1e467a57a422269e4098e9ea928baf464b814a74ace0c7ce0e2c030eed2b6880

Sharing

Copy URL Twitter E-mail

General

Target

1e467a57a422269e4098e9ea928baf464b814a74ace0c7ce0e2c030eed2b6880
Size

5.9MB
MD5

3a047b845f52d168a5cd74c3bdd62a67
SHA1

57b4b3ad34a84c5294dbc9ef3100a519b53e1b59
SHA256

1e467a57a422269e4098e9ea928baf464b814a74ace0c7ce0e2c030eed2b6880
SHA512

2cd3520d8460b33fef9159aefff144a14db6e017e4e671297376907949e9a9933322250fe647b7a8182f78d87962ff9d123bc660d53d0dbf15d79d56ff7982f0
SSDEEP

98304:JMFJPF5mb+9q/hJc/V3aDacLxlfvk7LaCAV+zt+RpsH9Mcdeg10:i7jm8qEdKOcbvk3aEIc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e467a57a422269e4098e9ea928baf464b814a74ace0c7ce0e2c030eed2b6880

Files

1e467a57a422269e4098e9ea928baf464b814a74ace0c7ce0e2c030eed2b6880
.exe windows:6 windows x86 arch:x86

d40ac6e09c82eb75368f4c4de084ca1c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileA
GetPrivateProfileStringA
lstrlenA
GlobalFree
WaitForSingleObjectEx
DeleteFileA
GetCurrentDirectoryA
GetTickCount
GetCurrentDirectoryW
ReadProcessMemory
GetCurrentProcessId
GetCurrentProcess
GetLastError
GetModuleFileNameA
FindNextFileA
FindFirstFileA
FindClose
MultiByteToWideChar
SetFileAttributesA
Module32Next
Module32First
CreateToolhelp32Snapshot
GetSystemInfo
OpenProcess
Sleep
CreateEventA
WaitForSingleObject
SetEvent
DeleteCriticalSection
LeaveCriticalSection
WriteConsoleW
HeapSize
PeekConsoleInputA
ReadConsoleInputW
GetNumberOfConsoleInputEvents
SetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
HeapReAlloc
ReadConsoleW
GetFileSizeEx
MoveFileExW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetTempPathW
GetConsoleMode
GetTimeZoneInformation
UnlockFileEx
LockFileEx
HeapCompact
CreateProcessW
SetFilePointerEx
VirtualQuery
VirtualProtect
VirtualAlloc
SetStdHandle
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
ExitProcess
GetDriveTypeW
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
InterlockedPushEntrySList
RaiseException
RtlUnwind
FlushFileBuffers
GetExitCodeThread
CreateThread
SwitchToThread
FlushViewOfFile
GetStdHandle
ExpandEnvironmentStringsW
ResetEvent
SetConsoleCtrlHandler
GetACP
QueryPerformanceFrequency
GetExitCodeProcess
GenerateConsoleCtrlEvent
GetProcessTimes
MoveFileW
GetSystemTime
GetFileType
CreateProcessA
SystemTimeToFileTime
SetEnvironmentVariableA
SetCurrentDirectoryW
DeleteFileW
GetFileAttributesExW
SetFileAttributesW
SetCurrentDirectoryA
GetVersion
DuplicateHandle
GetFileAttributesW
GetEnvironmentVariableA
CreatePipe
SetEnvironmentVariableW
SetFileTime
RemoveDirectoryW
FindNextFileW
GetFullPathNameW
GetFileAttributesExA
FindFirstFileW
CreateDirectoryW
SetErrorMode
LoadLibraryExA
TlsFree
EnterCriticalSection
InitializeCriticalSection
TlsGetValue
HeapAlloc
TlsAlloc
SetLastError
HeapFree
TlsSetValue
GetFullPathNameA
SetEndOfFile
IsDBCSLeadByte
OutputDebugStringW
GetConsoleCP
GetConsoleOutputCP
GetFileAttributesA
GetFileInformationByHandle
GetModuleFileNameW
WaitNamedPipeW
PeekNamedPipe
GetSystemTimeAsFileTime
GetModuleHandleW
CloseHandle
TryAcquireSRWLockExclusive
GlobalAlloc
CreateDirectoryA
RemoveDirectoryA
OutputDebugStringA
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
CreateFileA
GetFileSize
SetUnhandledExceptionFilter
GetCurrentThreadId
GetProcAddress
LoadLibraryA
ReadFile
SetFilePointer
WriteFile
GetModuleHandleA
GetVersionExA
GetSystemDirectoryA
FreeLibrary
GlobalUnlock
GlobalLock
lstrlenW
WideCharToMultiByte
CompareStringA
GetLocaleInfoA
ReleaseSemaphore
QueryPerformanceCounter
FormatMessageA
GetStringTypeW
InitializeCriticalSectionEx
LocalFree
EncodePointer
DecodePointer
LCMapStringEx
CompareStringEx
GetCPInfo
HeapValidate
GetProcessHeap
IsProcessorFeaturePresent
CreateFileW
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
UnhandledExceptionFilter
TerminateProcess
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetLocalTime

