BlackOpsColdWar[.]exe

Sharing

Copy URL

Twitter E-mail

Reason

too many matches

General

Target

BlackOpsColdWar.exe
Size

298.1MB
MD5

4e6af26183709d58ffb20925e76eb461
SHA1

60c2b61453aadc020d043521472af2eb8e84c711
SHA256

1a49ae51a5155753e76c99c802a90811d3b95e984d543f43f27d1b3dc1b40275
SHA512

db1355494eadd06eb72941c485ed9e111c57ab9c94c8cd7f4a25c1a6b6951b77c75d2615aab2ff317d5d2ed68f0f41def25e21a5e8701647991391d49a425de3
SSDEEP

3145728:dQYXbqQrcjoyIaVsvwNNkxAfWiZ5vI9bKI6+RS9x6:yYOQIjOa+YbCuh9Z6

Score

1^/10

Malware Config

Signatures

Files

BlackOpsColdWar.exe
.exe windows:6 windows x64 arch:x64

ea1a30989172bc6e2b26b67f94017fcd

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:b1:bb:7d:2d:97:53:e6:0e:74:bf:67:84:76:c0:71
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

30-11-2022 00:00

Not After

10-01-2025 23:59

Subject

SERIALNUMBER=2256184,CN=Activision Publishing Inc,OU=Activision Publishing Inc,O=Activision Publishing Inc,L=SANTA MONICA,ST=CALIFORNIA,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e4:62:84:85:18:95:12:b6:40:49:24:16:7a:3a:41:ed:48:8f:25:85:0c:4b:4b:e0:da:eb:c9:6f:c3:68:b7:cb
Signer

Actual PE Digest

e4:62:84:85:18:95:12:b6:40:49:24:16:7a:3a:41:ed:48:8f:25:85:0c:4b:4b:e0:da:eb:c9:6f:c3:68:b7:cb

