Left 4 Theft en español por GTA LOYALTY[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

Left 4 Theft en español por GTA LOYALTY.rar
Size

63.9MB
MD5

6c8cd335f35307ca63a8446a6286a92f
SHA1

64d82e8ead9b347d5b72df01272b7547695a7d37
SHA256

3709bc37ebfe0abfc39fd6ba952067f114c2b2714ad7d482411aff93272bc326
SHA512

d7ccbf2eaabfa410535e606dc70e417c65db2187b4d43dce4411eb910848fa7b5dade0c9fb7d60ccd50a05c7ba198a3bb316329d6f1dde82d767e4255bd8f673
SSDEEP

1572864:PsELNZDtQignUeajhcoyVPQBPGUZToAGrIyUqedAzy0eei13H0c:EELCigF2hctCR0AGEyEdg72Uc

Score

7^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
static1/unpack001/Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/Scm500k.asi	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/Scm500k.asi	upx

Unsigned PE 14 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/GTA_SA.EXE
unpack001/Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/SADisplayResolutions.asi
unpack001/Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/Scm500k.asi
unpack002/out.upx
unpack001/Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/bass.dll
unpack001/Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/cleo.asi
unpack001/Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/cleo/FileSystemOperations.cleo
unpack001/Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/cleo/IniFiles.cleo
unpack001/Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/cleo/IntOperations.cleo
unpack001/Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/cleo/scmlog.cleo
unpack001/Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/ogg.dll
unpack001/Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/vorbis.dll
unpack001/Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/vorbisFile.dll
unpack001/Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/vorbishooked.dll

Files

Left 4 Theft en español por GTA LOYALTY.rar
.rar
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/ARCHIVOS ADICIONALES (recomendado)/barracks.dff
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/ARCHIVOS ADICIONALES (recomendado)/barracks.txd
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/ARCHIVOS ADICIONALES (recomendado)/dildo.ifp
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/ARCHIVOS ADICIONALES (recomendado)/golfclub.dff
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/ARCHIVOS ADICIONALES (recomendado)/golfclub.txd
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/ARCHIVOS ADICIONALES (recomendado)/grenade.dff
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/ARCHIVOS ADICIONALES (recomendado)/grenade.txd
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/ARCHIVOS ADICIONALES (recomendado)/gun_cane.dff
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/ARCHIVOS ADICIONALES (recomendado)/gun_cane.txd
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/ARCHIVOS ADICIONALES (recomendado)/gun_dildo1.dff
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/ARCHIVOS ADICIONALES (recomendado)/gun_dildo1.txd
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/ARCHIVOS ADICIONALES (recomendado)/gun_dildo2.dff
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/ARCHIVOS ADICIONALES (recomendado)/gun_dildo2.txd
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/ARCHIVOS ADICIONALES (recomendado)/gun_vibe1.dff
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/ARCHIVOS ADICIONALES (recomendado)/gun_vibe1.txd
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/ARCHIVOS ADICIONALES (recomendado)/icons6.txd
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/ARCHIVOS ADICIONALES (recomendado)/info.dff
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/ARCHIVOS ADICIONALES (recomendado)/pony.dff
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/ARCHIVOS ADICIONALES (recomendado)/pony.txd
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/Audio/CONFIG/AudioEventHistory.txt
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/Audio/CONFIG/BankLkup.dat
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/Audio/CONFIG/BankSlot.dat
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/Audio/CONFIG/EventVol.dat
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/Audio/CONFIG/PakFiles.dat
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/Audio/CONFIG/StrmPaks.dat
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/Audio/CONFIG/TrakLkup.dat
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/Audio/SFX/FEET
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/Audio/SFX/GENRL
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/Audio/streams/BEATS
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/GTA_SA.EXE
.exe windows:4 windows x86 arch:x86