user32

GetKeyboardLayout
LoadCursorA
OpenClipboard
PostQuitMessage
SendMessageA
SetWindowPos
GetAsyncKeyState
GetCursorPos
ScreenToClient
FindWindowA
LoadIconA
SystemParametersInfoA
GetKeyState
ShowCursor
SetCursor
DestroyCursor
LoadImageA
SetCursorPos
ClientToScreen
ShowWindow
GetCapture
SetCapture
ReleaseCapture
GetMessageA
TranslateMessage
CloseClipboard
GetClipboardData
CharNextW
CharPrevA
InvalidateRect
GetClientRect
FillRect
SetRect
DispatchMessageA
OffsetRect
LoadStringA
MessageBoxA
GetKeyboardLayoutNameA
ChangeDisplaySettingsA
GetSystemMetrics
IsIconic
PeekMessageA
GetDC
ReleaseDC
AdjustWindowRectEx
DefWindowProcA
UnregisterClassA
RegisterClassExA
CreateWindowExA
IsWindow
DestroyWindow
MoveWindow
SetFocus
UpdateWindow
GetWindowLongA
SetWindowLongA
CharNextExA
CharPrevExA
RegisterClassA
GetMenu

gdi32

DeleteObject
CreateSolidBrush
GetCharABCWidthsFloatW
CreateFontIndirectA
TextOutW
StretchBlt
CreateDIBSection
SetTextColor
SetBkMode
SetBkColor
SelectObject
DeleteDC
CreateCompatibleDC
GetStockObject
EnumFontFamiliesExA
TextOutA
GetTextExtentPoint32W
GetTextExtentPoint32A

ole32

OleInitialize
CoGetClassObject
CoUninitialize
CoInitialize
CoCreateInstance
OleUninitialize
OleSetContainedObject
CoInitializeEx

winmm

timeGetDevCaps
timeGetTime
timeEndPeriod
timeBeginPeriod

d3d8

Direct3DCreate8

imm32

ImmGetOpenStatus
ImmSetConversionStatus
ImmGetConversionStatus
ImmGetCandidateListW
ImmSetCompositionStringW
ImmNotifyIME
ImmAssociateContext
ImmReleaseContext
ImmGetContext
ImmIsIME
ImmGetIMEFileNameA
ImmGetCompositionStringW

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

devil

ilInit
ilTexImage
ilDeleteImages
ilBindImage
ilGenImages
ilGetInteger
ilLoad
ilConvertImage
ilCopyPixels
ilEnable
ilOriginFunc
ilShutDown
ilSave
ilSetPixels