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

shlwapi

PathCanonicalizeW
PathRenameExtensionW
PathRelativePathToW
PathIsRelativeW

kernel32

GetThreadId
CreateDirectoryW
CreateFileW
DeleteFileW
FindFirstFileW
FindNextFileW
GetFileAttributesExW
SetFileAttributesW
LoadLibraryW
CopyFileW
MoveFileExW
GetVersionExA
SetFilePointerEx
RtlCaptureStackBackTrace
LoadLibraryExA
VerifyVersionInfoW
VirtualQuery
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
CreateToolhelp32Snapshot
Process32First
Process32Next
SetThreadExecutionState
GetFinalPathNameByHandleW
GetSystemTimeAsFileTime
GetDynamicTimeZoneInformation
ReadFileEx
GetOverlappedResult
LocalFree
FormatMessageA
SetErrorMode
GlobalAlloc
GlobalSize
GlobalUnlock
GlobalLock
GetTimeFormatEx
GetLocaleInfoEx
GetVolumeNameForVolumeMountPointA
GetVolumePathNameA
TryAcquireSRWLockExclusive
GetCommandLineA
TryEnterCriticalSection
GetExitCodeThread
SetProcessPreferredUILanguages
GetUserPreferredUILanguages
LoadLibraryExW
CompareStringA
GetLocaleInfoA
IsDBCSLeadByteEx
GetModuleFileNameA
GetModuleHandleExA
GetFileAttributesA
CreateFileA
FlushFileBuffers
GetFileInformationByHandle
GetFileSizeEx
GetFileTime
ReadFile
SetFilePointer
WriteFile
CloseHandle
GetSystemTime
SystemTimeToFileTime
InitializeCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetOEMCP
IsValidCodePage
SetEndOfFile
HeapReAlloc
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
HeapSize
WriteConsoleW
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileType
RtlUnwind
RtlPcToFileHeader
GetConsoleWindow
SetConsoleTitleA
WriteConsoleA
AllocConsole
GetStdHandle
UnregisterWaitEx
DuplicateHandle
UnregisterWait
RegisterWaitForSingleObject
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetThreadPriority
SignalObjectAndWait
CreateTimerQueue
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
FreeLibraryAndExitThread
GetThreadTimes
LCMapStringW
CompareStringW
GetCPInfo
DecodePointer
EncodePointer
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetStringTypeW
InitializeSListHead
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetFileSize
GetTickCount64
lstrcmpW
ExitThread
ConvertThreadToFiber
CreateFiber
SetUnhandledExceptionFilter
SwitchToFiber
CreateMutexA
IsProcessorFeaturePresent
GetVersionExW
GlobalFree
GetSystemDefaultLangID
GetUserDefaultLangID
GetACP
GetNativeSystemInfo
IsDebuggerPresent
GetCurrentDirectoryW
FormatMessageW
GetVolumePathNameW
GetVolumeInformationW
GetDriveTypeW
GetTickCount
GetProcessAffinityMask
GetLogicalProcessorInformation
GetThreadContext
SuspendThread
SetThreadPriority
CreateProcessA
ExitProcess
GetProcessHeap
HeapFree
HeapAlloc
SetPriorityClass
GetCurrentProcess
GetComputerNameExA
GetEnvironmentVariableA
WaitForMultipleObjects
RaiseException
VerSetConditionMask
GetUserDefaultLocaleName
AcquireSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockShared
ReleaseSRWLockExclusive
InitializeSRWLock
GetModuleFileNameW
CreateProcessW
GetDiskFreeSpaceExW
FindVolumeClose
FindNextVolumeW
OpenMutexW
FlushViewOfFile
FindFirstVolumeW
DeviceIoControl
GetUserDefaultUILanguage
GetLocaleInfoW
GetTimeZoneInformation
GetComputerNameW
RtlUnwindEx
SetCriticalSectionSpinCount
SetHandleInformation
ReadDirectoryChangesW
OpenProcess
QueueUserAPC
CancelIo
RemoveDirectoryW
FindFirstFileExW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
SleepConditionVariableSRW
CreateSemaphoreA
ExpandEnvironmentStringsA
VerifyVersionInfoA
GetSystemDirectoryA
InitializeCriticalSectionEx
CreateSemaphoreW
ReleaseSemaphore
GetProcAddress
OutputDebugStringA
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
GetModuleHandleExW
GetErrorMode
FlsFree
FlsSetValue
FlsAlloc
OutputDebugStringW
GetFullPathNameW
FileTimeToSystemTime
CompareFileTime
lstrcmpA
SetLastError
GetSystemDirectoryW
LocalAlloc
SetEnvironmentVariableW
DeleteCriticalSection
GetCurrentProcessId
GetCurrentThreadId
GetSystemInfo
CreateEventW
CreateMutexW
ReleaseMutex
GetTempPathW
GetTempFileNameW
GetFileAttributesW
GetComputerNameA
LoadLibraryA
FreeLibrary
WaitForSingleObjectEx
SleepEx
CreateThread
VirtualFree
VirtualAlloc
GetModuleHandleA
CreateEventA
CreateEventExA
GlobalMemoryStatusEx
WaitForSingleObject
Sleep
SwitchToThread
LeaveCriticalSection
GetLastError
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
GetCurrentThread
ResumeThread
GetModuleHandleW
SetThreadAffinityMask
QueryPerformanceCounter
QueryPerformanceFrequency
MultiByteToWideChar
WideCharToMultiByte
GetDiskFreeSpaceExA
FindClose
SetEvent
ResetEvent
WaitForMultipleObjectsEx
DeleteFiber
VirtualProtect
SleepConditionVariableCS
AddVectoredExceptionHandler
RemoveVectoredExceptionHandler

