms_bdb_write_real
gms_bdb_write_string
gms_connect
gms_instance_sync_destroy_silent
gms_location_countrycode
gms_location_countryname
gms_location_isonum
gms_location_languages
gms_optimize_request_data_update
gms_optimize_set_max_skip
gms_optimize_set_sending_policy
gms_protect_get
gms_protect_set
gms_session_exists
gms_settings_declare_syncable_object
gms_settings_set_game_secret
gms_trusted_transaction_log
highscoreFindIndex
highscoreGetCount
highscoreGetEntryName
highscoreGetEntryScore
highscoreGetSelfScore
highscoreGetTitle
highscoreListCount
highscoreListExists
highscoreListGet
initGameMakerServer
instanceEndRoom
instanceGetIsFull
instanceGetMyID
instanceIsOwner
instanceLinkSync
instanceN
instanceOwner
instanceSet4D_A
instanceSet4D_B
instanceSyncDestroy
instanceSyncExt
instanceSyncFull
instanceSyncOnce
instanceSyncPrepare_A
instanceSyncPrepare_B
instanceSyncSetVariableReal
instanceSyncSetVariableString
instanceSyncTakeover
instanceSyncVarReal
instanceSyncVarString
instanceVarGetName
instanceVarGetReal
instanceVarGetString
instanceVarIsReal
instanceVarN
isConnected
isGuest
isLoggedIn
isMaster
kickPlayer
loginError
loginExecute
loginGetStatus
loginSetLoginCode
loginSetPass
loginSetUser
loginStatus
logout
maxGameINI
maxPlayerINI
numGameLogins
otherPlayerAdminInfo
p2pSendMessage
p2pSetVariableReal
p2pSetVariableString
pingTime
playerAdminInfo
playerCount
playerHasAccount
playerHasVarsChanged
playerID
playerINIDelete
playerINIExists
playerINIGetReal
playerINIGetString
playerINISetReal
playerINISetString
playerINISize
playerINIisReal
playerIndexChanged
playerName
playerVarExists
playerVarFindN
playerVarGetReal
playerVarGetString
playerVarIsReal
playerVarN
registerGetStatus
registerUser
replaceScoreNormal
requestFile
sendChatMessage
serverIsResponding
serverTime
server_global_set_precision
sessionCount
sessionCreate
sessionCreateExt
sessionCurrentID
sessionGetID
sessionJoin
sessionPlayerCount
sessionTag
sessionType
setChatMode
setGlobalVarReal
setGlobalVarString
setHighcoreGuest
setLatencyRate
setPlayerVarPrecision
setPlayerVarReal
setPlayerVarString
setResource
setSPCType
setSpriteResourceName
setSpriteResource_A
setSpriteResource_B
setSpriteResource_C
setVersion
startUpdate
statisticCount
statisticGetAmount
statisticGetText
statisticSet
teamGetPlayer
teamGetPlayerCount
teamGetScore
teamSetScore
unInit
unsafe_string_peek
updateAvaiable
updateFinished
updateProgress
vsEnd
vsIsReady
vsTimeLeft
xGms_bdb_open

Sections

.text
Size: 541KB - Virtual size: 541KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DF CONNECTED v2.7.7 (Windows)/GameMaker Server+(Windows)1.lib
DF CONNECTED v2.7.7 (Windows)/GameMaker Server+(Windows)2.lib
DF CONNECTED v2.7.7 (Windows)/Maps/CUSTOM MAP HOW-TO.txt
DF CONNECTED v2.7.7 (Windows)/Templates/template_charactersprite.png
.png
DF CONNECTED v2.7.7 (Windows)/Templates/template_portrait_papyrus.png
.png
DF CONNECTED v2.7.7 (Windows)/Templates/template_portrait_sans.png
.png
DF CONNECTED v2.7.7 (Windows)/Windows Ding.ogg
DF CONNECTED v2.7.7 (Windows)/audiogroup1.dat
DF CONNECTED v2.7.7 (Windows)/execute_shell_simple.dll
.dll windows:6 windows x86

13917e241801c0918ead855b37154598

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentDirectoryW
WriteConsoleW
CloseHandle
CreateFileW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
MultiByteToWideChar
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointerEx
DecodePointer

shell32

ShellExecuteW

Exports

Exports

execute_shell_simple_raw

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DF CONNECTED v2.7.7 (Windows)/expr.dll
.dll windows:6 windows x86

4f7a4196057276805611855881e77969

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreatePipe
CreateProcessA
CloseHandle
WaitForSingleObject
PeekNamedPipe
ReadFile
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
GetLastError
WideCharToMultiByte
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
MultiByteToWideChar
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
WriteConsoleW
RaiseException
RtlUnwind
InterlockedFlushSList
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetProcessHeap
GetStdHandle
GetFileType
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
HeapReAlloc
HeapSize
SetStdHandle
CreateFileW