mss32

_AIL_mem_free_lock@4
_AIL_file_read@8
_AIL_auto_update_3D_position@8
_AIL_3D_sample_volume@4
_AIL_3D_sample_status@4
_AIL_set_file_callbacks@16
_AIL_WAV_info@8
_AIL_decompress_ASI@24
_AIL_decompress_ADPCM@12
_AIL_file_type@8
_AIL_open_digital_driver@16
_AIL_open_stream@12
_AIL_close_digital_driver@4
_AIL_enumerate_3D_providers@12
_AIL_close_3D_provider@4
_AIL_open_3D_listener@4
_AIL_close_3D_listener@4
_AIL_set_3D_position@16
_AIL_set_3D_velocity@20
_AIL_set_3D_orientation@28
_AIL_startup@0
_AIL_shutdown@0
_AIL_set_redist_directory@4
_AIL_close_stream@4
_AIL_start_stream@4
_AIL_pause_stream@8
_AIL_set_3D_sample_loop_count@8
_AIL_set_3D_sample_volume@8
_AIL_set_3D_sample_file@8
_AIL_end_3D_sample@4
_AIL_open_3D_provider@4
_AIL_set_stream_volume_levels@12
_AIL_stream_volume_levels@12
_AIL_set_stream_loop_count@8
_AIL_stream_status@4
_AIL_last_error@0
_AIL_allocate_sample_handle@4
_AIL_release_sample_handle@4
_AIL_init_sample@4
_AIL_set_sample_file@12
_AIL_start_sample@4
_AIL_stop_sample@4
_AIL_resume_sample@4
_AIL_end_sample@4
_AIL_set_sample_volume_pan@12
_AIL_set_sample_loop_count@8
_AIL_sample_status@4
_AIL_sample_volume_pan@12
_AIL_allocate_3D_sample_handle@4
_AIL_release_3D_sample_handle@4
_AIL_start_3D_sample@4
_AIL_stop_3D_sample@4
_AIL_resume_3D_sample@4

speedtreert

??1STextures@CSpeedTreeRT@@QAE@XZ
?SetTime@CSpeedTreeRT@@SAXM@Z
?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z
?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z
?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ
?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z
?GetCurrentError@CSpeedTreeRT@@SAPBDXZ
?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z
?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z
?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z
?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ
?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z
?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z
?SetLodLevel@CSpeedTreeRT@@QAEXM@Z
?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ
?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z
?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z
?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z
?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ
?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z
?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ
?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z
?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z
?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ
?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z
??3CSpeedTreeRT@@SAXPAX@Z
??2CSpeedTreeRT@@SAPAXI@Z
??1CSpeedTreeRT@@QAE@XZ
??0CSpeedTreeRT@@QAE@XZ
??0STextures@CSpeedTreeRT@@QAE@XZ
??1SGeometry@CSpeedTreeRT@@QAE@XZ
??0SGeometry@CSpeedTreeRT@@QAE@XZ
?SetCamera@CSpeedTreeRT@@SAXPBM0@Z
?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z
?SetLightState@CSpeedTreeRT@@SAXI_N@Z

dinput8

DirectInput8Create

ws2_32

WSAStartup
WSACleanup
htons
WSAGetLastError
gethostbyname
socket
send
select
recv
ioctlsocket
connect
closesocket
__WSAFDIsSet
inet_addr

ddraw

DirectDrawCreate

advapi32

RegSetValueA
RegOpenKeyExA
RegCreateKeyA
RegQueryValueExA
RegDeleteKeyA
RegCreateKeyExA
RegFlushKey
RegQueryValueA
RegSetValueExA
RegLoadKeyA
RegQueryInfoKeyA
RegEnumValueA
RegDeleteValueA
RegConnectRegistryA
RegSaveKeyA
RegEnumKeyExA
CryptReleaseContext
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyA
RegCloseKey

shell32

ShellExecuteA
ShellExecuteW
SHGetSpecialFolderPathA
SetCurrentProcessExplicitAppUserModelID