83fa14dca08906691b3ff3778b54b308

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeEndPeriod
timeGetTime
timeBeginPeriod
timeGetDevCaps

vorbisfile

ov_open_callbacks
ov_clear
ov_time_total
ov_time_tell
ov_read
ov_info
ov_time_seek

ws2_32

recv
send
closesocket
htons
inet_addr
connect
WSAGetLastError
WSAStartup
WSACleanup
socket

eax

ord6

kernel32

VirtualProtect
GetOEMCP
GetACP
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetCPInfo
GetDateFormatA
VirtualQuery
GetTickCount
GetModuleHandleA
GetProcAddress
LoadLibraryA
GetFileSize
CloseHandle
LocalFree
WaitForSingleObjectEx
GetOverlappedResult
WaitForSingleObject
ReleaseSemaphore
SetFilePointer
GetLastError
ReadFile
SetLastError
CreateFileA
ResumeThread
SetThreadPriority
GetThreadPriority
GetCurrentThread
CreateThread
LocalAlloc
CreateSemaphoreA
GetDiskFreeSpaceA
Sleep
QueryPerformanceCounter
InterlockedIncrement
InterlockedDecrement
lstrcpyA
lstrcatA
lstrlenA
DeleteCriticalSection
SuspendThread
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
MultiByteToWideChar
DeleteFileA
TerminateThread
FindClose
FindNextFileA
GetFileAttributesA
FindFirstFileA
FreeLibrary
QueryPerformanceFrequency
OutputDebugStringA
GetLocalTime
CreateDirectoryA
GetUserDefaultLCID
SetStdHandle
CreateEventA
GetVolumeInformationA
GetDriveTypeA
GetLogicalDriveStringsA
SetErrorMode
GlobalMemoryStatus
GetVersionExA
GetCommandLineA
GetFullPathNameA
WideCharToMultiByte
lstrcmpiA
GetSystemInfo
IsProcessorFeaturePresent
LockResource
LoadResource
SizeofResource
FindResourceA
FindResourceW
MapViewOfFile
CreateFileMappingA
CreateFileW
UnmapViewOfFile
ReleaseMutex
CreateMutexA
GetCurrentProcessId
GetSystemDirectoryA
GetModuleFileNameA
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
FlushFileBuffers
LCMapStringW
LCMapStringA
WriteFile
FatalAppExitA
SetUnhandledExceptionFilter
HeapSize
TlsAlloc
TlsGetValue
TlsSetValue
GetCurrentThreadId
TlsFree
GetStartupInfoA
HeapReAlloc
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
GetCurrentProcess
TerminateProcess
ExitProcess
RtlUnwind
RaiseException
InterlockedExchange
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetConsoleCtrlHandler
GetTimeFormatA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetTimeZoneInformation
SetEndOfFile
GetLocaleInfoW
GetCurrentDirectoryA
GetSystemDefaultLCID
SetCurrentDirectoryA
GetEnvironmentStrings

user32

wsprintfA
IsIconic
GetWindowLongA
GetMenu
AdjustWindowRectEx
SystemParametersInfoA
DestroyWindow
SetWindowLongA
ShowWindow
LoadIconA
LoadCursorA
RegisterClassA
ReleaseCapture
GetWindowPlacement
SetTimer
ClipCursor
PostQuitMessage
SetCursor
SetCapture
DefWindowProcA
MapVirtualKeyA
UpdateWindow
GetKeyState
FindWindowA
SetForegroundWindow
PeekMessageA
DispatchMessageA
TranslateMessage
GetKeyboardLayout
DialogBoxParamA
EndDialog
GetDlgItem
SetFocus
SendMessageA
SetWindowPos
AdjustWindowRect
CreateWindowExA
ShowCursor
GetWindowRect
MessageBoxA
SetWindowTextA
ClientToScreen
SetCursorPos
GetClientRect

gdi32

DeleteObject

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegSetValueExA

ole32

CoCreateInstance
CoInitialize
CoUninitialize

Sections

.text
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_rwcseg
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 301KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256KB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_TEXT_HA
Size: 67KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_rwdseg
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 6.3MB - Virtual size: 6.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.init
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.HOODLUM
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/Movies/GTAtitles.mpg
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/Movies/Logo.mpg
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/Readme.txt
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/SADisplayResolutions.asi
.dll windows:5 windows x86 arch:x86

f1766bd56817679549e65f24a8e8be8d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualProtect
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