Exports

Exports

Initialize
IsValidContext

Sections

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DF CONNECTED v2.7.7 (Windows)/mus_bullethell.ogg
DF CONNECTED v2.7.7 (Windows)/mus_encore.ogg
DF CONNECTED v2.7.7 (Windows)/mus_encore_intro.ogg
DF CONNECTED v2.7.7 (Windows)/mus_encore_ost.ogg
DF CONNECTED v2.7.7 (Windows)/mus_kommsussertod.ogg
DF CONNECTED v2.7.7 (Windows)/mus_madotsuki.ogg
DF CONNECTED v2.7.7 (Windows)/mus_omori.ogg
DF CONNECTED v2.7.7 (Windows)/mus_smartrace.ogg
DF CONNECTED v2.7.7 (Windows)/mus_story.ogg
DF CONNECTED v2.7.7 (Windows)/mus_thatcomedian.ogg
DF CONNECTED v2.7.7 (Windows)/options.ini
DF CONNECTED v2.7.7 (Windows)/rousrDissonance.dll
.dll windows:6 windows x86

b02b72cbc25ed4a32376ac251536f607

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
ReadFile
WriteFile
CloseHandle
GetLastError
PeekNamedPipe
WaitNamedPipeW
GetCurrentProcessId
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
EncodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
ExitProcess
GetModuleHandleExW
K32GetModuleFileNameExW
WideCharToMultiByte
HeapFree
HeapAlloc
GetCurrentThread
LCMapStringW
DecodePointer
GetStdHandle
GetFileType
GetACP
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
HeapSize
HeapReAlloc
SetFilePointerEx
WriteConsoleW
MultiByteToWideChar
lstrlenW
GetCurrentProcess
GetModuleFileNameA
GetModuleFileNameW
DuplicateHandle
Sleep
GetExitCodeThread
TryEnterCriticalSection
GetTickCount
CreateThread
ExitThread
FreeLibraryAndExitThread
CreateTimerQueue
SignalObjectAndWait
SwitchToThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
GetModuleHandleA
GetVersionExW
VirtualAlloc
VirtualProtect
VirtualFree
ReleaseSemaphore
InterlockedPopEntrySList
QueryDepthSList
UnregisterWaitEx
LoadLibraryW

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegSetKeyValueW

Exports

Exports

Init
RegisterCallbacks
ResetPresence
Respond
RunCallbacks
SetDetails
SetJoinSecret
SetLargeImage
SetMatchSecret
SetPartyData
SetSmallImage
SetSpectateSecret
SetState
SetTimeStamps
Shutdown
UpdatePresence

Sections

.text
Size: 230KB - Virtual size: 229KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 230KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DF CONNECTED v2.7.7 (Windows)/snd_bikehorn.ogg
DF CONNECTED v2.7.7 (Windows)/snd_bitget.ogg
DF CONNECTED v2.7.7 (Windows)/snd_bithurt.ogg
DF CONNECTED v2.7.7 (Windows)/snd_buy.ogg
DF CONNECTED v2.7.7 (Windows)/snd_camera.ogg
DF CONNECTED v2.7.7 (Windows)/snd_car_stop.ogg
DF CONNECTED v2.7.7 (Windows)/snd_cell.ogg
DF CONNECTED v2.7.7 (Windows)/snd_clockstart.ogg
DF CONNECTED v2.7.7 (Windows)/snd_clockticking.ogg
DF CONNECTED v2.7.7 (Windows)/snd_closedoor.ogg
DF CONNECTED v2.7.7 (Windows)/snd_deeplaser.ogg
DF CONNECTED v2.7.7 (Windows)/snd_die_splat.ogg
DF CONNECTED v2.7.7 (Windows)/snd_diggy.ogg
DF CONNECTED v2.7.7 (Windows)/snd_disappear.ogg
DF CONNECTED v2.7.7 (Windows)/snd_e_close.ogg
DF CONNECTED v2.7.7 (Windows)/snd_e_open.ogg
DF CONNECTED v2.7.7 (Windows)/snd_e_ride.ogg
DF CONNECTED v2.7.7 (Windows)/snd_enemy_splat.ogg
DF CONNECTED v2.7.7 (Windows)/snd_fall.ogg
DF CONNECTED v2.7.7 (Windows)/snd_firstwarp.ogg
DF CONNECTED v2.7.7 (Windows)/snd_fracture.ogg
DF CONNECTED v2.7.7 (Windows)/snd_g_message.ogg
DF CONNECTED v2.7.7 (Windows)/snd_getpiece.ogg
DF CONNECTED v2.7.7 (Windows)/snd_glitchblip.ogg
DF CONNECTED v2.7.7 (Windows)/snd_intronoise.ogg
DF CONNECTED v2.7.7 (Windows)/snd_longglitch.ogg
DF CONNECTED v2.7.7 (Windows)/snd_machineon.ogg
DF CONNECTED v2.7.7 (Windows)/snd_machineroom.ogg
DF CONNECTED v2.7.7 (Windows)/snd_machineroom2.ogg
DF CONNECTED v2.7.7 (Windows)/snd_map.ogg
DF CONNECTED v2.7.7 (Windows)/snd_open.ogg
DF CONNECTED v2.7.7 (Windows)/snd_openchest.ogg
DF CONNECTED v2.7.7 (Windows)/snd_openpiece.ogg
DF CONNECTED v2.7.7 (Windows)/snd_puzzle.ogg
DF CONNECTED v2.7.7 (Windows)/snd_revival.ogg
DF CONNECTED v2.7.7 (Windows)/snd_soulenter.ogg
DF CONNECTED v2.7.7 (Windows)/snd_starget.ogg
DF CONNECTED v2.7.7 (Windows)/snd_stuck.ogg
DF CONNECTED v2.7.7 (Windows)/snd_tapeend.ogg
DF CONNECTED v2.7.7 (Windows)/snd_tapeend2.ogg
DF CONNECTED v2.7.7 (Windows)/snd_throneamb.ogg
DF CONNECTED v2.7.7 (Windows)/snd_victory.ogg
DF CONNECTED v2.7.7 (Windows)/snd_voidenter.ogg
DF CONNECTED v2.7.7 (Windows)/vo_char_wakeup.ogg
DF CONNECTED v2.7.7 (Windows)/vo_glaugh.ogg
DF CONNECTED v2.7.7 (Windows)/vo_letsbegin.ogg
a note from someone.txt