user32

CharUpperBuffW
GetKeyNameTextW
ToUnicode
MapVirtualKeyA
FlashWindowEx
PostMessageA
GetCaretBlinkTime
GetWindowRect
GetWindowLongA
LoadStringW
SendMessageA
SendMessageTimeoutA
IsWindow
DestroyWindow
MessageBoxA
GetMonitorInfoW
EnumDisplayDevicesW
EnumDisplayDevicesA
ShowWindow
SetWindowPos
GetWindowPlacement
GetSystemMetrics
GetForegroundWindow
SetForegroundWindow
SetWindowTextW
AdjustWindowRect
AdjustWindowRectEx
IntersectRect
SetWindowLongPtrA
EnumDisplaySettingsA
GetClientRect
EndPaint
MonitorFromRect
MonitorFromWindow
GetMonitorInfoA
EnumDisplayMonitors
GetTitleBarInfo
RegisterRawInputDevices
GetDC
ReleaseDC
GetDesktopWindow
EnumThreadWindows
ChangeDisplaySettingsA
ShowCursor
BringWindowToTop
GetActiveWindow
EnableWindow
GetKeyboardLayout
BeginPaint
UpdateWindow
MessageBoxW
GetParent
GetWindowThreadProcessId
LoadIconA
wsprintfW
GetMessageW
TranslateMessage
DispatchMessageW
DefWindowProcW
PostQuitMessage
RegisterClassW
CharLowerA
RegisterClassExW
CreateWindowExW
UnhookWindowsHookEx
IsWindowVisible
SetTimer
InvalidateRect
GetFocus
CharNextW
SendMessageW
PtInRect
SetRect
ClipCursor
ClientToScreen
GetCursorPos
SetCursorPos
EnumDisplaySettingsW
SetProcessDPIAware
SetFocus
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
GetRawInputBuffer
SystemParametersInfoA
CallNextHookEx
FillRect
SetWindowsHookExA
ScreenToClient
SetCursor
ReleaseCapture
SetCapture
GetAsyncKeyState
GetKeyState
WaitMessage
PostMessageW
PeekMessageW
RegisterWindowMessageA
LoadImageA
LoadCursorA
GetWindow
EnumWindows
KillTimer

gdi32

BitBlt
CreateCompatibleDC
CreateSolidBrush
DeleteDC
DeleteObject
GetPixel
SelectObject
SetPixel
GetObjectA
GetStockObject
SetDeviceGammaRamp
GetDeviceCaps
CreateDCW

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW
RegQueryValueExA
CryptReleaseContext
CryptAcquireContextW
CryptGetHashParam
CryptCreateHash
RegGetValueW
CryptEncrypt
CryptImportKey
CryptDestroyKey
CryptHashData
CryptDestroyHash
RegOpenKeyExW
GetUserNameW
RegQueryValueExW
RegCreateKeyExW
CryptAcquireContextA
CryptGenRandom
GetUserNameA
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegGetValueA
RegCreateKeyExA
RegDeleteKeyA
RegFlushKey
RegSetValueExA
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegSetValueExW

shell32

ShellExecuteW
ShellExecuteA
CommandLineToArgvW
SHGetKnownFolderPath
SHGetFolderPathW

ole32

CoInitializeSecurity
CoUninitialize
CoTaskMemFree
CoCreateInstance
PropVariantClear
CoSetProxyBlanket
CoInitializeEx
OleRun

oleaut32

VariantInit
SysStringLen
SysStringByteLen
VariantClear
SysFreeString
SysAllocString
VariantChangeType

rpcrt4

UuidCreate
UuidToStringA
UuidFromStringA
RpcStringFreeA
UuidCreateSequential

dxgi

CreateDXGIFactory1

winmm

timeGetTime
timeBeginPeriod
timeEndPeriod
mixerGetControlDetailsW
mixerGetLineControlsW
mixerGetID
mixerGetLineInfoW
waveInGetDevCapsW
waveOutGetDevCapsW
timeGetDevCaps

oo2core_8_win64

OodleLZDecoder_MemorySizeNeeded
OodleLZ_Decompress

bink2w64

BinkUtilFree
BinkRegisterGPUDataBuffers
BinkGetGPUDataBuffersInfo
BinkNextFrame
BinkDoFrame
BinkRequestStopAsyncThread
BinkOpen
BinkUtilMalloc
BinkGetError
BinkClose
BinkSetMemory
BinkSetIOSize
BinkSetSoundTrack
BinkGetRealtime
BinkWaitStopAsyncThread
BinkPause
BinkDoFrameAsyncWait
BinkDoFrameAsync
BinkStartAsyncThread
BinkSetWillLoop
BinkControlBackgroundIO
BinkSetOSFileCallbacks