oleaut32

SysFreeString
SysAllocString
VariantClear
VariantInit

shlwapi

PathIsRelativeA

Exports

Exports

??0Config@libconfig@@QAE@XZ
??0ConfigException@libconfig@@QAE@$$QAV01@@Z
??0ConfigException@libconfig@@QAE@ABV01@@Z
??0ConfigException@libconfig@@QAE@XZ
??0FileIOException@libconfig@@QAE@$$QAV01@@Z
??0FileIOException@libconfig@@QAE@ABV01@@Z
??0FileIOException@libconfig@@QAE@XZ
??0ParseException@libconfig@@QAE@ABV01@@Z
??0ParseException@libconfig@@QAE@PBDH0@Z
??0Setting@libconfig@@AAE@PAUconfig_setting_t@@@Z
??0SettingConstIterator@libconfig@@QAE@ABV01@@Z
??0SettingConstIterator@libconfig@@QAE@ABVSetting@1@_N@Z
??0SettingException@libconfig@@QAE@ABV01@@Z
??0SettingException@libconfig@@QAE@ABVSetting@1@@Z
??0SettingException@libconfig@@QAE@ABVSetting@1@H@Z
??0SettingException@libconfig@@QAE@ABVSetting@1@PBD@Z
??0SettingException@libconfig@@QAE@PBD@Z
??0SettingIterator@libconfig@@QAE@AAVSetting@1@_N@Z
??0SettingIterator@libconfig@@QAE@ABV01@@Z
??0SettingNameException@libconfig@@QAE@$$QAV01@@Z
??0SettingNameException@libconfig@@QAE@ABV01@@Z
??0SettingNameException@libconfig@@QAE@ABVSetting@1@PBD@Z
??0SettingNotFoundException@libconfig@@QAE@$$QAV01@@Z
??0SettingNotFoundException@libconfig@@QAE@ABV01@@Z
??0SettingNotFoundException@libconfig@@QAE@ABVSetting@1@H@Z
??0SettingNotFoundException@libconfig@@QAE@ABVSetting@1@PBD@Z
??0SettingNotFoundException@libconfig@@QAE@PBD@Z
??0SettingRangeException@libconfig@@QAE@$$QAV01@@Z
??0SettingRangeException@libconfig@@QAE@ABV01@@Z
??0SettingRangeException@libconfig@@QAE@ABVSetting@1@@Z
??0SettingRangeException@libconfig@@QAE@ABVSetting@1@H@Z
??0SettingRangeException@libconfig@@QAE@ABVSetting@1@PBD@Z
??0SettingTypeException@libconfig@@QAE@$$QAV01@@Z
??0SettingTypeException@libconfig@@QAE@ABV01@@Z
??0SettingTypeException@libconfig@@QAE@ABVSetting@1@@Z
??0SettingTypeException@libconfig@@QAE@ABVSetting@1@H@Z
??0SettingTypeException@libconfig@@QAE@ABVSetting@1@PBD@Z
??1Config@libconfig@@UAE@XZ
??1ConfigException@libconfig@@UAE@XZ
??1FileIOException@libconfig@@UAE@XZ
??1ParseException@libconfig@@UAE@XZ
??1Setting@libconfig@@UAE@XZ
??1SettingException@libconfig@@UAE@XZ
??1SettingNameException@libconfig@@UAE@XZ
??1SettingNotFoundException@libconfig@@UAE@XZ
??1SettingRangeException@libconfig@@UAE@XZ
??1SettingTypeException@libconfig@@UAE@XZ
??4ConfigException@libconfig@@QAEAAV01@$$QAV01@@Z
??4ConfigException@libconfig@@QAEAAV01@ABV01@@Z
??4FileIOException@libconfig@@QAEAAV01@$$QAV01@@Z
??4FileIOException@libconfig@@QAEAAV01@ABV01@@Z
??4ParseException@libconfig@@QAEAAV01@ABV01@@Z
??4Setting@libconfig@@QAEAAV01@ABN@Z
??4Setting@libconfig@@QAEAAV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??4Setting@libconfig@@QAEAAV01@AB_J@Z
??4Setting@libconfig@@QAEAAV01@H@Z
??4Setting@libconfig@@QAEAAV01@J@Z
??4Setting@libconfig@@QAEAAV01@M@Z
??4Setting@libconfig@@QAEAAV01@PBD@Z
??4Setting@libconfig@@QAEAAV01@_N@Z
??4SettingConstIterator@libconfig@@QAEAAV01@ABV01@@Z
??4SettingException@libconfig@@QAEAAV01@ABV01@@Z
??4SettingIterator@libconfig@@QAEAAV01@ABV01@@Z
??4SettingNameException@libconfig@@QAEAAV01@$$QAV01@@Z
??4SettingNameException@libconfig@@QAEAAV01@ABV01@@Z
??4SettingNotFoundException@libconfig@@QAEAAV01@$$QAV01@@Z
??4SettingNotFoundException@libconfig@@QAEAAV01@ABV01@@Z
??4SettingRangeException@libconfig@@QAEAAV01@$$QAV01@@Z
??4SettingRangeException@libconfig@@QAEAAV01@ABV01@@Z
??4SettingTypeException@libconfig@@QAEAAV01@$$QAV01@@Z
??4SettingTypeException@libconfig@@QAEAAV01@ABV01@@Z
??8SettingConstIterator@libconfig@@QBE_NABV01@@Z
??8SettingIterator@libconfig@@QBE_NABV01@@Z