msvcr90

__dllonexit
_unlock
_onexit
_except_handler4_common
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
_lock

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 342B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/Scm500k.asi
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 524KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 489KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 894B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 33B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/anim/ped.ifp
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/bass.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_Apply3D
BASS_ChannelBytes2Seconds
BASS_ChannelFlags
BASS_ChannelGet3DAttributes
BASS_ChannelGet3DPosition
BASS_ChannelGetAttribute
BASS_ChannelGetData
BASS_ChannelGetDevice
BASS_ChannelGetInfo
BASS_ChannelGetLength
BASS_ChannelGetLevel
BASS_ChannelGetPosition
BASS_ChannelGetTags
BASS_ChannelIsActive
BASS_ChannelIsSliding
BASS_ChannelLock
BASS_ChannelPause
BASS_ChannelPlay
BASS_ChannelRemoveDSP
BASS_ChannelRemoveFX
BASS_ChannelRemoveLink
BASS_ChannelRemoveSync
BASS_ChannelSeconds2Bytes
BASS_ChannelSet3DAttributes
BASS_ChannelSet3DPosition
BASS_ChannelSetAttribute
BASS_ChannelSetDSP
BASS_ChannelSetDevice
BASS_ChannelSetFX
BASS_ChannelSetLink
BASS_ChannelSetPosition
BASS_ChannelSetSync
BASS_ChannelSlideAttribute
BASS_ChannelStop
BASS_ChannelUpdate
BASS_ErrorGetCode
BASS_FXGetParameters
BASS_FXReset
BASS_FXSetParameters
BASS_Free
BASS_Get3DFactors
BASS_Get3DPosition
BASS_GetCPU
BASS_GetConfig
BASS_GetConfigPtr
BASS_GetDSoundObject
BASS_GetDevice
BASS_GetDeviceInfo
BASS_GetEAXParameters
BASS_GetInfo
BASS_GetVersion
BASS_GetVolume
BASS_Init
BASS_MusicFree
BASS_MusicLoad
BASS_Pause
BASS_PluginFree
BASS_PluginGetInfo
BASS_PluginLoad
BASS_RecordFree
BASS_RecordGetDevice
BASS_RecordGetDeviceInfo
BASS_RecordGetInfo
BASS_RecordGetInput
BASS_RecordGetInputName
BASS_RecordInit
BASS_RecordSetDevice
BASS_RecordSetInput
BASS_RecordStart
BASS_SampleCreate
BASS_SampleFree
BASS_SampleGetChannel
BASS_SampleGetChannels
BASS_SampleGetData
BASS_SampleGetInfo
BASS_SampleLoad
BASS_SampleSetData
BASS_SampleSetInfo
BASS_SampleStop
BASS_Set3DFactors
BASS_Set3DPosition
BASS_SetConfig
BASS_SetConfigPtr
BASS_SetDevice
BASS_SetEAXParameters
BASS_SetVolume
BASS_Start
BASS_Stop
BASS_StreamCreate
BASS_StreamCreateFile
BASS_StreamCreateFileUser
BASS_StreamCreateURL
BASS_StreamFree
BASS_StreamGetFilePosition
BASS_StreamPutData
BASS_StreamPutFileData
BASS_Update
_

Sections

Size: 92KB - Virtual size: 376KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 568B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/cleo.asi
.dll windows:5 windows x86 arch:x86

33a95cd1586ffc69e160bd30e91f8847

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

bass

BASS_Set3DPosition
BASS_ErrorGetCode
BASS_Apply3D
BASS_Set3DFactors
BASS_Init
BASS_StreamFree
BASS_StreamCreateFile
BASS_ChannelPlay
BASS_ChannelPause
BASS_ChannelSetPosition
BASS_ChannelBytes2Seconds
BASS_ChannelGetLength
BASS_ChannelIsActive
BASS_ChannelGetAttribute
BASS_ChannelSetAttribute
BASS_ChannelFlags
BASS_ChannelSet3DAttributes
BASS_ChannelSet3DPosition
BASS_Free
BASS_GetVersion

kernel32

ExitProcess
VirtualProtect
GetModuleHandleA
FreeLibrary
FindClose
FindNextFileA
LoadLibraryA
FindFirstFileA
CreateDirectoryA
SetCurrentDirectoryA
GetFileAttributesA
GetProcAddress
SetEndOfFile
CreateFileW
LoadLibraryW
RaiseException
EncodePointer
DecodePointer
RtlUnwind
GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
SetFilePointer
ReadFile
CloseHandle
Sleep
HeapSize
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeW
WriteConsoleW
SetStdHandle
CreateFileA
HeapReAlloc
GetProcessHeap