winhttp

WinHttpQueryHeaders
WinHttpSetOption
WinHttpReadData
WinHttpConnect
WinHttpCloseHandle
WinHttpOpen
WinHttpCrackUrl
WinHttpSetStatusCallback
WinHttpGetProxyForUrl
WinHttpGetDefaultProxyConfiguration
WinHttpGetIEProxyConfigForCurrentUser
WinHttpQueryDataAvailable
WinHttpQueryOption
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpOpenRequest

imm32

ImmGetContext
ImmGetDefaultIMEWnd
ImmGetIMEFileNameA
ImmReleaseContext
ImmAssociateContext
ImmIsIME
ImmGetCompositionStringW
ImmSetCompositionStringW
ImmGetCandidateListW
ImmGetConversionStatus
ImmSetConversionStatus
ImmGetOpenStatus
ImmNotifyIME
ImmGetVirtualKey
ImmAssociateContextEx

powrprof

CallNtPowerInformation

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory
RoInitialize
RoUninitialize

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference

mfplat

MFCreateMemoryBuffer
MFCreateWaveFormatExFromMFMediaType
MFShutdown
MFStartup
MFCreateSample
MFCreateMediaType

ws2_32

shutdown
WSAStringToAddressA
WSASetLastError
WSASocketA
WSAAddressToStringA
WSAIoctl
WSACloseEvent
WSACreateEvent
WSAAddressToStringW
getaddrinfo
WSAGetLastError
inet_addr
WSACleanup
WSAStartup
socket
setsockopt
send
recv
htons
connect
closesocket
inet_pton
freeaddrinfo
WSASocketW
inet_ntoa
getsockname
getpeername
inet_ntop
ntohs
listen
gethostname
gethostbyname
bind
accept
__WSAFDIsSet
select
sendto
recvfrom
ioctlsocket
ntohl
htonl
getsockopt

discord_game_sdk

DiscordCreate

iphlpapi

GetAdaptersInfo

psapi

GetModuleInformation
GetPerformanceInfo
GetProcessMemoryInfo

comctl32

InitCommonControlsEx
ord345

wlanapi

WlanCloseHandle
WlanOpenHandle
WlanFreeMemory
WlanEnumInterfaces

wtsapi32

WTSUnRegisterSessionNotification
WTSRegisterSessionNotification

xinput9_1_0

XInputSetState
XInputGetState

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW
SetupDiCreateDeviceInfoList
SetupDiDeleteDeviceInterfaceData
SetupDiOpenDeviceInterfaceW
SetupDiDeleteDeviceInfo
SetupDiGetDeviceInstanceIdW
CM_Get_Sibling
CM_Get_Parent
CM_Get_Device_IDW
CM_Get_Child
SetupDiOpenDevRegKey
SetupDiGetDeviceInstanceIdA
SetupDiOpenDeviceInfoW
SetupDiEnumDeviceInfo

crypt32

CryptDecodeObjectEx
CertGetCertificateContextProperty
CertVerifyTimeValidity
CertFindExtension
CryptMemFree
CertFreeCertificateChainEngine
CryptStringToBinaryA
CertCreateCertificateChainEngine
CertFreeCertificateChain
CertGetCertificateChain
CertGetNameStringA
CertNameToStrA
CertAddCertificateContextToStore
CertFreeCertificateContext
CertCreateCertificateContext
CertGetIssuerCertificateFromStore
CertFindCertificateInStore
CertCloseStore
CertOpenStore
CryptUnprotectData
CryptProtectData
CertVerifyCertificateChainPolicy
CryptQueryObject

hid

HidD_GetProductString
HidD_GetSerialNumberString
HidD_GetAttributes
HidD_GetManufacturerString
HidD_SetFeature
HidP_GetCaps
HidP_GetValueCaps
HidD_GetFeature
HidD_GetHidGuid
HidD_GetPreparsedData
HidD_FreePreparsedData

bcrypt

BCryptHashData
BCryptCreateHash
BCryptFinishHash
BCryptDestroyKey
BCryptCloseAlgorithmProvider
BCryptSetProperty
BCryptDecrypt
BCryptEncrypt
BCryptOpenAlgorithmProvider
BCryptDestroyHash
BCryptGenerateSymmetricKey

