FIFA[.]23[.]LE[.]v23[.]1[.]2[.]4[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

FIFA.23.LE.v23.1.2.4.zip
Size

2.5MB
MD5

148776f9c28b4641a8a0c1e6726693ad
SHA1

19d7d6a12266d7036d9a406a0b8cdaf52e9bc031
SHA256

e12e448a5466d08e1cd758ada4f8dd1125ad46787a4f933c00a5b6fb9d4d53b7
SHA512

9c5cb15c07d0f5daef4a8f021d7ece93354b2eb569607b401b483f20b46950602ff5e6ba00f89438dffaee58f414865c71f0ccbd14428b502ad07fec8b38fbe1
SSDEEP

49152:8ySa7fh+Sj3msV44yPGMWBN6mjIEL5D6ia+zUwzhYkYLzRU0:0ihLrmsVk+XJIEtD/zFYkezZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/FIFALiveEditor.DLL
unpack001/FakeEAACLauncher/EAAntiCheat.GameServiceLauncher.exe
unpack001/Launcher.exe

Files

FIFA.23.LE.v23.1.2.4.zip
.zip
FIFALiveEditor.DLL
.dll windows:6 windows x64 arch:x64

29c0a1f67677d77cb6243ef4f18d3a85

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetProcessHeap
InitializeCriticalSectionEx
DeleteCriticalSection
Sleep
GetCurrentProcess
GetCurrentProcessId
CreateThread
GetCurrentThreadId
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
K32GetModuleInformation
GetProcAddress
VirtualProtect
WaitForSingleObject
CreateEventA
FreeLibrary
LoadLibraryA
K32EnumProcessModulesEx
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentThread
SetThreadPriority
GetThreadPriority
SetPriorityClass
GetPriorityClass
ReadFile
GetFileInformationByHandleEx
CreateDirectoryW
FindClose
FindFirstFileExW
FindNextFileW
GetFullPathNameW
GetLogicalDriveStringsA
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
MultiByteToWideChar
WideCharToMultiByte
SwitchToThread
VerSetConditionMask
EnterCriticalSection
LeaveCriticalSection
SleepEx
SetThreadPriorityBoost
LoadLibraryExA
FormatMessageA
ReadProcessMemory
SetEnvironmentVariableW
FreeEnvironmentStringsW
HeapSize
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
CreatePipe
GetExitCodeProcess
DeleteFileW
GetTimeZoneInformation
SetStdHandle
ReadConsoleW
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetStdHandle
GetModuleFileNameW
CreateProcessW
DuplicateHandle
ExitProcess
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileType
GetDriveTypeW
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
HeapFree
HeapReAlloc
HeapAlloc
TlsAlloc
RtlUnwind
SetLastError
InterlockedFlushSList
RtlUnwindEx
AddVectoredExceptionHandler
GetLastError
RtlPcToFileHeader
InitializeSListHead
SetUnhandledExceptionFilter
RaiseException
CloseHandle
DecodePointer
GetEnvironmentStringsW
CreateFileW
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
WriteConsoleW
LocalFree
GetCurrentDirectoryW
GetFileAttributesExW
GetFileInformationByHandle
SetEndOfFile
SetFilePointerEx
GetTempPathW
AreFileApisANSI
CopyFileW
MoveFileExW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryEnterCriticalSection
WaitForSingleObjectEx
GetExitCodeThread
GetNativeSystemInfo
EncodePointer
LCMapStringEx
GetSystemTimeAsFileTime
GetModuleHandleW
GetStringTypeW
GetCPInfo
IsDebuggerPresent
OutputDebugStringW
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter

user32

UnregisterClassA
CreateWindowExA
ScreenToClient
GetForegroundWindow
DefWindowProcA
GetCursorPos
DestroyWindow
SetForegroundWindow
LoadCursorA
GetAsyncKeyState
EnumDisplayMonitors
GetMonitorInfoA
MonitorFromWindow
SetWindowLongW
SetWindowLongA
GetWindowLongW
WindowFromPoint
ClientToScreen
SetCursor
SetCursorPos
AdjustWindowRectEx
GetClientRect
SetWindowTextW
ReleaseDC
GetDC
FindWindowA
ReleaseCapture
SetCapture
GetCapture
GetKeyState
SetFocus
BringWindowToTop
IsIconic
SetWindowPos
SetLayeredWindowAttributes
ShowWindow
IsChild
TrackMouseEvent
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
RegisterClassExA

gdi32

GetDeviceCaps

shell32

ShellExecuteA

ole32

CoCreateGuid

dbghelp

MiniDumpWriteDump

d3dcompiler_47

D3DCompile

dxgi

CreateDXGIFactory1

imm32

ImmReleaseContext
ImmAssociateContextEx
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmGetContext

Exports

Exports

IGFD_ClearFilesStyle
IGFD_CloseDialog
IGFD_Create
IGFD_Destroy
IGFD_DisplayDialog
IGFD_GetCurrentFileName
IGFD_GetCurrentFilter
IGFD_GetCurrentPath
IGFD_GetFilePathName
IGFD_GetFileStyle
IGFD_GetSelection
IGFD_GetUserDatas
IGFD_IsKeyOpened
IGFD_IsOk
IGFD_IsOpened
IGFD_OpenDialog
IGFD_OpenDialog2
IGFD_OpenModal
IGFD_OpenModal2
IGFD_OpenPaneDialog
IGFD_OpenPaneDialog2
IGFD_OpenPaneModal
IGFD_OpenPaneModal2
IGFD_Selection_DestroyContent
IGFD_Selection_Get
IGFD_Selection_Pair_DestroyContent
IGFD_Selection_Pair_Get
IGFD_SetFileStyle
IGFD_SetFileStyle2
IGFD_WasKeyOpenedThisFrame
IGFD_WasOpenedThisFrame
SetLocales

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 206KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
FakeEAACLauncher/EAAntiCheat.GameServiceLauncher.exe
.exe windows:6 windows x64 arch:x64

553c2bf3c407d8c383d695b10855b9ba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

Sleep
GetLastError
CloseHandle
CreateProcessW
FormatMessageA
GetModuleHandleW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
LocalFree

user32

MessageBoxW
MessageBoxA

shell32

ShellExecuteW

msvcp140

?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
??Bid@locale@std@@QEAA_KXZ
?_Syserror_map@std@@YAPEBDH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Winerror_map@std@@YAHH@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?uncaught_exception@std@@YA_NXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_terminate
__current_exception_context
memset
__std_exception_copy
_CxxThrowException
__C_specific_handler
__std_exception_destroy
memcpy
memmove
__current_exception

api-ms-win-crt-string-l1-1-0

_strdup

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
terminate
_exit
exit
_initterm_e
_crt_atexit
__p___argv
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
_cexit
_set_app_type
_seh_filter_exe
_register_thread_local_exe_atexit_callback
_c_exit
__p___argc
_invalid_parameter_noinfo_noreturn
_register_onexit_function

api-ms-win-crt-heap-l1-1-0

_set_new_mode
malloc
free
_callnewh

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Lang/EN/translate.json
Lang/PL/translate.json
Launcher.exe
.exe windows:6 windows x64 arch:x64

0e64818c9dcebd900c840f69f16e7f38

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

K32EnumProcessModulesEx
K32GetModuleBaseNameA
MultiByteToWideChar
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
WideCharToMultiByte
VerSetConditionMask
QueryPerformanceCounter
QueryPerformanceFrequency
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
LocalFree
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CreateSymbolicLinkW
GetFileInformationByHandleEx
CreateHardLinkW
CopyFileW
DeviceIoControl
AreFileApisANSI
SetFileInformationByHandle
GetFileInformationByHandle
GetFileAttributesExW
FindNextFileW
FindFirstFileExW
FindClose
CreateFileW
CreateDirectoryW
FormatMessageA
K32EnumProcesses
LoadLibraryW
VirtualFreeEx
WriteProcessMemory
OpenProcess
VirtualAllocEx
CreateRemoteThread
WaitForSingleObject
Process32Next
K32GetModuleInformation
CreateToolhelp32Snapshot
CloseHandle
GetModuleHandleA
GetModuleFileNameA
GetLocalTime
GetCurrentProcess
Sleep
GetLastError
DeleteCriticalSection
InitializeSListHead

user32

PostQuitMessage
EnumDisplayMonitors
GetMonitorInfoA
MonitorFromWindow
LoadCursorA
SetWindowLongW
GetWindowLongW
MessageBoxA
MessageBoxW
FindWindowA
DefWindowProcA
WindowFromPoint
ScreenToClient
ClientToScreen
GetCursorPos
SetCursor
SetCursorPos
AdjustWindowRectEx
GetClientRect
SetWindowTextW
ReleaseDC
DispatchMessageA
PeekMessageA
GetDC
SetForegroundWindow
GetForegroundWindow
MsgWaitForMultipleObjectsEx
ReleaseCapture
SetCapture
UnregisterClassA
RegisterClassExA
CreateWindowExA
DestroyWindow
ShowWindow
SetWindowPos
UpdateWindow
LoadIconA
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
GetCapture
GetKeyState
SetFocus
BringWindowToTop
TranslateMessage
TrackMouseEvent
IsChild
SetLayeredWindowAttributes
IsIconic
IsWindowVisible
SetWindowLongA

gdi32

GetDeviceCaps

shell32

ShellExecuteExW
ShellExecuteA

advapi32

GetNamedSecurityInfoW
SetEntriesInAclW
RegQueryValueExA
RegOpenKeyA
ConvertStringSidToSidW
SetNamedSecurityInfoW

msvcp140

??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?uncaught_exceptions@std@@YAHXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Winerror_map@std@@YAHH@Z
??Bid@locale@std@@QEAA_KXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Throw_Cpp_error@std@@YAXH@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?_Xbad_function_call@std@@YAXXZ
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
_Thrd_detach
_Cnd_do_broadcast_at_thread_exit
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

d3dcompiler_47

D3DCompile

d3d11

D3D11CreateDeviceAndSwapChain

imm32

ImmGetContext
ImmAssociateContextEx
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmReleaseContext

vcruntime140

__std_terminate
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memchr
memcmp
memcpy
__current_exception_context
__current_exception
__C_specific_handler
strchr
memmove
strstr
memset