user32

MessageBoxA
GetKeyState

Exports

Exports

_CLEO_GetFloatOpcodeParam@4
_CLEO_GetGameVersion@0
_CLEO_GetIntOpcodeParam@4
_CLEO_GetOperandType@4
_CLEO_GetVersion@0
_CLEO_ReadStringOpcodeParam@12
_CLEO_RecordOpcodeParams@8
_CLEO_RegisterOpcode@8
_CLEO_RetrieveOpcodeParams@8
_CLEO_SetFloatOpcodeParam@8
_CLEO_SetIntOpcodeParam@8
_CLEO_SetThreadCondResult@8
_CLEO_SkipOpcodeParams@8
_CLEO_ThreadJumpAtLabelPtr@8
_CLEO_WriteStringOpcodeParam@8
missionLocals
opcodeParams
staticThreads

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/cleo/FileSystemOperations.cleo
.dll windows:5 windows x86 arch:x86

2db9b233bfe458dcab37e310294308c1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

cleo.asi

_CLEO_RegisterOpcode@8
_CLEO_GetIntOpcodeParam@4
_CLEO_SetThreadCondResult@8
_CLEO_ReadStringOpcodeParam@12
_CLEO_GetVersion@0

msvcrt

sprintf
memset
strcmp

kernel32

DeleteFileA
FindNextFileA
MoveFileA
GetFileAttributesA
CreateDirectoryA
FindFirstFileA
RemoveDirectoryA
CopyFileA
SetFileAttributesA
FindClose

user32

MessageBoxA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 934B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/cleo/IniFiles.cleo
.dll windows:5 windows x86 arch:x86

4740eb3657d73a07a6f99c84692e0ca2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

cleo.asi

_CLEO_SetFloatOpcodeParam@8
_CLEO_GetVersion@0
_CLEO_GetOperandType@4
_CLEO_RegisterOpcode@8
_CLEO_GetIntOpcodeParam@4
_CLEO_SetThreadCondResult@8
_CLEO_WriteStringOpcodeParam@8
_CLEO_ReadStringOpcodeParam@12
_CLEO_GetFloatOpcodeParam@4
_CLEO_SetIntOpcodeParam@8
_CLEO_SkipOpcodeParams@8

msvcrt

strcat
atof
strcpy
_itoa
sprintf

kernel32

GetPrivateProfileStringA
GetCurrentDirectoryA
WritePrivateProfileStringA
GetPrivateProfileIntA

user32

MessageBoxA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/cleo/IntOperations.cleo
.dll windows:5 windows x86 arch:x86

d39470591fb89d07a6314a80058494b3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

cleo.asi

_CLEO_RegisterOpcode@8
_CLEO_GetIntOpcodeParam@4
_CLEO_SetIntOpcodeParam@8
_CLEO_GetVersion@0

user32

MessageBoxA

Sections

.text
Size: 512B - Virtual size: 502B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 82B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/cleo/scmlog.cleo
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/cleo/scmlog.ini
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/animgrp.dat
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/default.ide
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/gta.dat
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/handling.cfg
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/maps/LA/LAe.IPL
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/maps/LA/LAe2.IPL
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/maps/LA/LAhills.ipl
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/maps/LA/LAn.IPL
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/maps/LA/LAn2.ipl
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/maps/LA/LAs.ipl
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/maps/LA/LAs2.IPL
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/maps/LA/LAw.IPL
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/maps/LA/LAw2.ipl
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/maps/LA/LAwn.IPL
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/maps/SF/SFe.ipl
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/maps/SF/SFn.ipl
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/maps/SF/SFs.ipl
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/maps/SF/SFse.ipl
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/maps/SF/SFw.ipl
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/maps/country/countN2.ipl
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/maps/country/countryE.ipl
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/maps/country/countryN.ipl
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/maps/country/countryW.ipl
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/maps/country/countrys.ipl
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/maps/left.IDE
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/maps/vegas/vegasE.ipl
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/maps/vegas/vegasN.ipl
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/maps/vegas/vegasS.ipl
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/maps/vegas/vegasW.ipl
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/melee.dat
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/ped.dat
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/pedgrp.dat
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/peds.ide
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/pedstats.dat
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/popcycle.dat
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/script/main.scm
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/script/script.img
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/data/weapon.dat
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/models/Txd/LOADSCS.txd
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/models/fonts.txd
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/models/fronten1.txd
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/models/fronten2.txd
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/models/fronten3.txd
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/models/fronten_pc.txd
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/models/hud.txd
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/models/zombie.img
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/ogg.dll
.dll windows:4 windows x86 arch:x86