Sharing

General

Malware Config

Signatures

Files

5fb75b2a87c1fa7cc3d7904a0b97084a

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate

Extended Key Usages

Key Usages

61:01:cf:3e:00:00:00:00:00:0fCertificate

Extended Key Usages

Key Usages

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate

Extended Key Usages

Key Usages

61:06:94:2d:00:00:00:00:00:09Certificate

Extended Key Usages

Key Usages

9b:28:ef:17:5d:cd:b3:d3:ec:10:d1:6d:64:92:d2:24:02:c3:2b:3eSigner

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

gdi32

kernel32

advapi32

Exports

Exports

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.data Size: 62KB - Virtual size: 148KB

.rsrc Size: 1024B - Virtual size: 928B

.reloc Size: 55KB - Virtual size: 55KB

3edc4485030b7bbdd74e32ebc647287c

Headers

DLL Characteristics

File Characteristics

Imports

wininet

d3dx9_43

dbghelp

winmm

ws2_32

gdiplus

comctl32

version

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 2.9MB - Virtual size: 2.9MB

.rdata Size: 896KB - Virtual size: 895KB

.data Size: 310KB - Virtual size: 2.6MB

.mydata Size: 512B - Virtual size: 8B

.rsrc Size: 180KB - Virtual size: 180KB

.wdata Size: 155.3MB - Virtual size: 155.3MB

.l2 Size: 180KB - Virtual size: 180KB

922256c94ed110b859677142c01fd795

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

ws2_32

Exports

Exports

Sections

.text Size: 541KB - Virtual size: 541KB

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

61:01:cf:3e:00:00:00:00:00:0f
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

61:06:94:2d:00:00:00:00:00:09
Certificate

9b:28:ef:17:5d:cd:b3:d3:ec:10:d1:6d:64:92:d2:24:02:c3:2b:3e
Signer

.text
Size: 1.8MB - Virtual size: 1.8MB

.data
Size: 62KB - Virtual size: 148KB

.rsrc
Size: 1024B - Virtual size: 928B

.reloc
Size: 55KB - Virtual size: 55KB

.text
Size: 2.9MB - Virtual size: 2.9MB

.rdata
Size: 896KB - Virtual size: 895KB

.data
Size: 310KB - Virtual size: 2.6MB

.mydata
Size: 512B - Virtual size: 8B

.rsrc
Size: 180KB - Virtual size: 180KB

.wdata
Size: 155.3MB - Virtual size: 155.3MB

.l2
Size: 180KB - Virtual size: 180KB

.text
Size: 541KB - Virtual size: 541KB

.rdata
Size: 135KB - Virtual size: 134KB

.data
Size: 13KB - Virtual size: 1.1MB

.gfids
Size: 3KB - Virtual size: 3KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 31KB - Virtual size: 31KB

.text
Size: 44KB - Virtual size: 44KB

.rdata
Size: 22KB - Virtual size: 22KB

.data
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 1024B

.reloc
Size: 3KB - Virtual size: 3KB

.text
Size: 124KB - Virtual size: 123KB

.rdata
Size: 58KB - Virtual size: 57KB

.data
Size: 4KB - Virtual size: 7KB

.reloc
Size: 8KB - Virtual size: 8KB

.text
Size: 230KB - Virtual size: 229KB

.rdata
Size: 60KB - Virtual size: 59KB

.data
Size: 13KB - Virtual size: 230KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 13KB - Virtual size: 13KB