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_configure_narrow_argv
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_register_thread_local_exe_atexit_callback
terminate
_c_exit
_beginthreadex
_exit
exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
_set_app_type
_seh_filter_exe
_cexit
_errno

api-ms-win-crt-stdio-l1-1-0

ftell
fseek
_wfopen
__acrt_iob_func
fflush
__stdio_common_vsscanf
_set_fmode
__stdio_common_vfprintf
__stdio_common_vsprintf_s
_get_stream_buffer_pointers
__p__commode
fgetc
fclose
__stdio_common_vsprintf
ungetc
setvbuf
fwrite
_fseeki64
fsetpos
fread
fputc
fgetpos

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file

api-ms-win-crt-heap-l1-1-0

free
malloc
_callnewh
_set_new_mode

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-string-l1-1-0

toupper
strcmp
strncpy
_wcsdup
strncmp

api-ms-win-crt-math-l1-1-0

sqrtf
cosf
floorf
__setusermatherr
_dclass
logf
ceilf
atan2f
log
pow
powf
fmodf
_dsign
sinf
acosf

api-ms-win-crt-convert-l1-1-0

strtoll
atof
strtod
strtoull

api-ms-win-crt-locale-l1-1-0

_configthreadlocale
localeconv
___lc_codepage_func

api-ms-win-crt-utility-l1-1-0

qsort

Sections

.text
Size: 759KB - Virtual size: 758KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 157KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
changelog.txt
data/char_conv.json
data/db_meta.xml
.xml
data/id_map.json
data/legacy_structure.txt
filters/players/Benzema Regen.json
filters/players/CR7 Regen.json
filters/players/Free Agents.json
filters/players/Generated Players.json
filters/players/Messi Regen.json
filters/players/RL9 Regen.json
filters/players/Retiring Players.json
launcher_imgui.ini
lua/DOC.MD
lua/libs/live_editor.lua
lua/scripts/1ovr_99pot.lua
lua/scripts/99ovr_99pot.lua
lua/scripts/capture_newheads.lua
lua/scripts/custom_headassetid_to_playerid.lua
lua/scripts/custom_tattoos_to_playerid.lua
lua/scripts/export_season_stats.lua
lua/scripts/extend_user_team_players_contracts.lua
lua/scripts/generate_minifaces.lua
lua/scripts/generate_minifaces_user_team.lua
lua/scripts/is_retiring=0.lua
lua/scripts/list_players.lua
lua/scripts/medium_socklenghtcode.lua
lua/scripts/modifier=0.lua
lua/scripts/untuck_shirts.lua
lua/tests/main_test.lua
offset_cache.json

Sharing

General

Malware Config

Signatures

Files

29c0a1f67677d77cb6243ef4f18d3a85

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

dbghelp

d3dcompiler_47

dxgi

imm32

Exports

Exports

Sections

.text Size: 2.6MB - Virtual size: 2.6MB

.rdata Size: 2.0MB - Virtual size: 2.0MB

.data Size: 206KB - Virtual size: 254KB

.pdata Size: 90KB - Virtual size: 90KB

_RDATA Size: 512B - Virtual size: 244B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 10KB - Virtual size: 10KB

553c2bf3c407d8c383d695b10855b9ba

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 1KB - Virtual size: 2KB

.pdata Size: 1024B - Virtual size: 1008B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 188B

0e64818c9dcebd900c840f69f16e7f38

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

msvcp140

d3dcompiler_47

d3d11

imm32

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-utility-l1-1-0

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

.rdata
Size: 2.0MB - Virtual size: 2.0MB

.data
Size: 206KB - Virtual size: 254KB

.pdata
Size: 90KB - Virtual size: 90KB

_RDATA
Size: 512B - Virtual size: 244B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 10KB - Virtual size: 10KB

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 1KB - Virtual size: 2KB

.pdata
Size: 1024B - Virtual size: 1008B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 188B

.text
Size: 759KB - Virtual size: 758KB

.rdata
Size: 190KB - Virtual size: 190KB

.data
Size: 21KB - Virtual size: 28KB

.pdata
Size: 31KB - Virtual size: 30KB

.rsrc
Size: 157KB - Virtual size: 156KB

.reloc
Size: 1024B - Virtual size: 964B