??9SettingConstIterator@libconfig@@QBE_NABV01@@Z
??9SettingIterator@libconfig@@QBE_NABV01@@Z
??ASetting@libconfig@@QBEAAV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??ASetting@libconfig@@QBEAAV01@H@Z
??ASetting@libconfig@@QBEAAV01@PBD@Z
??BSetting@libconfig@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??BSetting@libconfig@@QBEHXZ
??BSetting@libconfig@@QBEIXZ
??BSetting@libconfig@@QBEJXZ
??BSetting@libconfig@@QBEKXZ
??BSetting@libconfig@@QBEMXZ
??BSetting@libconfig@@QBENXZ
??BSetting@libconfig@@QBEPBDXZ
??BSetting@libconfig@@QBE_JXZ
??BSetting@libconfig@@QBE_KXZ
??BSetting@libconfig@@QBE_NXZ
??CSettingConstIterator@libconfig@@QAEPBVSetting@1@XZ
??CSettingConstIterator@libconfig@@QBEPBVSetting@1@XZ
??CSettingIterator@libconfig@@QAEPAVSetting@1@XZ
??CSettingIterator@libconfig@@QBEPBVSetting@1@XZ
??DSettingConstIterator@libconfig@@QAEABVSetting@1@XZ
??DSettingConstIterator@libconfig@@QBEABVSetting@1@XZ
??DSettingIterator@libconfig@@QAEAAVSetting@1@XZ
??DSettingIterator@libconfig@@QBEABVSetting@1@XZ
??ESettingConstIterator@libconfig@@QAE?AV01@H@Z
??ESettingConstIterator@libconfig@@QAEAAV01@XZ
??ESettingIterator@libconfig@@QAE?AV01@H@Z
??ESettingIterator@libconfig@@QAEAAV01@XZ
??FSettingConstIterator@libconfig@@QAE?AV01@H@Z
??FSettingConstIterator@libconfig@@QAEAAV01@XZ
??FSettingIterator@libconfig@@QAE?AV01@H@Z
??FSettingIterator@libconfig@@QAEAAV01@XZ
??GSettingConstIterator@libconfig@@QBE?AV01@H@Z
??GSettingConstIterator@libconfig@@QBEHABV01@@Z
??GSettingIterator@libconfig@@QBE?AV01@H@Z
??GSettingIterator@libconfig@@QBEHABV01@@Z
??HSettingConstIterator@libconfig@@QBE?AV01@H@Z
??HSettingIterator@libconfig@@QBE?AV01@H@Z
??YSettingConstIterator@libconfig@@QAEAAV01@H@Z
??YSettingIterator@libconfig@@QAEAAV01@H@Z
??ZSettingConstIterator@libconfig@@QAEAAV01@H@Z
??ZSettingIterator@libconfig@@QAEAAV01@H@Z
??_7Config@libconfig@@6B@
??_7ConfigException@libconfig@@6B@
??_7FileIOException@libconfig@@6B@
??_7ParseException@libconfig@@6B@
??_7Setting@libconfig@@6B@
??_7SettingException@libconfig@@6B@
??_7SettingNameException@libconfig@@6B@
??_7SettingNotFoundException@libconfig@@6B@
??_7SettingRangeException@libconfig@@6B@
??_7SettingTypeException@libconfig@@6B@
?ConfigDestructor@Config@libconfig@@CAXPAX@Z
?add@Setting@libconfig@@QAEAAV12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4Type@12@@Z
?add@Setting@libconfig@@QAEAAV12@PBDW4Type@12@@Z
?add@Setting@libconfig@@QAEAAV12@W4Type@12@@Z
?assertType@Setting@libconfig@@ABEXW4Type@12@@Z
?begin@Setting@libconfig@@QAE?AVSettingIterator@2@XZ
?begin@Setting@libconfig@@QBE?AVSettingConstIterator@2@XZ
?c_str@Setting@libconfig@@QBEPBDXZ
?clear@Config@libconfig@@QAEXXZ
?end@Setting@libconfig@@QAE?AVSettingIterator@2@XZ
?end@Setting@libconfig@@QBE?AVSettingConstIterator@2@XZ
?evaluateIncludePath@Config@libconfig@@UAEPAPBDPBDPAPBD@Z
?exists@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?exists@Config@libconfig@@QBE_NPBD@Z
?exists@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?exists@Setting@libconfig@@QBE_NPBD@Z
?getAutoConvert@Config@libconfig@@QBE_NXZ
?getDefaultFormat@Config@libconfig@@QBE?AW4Format@Setting@2@XZ
?getError@ParseException@libconfig@@QBEPBDXZ
?getFile@ParseException@libconfig@@QBEPBDXZ
?getFloatPrecision@Config@libconfig@@QBEGXZ
?getFormat@Setting@libconfig@@QBE?AW4Format@12@XZ
?getIncludeDir@Config@libconfig@@QBEPBDXZ
?getIndex@Setting@libconfig@@QBEHXZ
?getLength@Setting@libconfig@@QBEHXZ
?getLine@ParseException@libconfig@@QBEHXZ
?getName@Setting@libconfig@@QBEPBDXZ
?getOption@Config@libconfig@@QBE_NW4Option@12@@Z
?getOptions@Config@libconfig@@QBEHXZ