1062adc6750f49ebe981032e96c0b521

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
HeapReAlloc
HeapFree
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind

Exports

Exports

ogg_packet_clear
ogg_page_bos
ogg_page_checksum_set
ogg_page_continued
ogg_page_eos
ogg_page_granulepos
ogg_page_packets
ogg_page_pageno
ogg_page_serialno
ogg_page_version
ogg_stream_clear
ogg_stream_destroy
ogg_stream_eos
ogg_stream_flush
ogg_stream_init
ogg_stream_packetin
ogg_stream_packetout
ogg_stream_packetpeek
ogg_stream_pagein
ogg_stream_pageout
ogg_stream_reset
ogg_stream_reset_serialno
ogg_sync_buffer
ogg_sync_clear
ogg_sync_destroy
ogg_sync_init
ogg_sync_pageout
ogg_sync_pageseek
ogg_sync_reset
ogg_sync_wrote
oggpackB_adv
oggpackB_adv1
oggpackB_bits
oggpackB_bytes
oggpackB_get_buffer
oggpackB_look
oggpackB_look1
oggpackB_read
oggpackB_read1
oggpackB_readinit
oggpackB_reset
oggpackB_write
oggpackB_writealign
oggpackB_writeclear
oggpackB_writecopy
oggpackB_writeinit
oggpackB_writetrunc
oggpack_adv
oggpack_adv1
oggpack_bits
oggpack_bytes
oggpack_get_buffer
oggpack_look
oggpack_look1
oggpack_read
oggpack_read1
oggpack_readinit
oggpack_reset
oggpack_write
oggpack_writealign
oggpack_writeclear
oggpack_writecopy
oggpack_writeinit
oggpack_writetrunc

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/text/american.gxt
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/text/spanish.gxt
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/vorbis.dll
.dll windows:4 windows x86 arch:x86

e254aedcc8e06eb8e51b381cba42e6a2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ogg

oggpack_writealign
oggpack_readinit
oggpack_look
oggpack_adv
oggpack_read
oggpack_write
oggpack_writeclear
oggpack_writeinit
oggpack_reset
oggpack_get_buffer
oggpack_bytes

kernel32

LCMapStringA
ReadFile
SetEndOfFile
LoadLibraryA
GetOEMCP
GetACP
HeapAlloc
HeapFree
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
EnterCriticalSection
LeaveCriticalSection
GetLastError
CloseHandle
InitializeCriticalSection
SetStdHandle
GetFileType
WriteFile
GetProcAddress
GetModuleHandleA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
RaiseException
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
FlushFileBuffers
SetFilePointer
CreateFileA
GetCPInfo
RtlUnwind
GetStringTypeA
GetStringTypeW

Exports

Exports

_analysis_output_always
_floor_P
_mapping_P
_residue_P
vorbis_analysis
vorbis_analysis_blockout
vorbis_analysis_buffer
vorbis_analysis_headerout
vorbis_analysis_init
vorbis_analysis_wrote
vorbis_bitrate_addblock
vorbis_bitrate_flushpacket
vorbis_block_clear
vorbis_block_init
vorbis_comment_add
vorbis_comment_add_tag
vorbis_comment_clear
vorbis_comment_init
vorbis_comment_query
vorbis_comment_query_count
vorbis_commentheader_out
vorbis_dsp_clear
vorbis_encode_ctl
vorbis_encode_init
vorbis_encode_init_vbr
vorbis_encode_setup_init
vorbis_encode_setup_managed
vorbis_encode_setup_vbr
vorbis_granule_time
vorbis_info_blocksize
vorbis_info_clear
vorbis_info_init
vorbis_packet_blocksize
vorbis_synthesis
vorbis_synthesis_blockin
vorbis_synthesis_halfrate
vorbis_synthesis_halfrate_p
vorbis_synthesis_headerin
vorbis_synthesis_init
vorbis_synthesis_lapout
vorbis_synthesis_pcmout
vorbis_synthesis_read
vorbis_synthesis_restart
vorbis_synthesis_trackonly
vorbis_window