Exports

Exports

AmdPowerXpressRequestHighPerformance
NVSDK_NGX_D3D12_AllocateParameters
NVSDK_NGX_D3D12_CreateFeature
NVSDK_NGX_D3D12_DestroyParameters
NVSDK_NGX_D3D12_EvaluateFeature
NVSDK_NGX_D3D12_EvaluateFeature_C
NVSDK_NGX_D3D12_GetCapabilityParameters
NVSDK_NGX_D3D12_GetParameters
NVSDK_NGX_D3D12_GetScratchBufferSize
NVSDK_NGX_D3D12_ReleaseFeature
NVSDK_NGX_D3D12_Shutdown
NVSDK_NGX_Parameter_GetD
NVSDK_NGX_Parameter_GetD3d11Resource
NVSDK_NGX_Parameter_GetD3d12Resource
NVSDK_NGX_Parameter_GetF
NVSDK_NGX_Parameter_GetI
NVSDK_NGX_Parameter_GetUI
NVSDK_NGX_Parameter_GetULL
NVSDK_NGX_Parameter_GetVoidPointer
NVSDK_NGX_Parameter_SetD
NVSDK_NGX_Parameter_SetD3d11Resource
NVSDK_NGX_Parameter_SetD3d12Resource
NVSDK_NGX_Parameter_SetF
NVSDK_NGX_Parameter_SetI
NVSDK_NGX_Parameter_SetUI
NVSDK_NGX_Parameter_SetULL
NVSDK_NGX_Parameter_SetVoidPointer
NvOptimusEnablement
__swprintf_l
__vswprintf_l
_fprintf_l
_fprintf_p
_fprintf_p_l
_fprintf_s_l
_fscanf_l
_fscanf_s_l
_fwprintf_l
_fwprintf_p
_fwprintf_p_l
_fwprintf_s_l
_fwscanf_l
_fwscanf_s_l
_printf_l
_printf_p
_printf_p_l
_printf_s_l
_scanf_l
_scanf_s_l
_scprintf
_scprintf_l
_scprintf_p
_scprintf_p_l
_scwprintf
_scwprintf_l
_scwprintf_p
_scwprintf_p_l
_snprintf
_snprintf_c
_snprintf_c_l
_snprintf_l
_snprintf_s
_snprintf_s_l
_snscanf
_snscanf_l
_snscanf_s
_snscanf_s_l
_snwprintf
_snwprintf_l
_snwprintf_s
_snwprintf_s_l
_snwscanf
_snwscanf_l
_snwscanf_s
_snwscanf_s_l
_sprintf_l
_sprintf_p
_sprintf_p_l
_sprintf_s_l
_sscanf_l
_sscanf_s_l
_swprintf
_swprintf_c
_swprintf_c_l
_swprintf_l
_swprintf_p
_swprintf_p_l
_swprintf_s_l
_swscanf_l
_swscanf_s_l
_vfprintf_l
_vfprintf_p
_vfprintf_p_l
_vfprintf_s_l
_vfscanf_l
_vfscanf_s_l
_vfwprintf_l
_vfwprintf_p
_vfwprintf_p_l
_vfwprintf_s_l
_vfwscanf_l
_vfwscanf_s_l
_vprintf_l
_vprintf_p
_vprintf_p_l
_vprintf_s_l
_vscanf_l
_vscanf_s_l
_vscprintf
_vscprintf_l
_vscprintf_p
_vscprintf_p_l
_vscwprintf
_vscwprintf_l
_vscwprintf_p
_vscwprintf_p_l
_vsnprintf
_vsnprintf_c
_vsnprintf_c_l
_vsnprintf_l
_vsnprintf_s
_vsnprintf_s_l
_vsnwprintf
_vsnwprintf_l
_vsnwprintf_s
_vsnwprintf_s_l
_vsnwscanf_l
_vsnwscanf_s_l
_vsprintf_l
_vsprintf_p
_vsprintf_p_l
_vsprintf_s_l
_vsscanf_l
_vsscanf_s_l
_vswprintf
_vswprintf_c
_vswprintf_c_l
_vswprintf_l
_vswprintf_p
_vswprintf_p_l
_vswprintf_s_l
_vswscanf_l
_vswscanf_s_l
_vwprintf_l
_vwprintf_p
_vwprintf_p_l
_vwprintf_s_l
_vwscanf_l
_vwscanf_s_l
_wprintf_l
_wprintf_p
_wprintf_p_l
_wprintf_s_l
_wscanf_l
_wscanf_s_l
agsCheckDriverVersion
agsDeInit
agsDriverExtensionsDX12_CreateCommandList
agsDriverExtensionsDX12_CreateDevice
agsDriverExtensionsDX12_CreateFromDevice
agsDriverExtensionsDX12_CreateGraphicsPipelineState
agsDriverExtensionsDX12_Destroy
agsDriverExtensionsDX12_DestroyCommandList
agsDriverExtensionsDX12_DestroyDevice
agsDriverExtensionsDX12_PopMarker
agsDriverExtensionsDX12_PushMarker
agsDriverExtensionsDX12_SetDepthBounds
agsDriverExtensionsDX12_SetMarker
agsInit
agsSetDisplayMode
fprintf
fprintf_s
fscanf
fscanf_s
fwprintf
fwprintf_s
fwscanf
fwscanf_s
printf
printf_s
scanf
scanf_s
snprintf
sprintf
sprintf_s
sscanf
sscanf_s
swprintf
swprintf_s
swscanf
swscanf_s
vfprintf
vfprintf_s
vfscanf
vfscanf_s
vfwprintf
vfwprintf_s
vfwscanf
vfwscanf_s
vprintf
vprintf_s
vscanf
vscanf_s
vsnprintf
vsnprintf_s
vsprintf
vsprintf_s
vsscanf
vsscanf_s
vswprintf
vswprintf_s
vswscanf
vswscanf_s
vwprintf
vwprintf_s
vwscanf
vwscanf_s
wprintf
wprintf_s
wscanf
wscanf_s