Sections

.text
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 896KB - Virtual size: 915KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/vorbisFile.dll
.dll windows:5 windows x86 arch:x86

af994122bbfcf1c47f473141958b5364

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindNextFileA
LoadLibraryA
FindFirstFileA
DisableThreadLibraryCalls
FindClose

user32

MessageBoxA

vorbishooked

ord1
ord2
ord3
ord4
ord5
ord6
ord7
ord8
ord9
ord10
ord11
ord12
ord13
ord14
ord15
ord16
ord17
ord18
ord19
ord20
ord21
ord22
ord23
ord24
ord25
ord26
ord27
ord28
ord29
ord30
ord31
ord32
ord33
ord34

Exports

Exports

ov_bitrate
ov_bitrate_instant
ov_clear
ov_comment
ov_crosslap
ov_halfrate
ov_halfrate_p
ov_info
ov_open
ov_open_callbacks
ov_pcm_seek
ov_pcm_seek_lap
ov_pcm_seek_page
ov_pcm_seek_page_lap
ov_pcm_tell
ov_pcm_total
ov_raw_seek
ov_raw_seek_lap
ov_raw_tell
ov_raw_total
ov_read
ov_read_float
ov_seekable
ov_serialnumber
ov_streams
ov_test
ov_test_callbacks
ov_test_open
ov_time_seek
ov_time_seek_lap
ov_time_seek_page
ov_time_seek_page_lap
ov_time_tell
ov_time_total

Sections

.text
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 98B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Left 4 Theft en español por GTA LOYALTY/A la carpeta raíz/vorbishooked.dll
.dll windows:4 windows x86 arch:x86

8ec5f91b35a203372803c35e3faa6597

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ogg

ogg_sync_clear
ogg_stream_init
ogg_sync_wrote
ogg_sync_buffer
ogg_sync_init
ogg_stream_packetout
ogg_stream_pagein
ogg_stream_reset_serialno
ogg_page_serialno
ogg_sync_pageseek
ogg_sync_reset
ogg_page_granulepos
ogg_page_eos
ogg_stream_reset
ogg_page_continued
ogg_stream_packetpeek
ogg_stream_clear

vorbis

vorbis_synthesis_headerin
vorbis_block_clear
vorbis_comment_init
vorbis_info_clear
vorbis_comment_clear
vorbis_info_init
vorbis_packet_blocksize
vorbis_synthesis_halfrate
vorbis_synthesis_halfrate_p
vorbis_synthesis_restart
vorbis_synthesis_read
vorbis_synthesis_pcmout
vorbis_synthesis_blockin
vorbis_synthesis_trackonly
vorbis_info_blocksize
vorbis_block_init
vorbis_synthesis_init
vorbis_synthesis
_analysis_output_always
vorbis_synthesis_lapout
vorbis_window
vorbis_dsp_clear

kernel32

RtlUnwind
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
InterlockedIncrement
InterlockedDecrement
FlushFileBuffers
SetStdHandle
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetCurrentProcess
TerminateProcess
GetModuleHandleA
GetProcAddress
RaiseException
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
CloseHandle
ReadFile

Exports

Exports

ov_bitrate
ov_bitrate_instant
ov_clear
ov_comment
ov_crosslap
ov_halfrate
ov_halfrate_p
ov_info
ov_open
ov_open_callbacks
ov_pcm_seek
ov_pcm_seek_lap
ov_pcm_seek_page
ov_pcm_seek_page_lap
ov_pcm_tell
ov_pcm_total
ov_raw_seek
ov_raw_seek_lap
ov_raw_tell
ov_raw_total
ov_read
ov_read_float
ov_seekable
ov_serialnumber
ov_streams
ov_test
ov_test_callbacks
ov_test_open
ov_time_seek
ov_time_seek_lap
ov_time_seek_page
ov_time_seek_page_lap
ov_time_tell
ov_time_total

Sections

.text
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Left 4 Theft en español por GTA LOYALTY/Traducido por GTA Loyalty.txt

Sharing

General

Malware Config

Signatures

Files

83fa14dca08906691b3ff3778b54b308

Headers

File Characteristics

Imports

winmm

vorbisfile

ws2_32

eax

kernel32

user32

gdi32

advapi32

ole32

Sections

.text Size: 4.3MB - Virtual size: 4.3MB

_rwcseg Size: 1KB - Virtual size: 4KB

.rdata Size: 301KB - Virtual size: 304KB

.data Size: 256KB - Virtual size: 4.0MB

_TEXT_HA Size: 67KB - Virtual size: 68KB

_rwdseg Size: 512B - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 4KB

.text Size: 6.3MB - Virtual size: 6.3MB

.init Size: 22KB - Virtual size: 24KB

.data Size: 2.3MB - Virtual size: 2.3MB

.HOODLUM Size: 132KB - Virtual size: 132KB

f1766bd56817679549e65f24a8e8be8d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcr90

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 864B

.rsrc Size: 1024B - Virtual size: 688B

.reloc Size: 512B - Virtual size: 342B

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 524KB

UPX1 Size: 8KB - Virtual size: 8KB

.rsrc Size: 512B - Virtual size: 4KB

Headers

File Characteristics

Sections

CODE Size: 9KB - Virtual size: 9KB

DATA Size: 1024B - Virtual size: 848B

BSS Size: - Virtual size: 489KB

.idata Size: 1024B - Virtual size: 894B

.rdata Size: 512B - Virtual size: 33B

.reloc Size: 1024B - Virtual size: 800B

.rsrc Size: 512B - Virtual size: 512B

Headers

File Characteristics

Exports

Exports

Sections

Size: 92KB - Virtual size: 376KB

.rsrc Size: 568B - Virtual size: 4KB

Size: - Virtual size: 8KB

Size: 4KB - Virtual size: 3KB

33a95cd1586ffc69e160bd30e91f8847

Headers

DLL Characteristics

File Characteristics

Imports

bass

kernel32

user32

Exports

Exports

Sections

.text Size: 95KB - Virtual size: 94KB

.text
Size: 4.3MB - Virtual size: 4.3MB

_rwcseg
Size: 1KB - Virtual size: 4KB

.rdata
Size: 301KB - Virtual size: 304KB

.data
Size: 256KB - Virtual size: 4.0MB

_TEXT_HA
Size: 67KB - Virtual size: 68KB

_rwdseg
Size: 512B - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 4KB

.text
Size: 6.3MB - Virtual size: 6.3MB

.init
Size: 22KB - Virtual size: 24KB

.data
Size: 2.3MB - Virtual size: 2.3MB

.HOODLUM
Size: 132KB - Virtual size: 132KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 864B

.rsrc
Size: 1024B - Virtual size: 688B

.reloc
Size: 512B - Virtual size: 342B

UPX0
Size: - Virtual size: 524KB

UPX1
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 512B - Virtual size: 4KB

CODE
Size: 9KB - Virtual size: 9KB

DATA
Size: 1024B - Virtual size: 848B

BSS
Size: - Virtual size: 489KB

.idata
Size: 1024B - Virtual size: 894B

.rdata
Size: 512B - Virtual size: 33B

.reloc
Size: 1024B - Virtual size: 800B

.rsrc
Size: 512B - Virtual size: 512B

.rsrc
Size: 568B - Virtual size: 4KB

.text
Size: 95KB - Virtual size: 94KB

.rdata
Size: 33KB - Virtual size: 33KB

.data
Size: 6KB - Virtual size: 144KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 9KB - Virtual size: 8KB

.text
Size: 1KB - Virtual size: 1KB

.rdata
Size: 1024B - Virtual size: 934B

.reloc
Size: 512B - Virtual size: 180B

.text
Size: 1KB - Virtual size: 1KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: - Virtual size: 4B

.reloc
Size: 512B - Virtual size: 172B

.text
Size: 512B - Virtual size: 502B

.rdata
Size: 512B - Virtual size: 320B

.reloc
Size: 512B - Virtual size: 82B

CODE
Size: 82KB - Virtual size: 82KB

DATA
Size: 2KB - Virtual size: 2KB

BSS
Size: - Virtual size: 2KB

.idata
Size: 3KB - Virtual size: 2KB

.reloc
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 6KB - Virtual size: 6KB

.text
Size: 20KB - Virtual size: 18KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 1KB