Sections

.text
Size: 215.4MB - Virtual size: 215.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7.1MB - Virtual size: 205.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 298KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 65.5MB - Virtual size: 65.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

Errors

General

Malware Config

Signatures

Files

ea1a30989172bc6e2b26b67f94017fcd

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

05:b1:bb:7d:2d:97:53:e6:0e:74:bf:67:84:76:c0:71Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

e4:62:84:85:18:95:12:b6:40:49:24:16:7a:3a:41:ed:48:8f:25:85:0c:4b:4b:e0:da:eb:c9:6f:c3:68:b7:cbSigner

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

rpcrt4

dxgi

winmm

oo2core_8_win64

bink2w64

winhttp

imm32

powrprof

api-ms-win-core-winrt-l1-1-0

api-ms-win-core-winrt-string-l1-1-0

mfplat

ws2_32

discord_game_sdk

iphlpapi

psapi

comctl32

wlanapi

wtsapi32

xinput9_1_0

version

setupapi

crypt32

hid

bcrypt

Exports

Exports

Sections

.text Size: 215.4MB - Virtual size: 215.4MB

.rdata Size: 5.6MB - Virtual size: 5.6MB

.data Size: 7.1MB - Virtual size: 205.7MB

.pdata Size: 1.4MB - Virtual size: 1.4MB

_RDATA Size: 2KB - Virtual size: 2KB

.rsrc Size: 2.8MB - Virtual size: 2.8MB

.reloc Size: 298KB - Virtual size: 298KB

.idata Size: 24KB - Virtual size: 24KB

.text Size: 65.5MB - Virtual size: 65.5MB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

05:b1:bb:7d:2d:97:53:e6:0e:74:bf:67:84:76:c0:71
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

e4:62:84:85:18:95:12:b6:40:49:24:16:7a:3a:41:ed:48:8f:25:85:0c:4b:4b:e0:da:eb:c9:6f:c3:68:b7:cb
Signer

.text
Size: 215.4MB - Virtual size: 215.4MB

.rdata
Size: 5.6MB - Virtual size: 5.6MB

.data
Size: 7.1MB - Virtual size: 205.7MB

.pdata
Size: 1.4MB - Virtual size: 1.4MB

_RDATA
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 2.8MB - Virtual size: 2.8MB

.reloc
Size: 298KB - Virtual size: 298KB

.idata
Size: 24KB - Virtual size: 24KB

.text
Size: 65.5MB - Virtual size: 65.5MB