?getParent@Setting@libconfig@@QAEAAV12@XZ
?getParent@Setting@libconfig@@QBEABV12@XZ
?getPath@Setting@libconfig@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getPath@SettingException@libconfig@@QBEPBDXZ
?getRoot@Config@libconfig@@QBEAAVSetting@2@XZ
?getSourceFile@Setting@libconfig@@QBEPBDXZ
?getSourceLine@Setting@libconfig@@QBEIXZ
?getTabWidth@Config@libconfig@@QBEGXZ
?getType@Setting@libconfig@@QBE?AW4Type@12@XZ
?handleError@Config@libconfig@@ABEXXZ
?isAggregate@Setting@libconfig@@QBE_NXZ
?isArray@Setting@libconfig@@QBE_NXZ
?isGroup@Setting@libconfig@@QBE_NXZ
?isList@Setting@libconfig@@QBE_NXZ
?isNumber@Setting@libconfig@@QBE_NXZ
?isRoot@Setting@libconfig@@QBE_NXZ
?isScalar@Setting@libconfig@@QBE_NXZ
?isString@Setting@libconfig@@QBE_NXZ
?lookup@Config@libconfig@@QBEAAVSetting@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?lookup@Config@libconfig@@QBEAAVSetting@2@PBD@Z
?lookup@Setting@libconfig@@QBEAAV12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?lookup@Setting@libconfig@@QBEAAV12@PBD@Z
?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAH@Z
?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAI@Z
?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAM@Z
?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAN@Z
?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAPBD@Z
?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV34@@Z
?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AA_J@Z
?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AA_K@Z
?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AA_N@Z
?lookupValue@Config@libconfig@@QBE_NPBDAAH@Z
?lookupValue@Config@libconfig@@QBE_NPBDAAI@Z
?lookupValue@Config@libconfig@@QBE_NPBDAAM@Z
?lookupValue@Config@libconfig@@QBE_NPBDAAN@Z
?lookupValue@Config@libconfig@@QBE_NPBDAAPBD@Z
?lookupValue@Config@libconfig@@QBE_NPBDAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?lookupValue@Config@libconfig@@QBE_NPBDAA_J@Z
?lookupValue@Config@libconfig@@QBE_NPBDAA_K@Z
?lookupValue@Config@libconfig@@QBE_NPBDAA_N@Z
?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAH@Z
?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAI@Z
?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAM@Z
?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAN@Z
?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAPBD@Z
?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV34@@Z
?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AA_J@Z
?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AA_K@Z
?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AA_N@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAAH@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAAI@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAAM@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAAN@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAAPBD@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAA_J@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAA_K@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAA_N@Z
?read@Config@libconfig@@QAEXPAU_iobuf@@@Z
?readFile@Config@libconfig@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?readFile@Config@libconfig@@QAEXPBD@Z
?readString@Config@libconfig@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?readString@Config@libconfig@@QAEXPBD@Z
?remove@Setting@libconfig@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?remove@Setting@libconfig@@QAEXI@Z
?remove@Setting@libconfig@@QAEXPBD@Z
?setAutoConvert@Config@libconfig@@QAEX_N@Z
?setDefaultFormat@Config@libconfig@@QAEXW4Format@Setting@2@@Z
?setFloatPrecision@Config@libconfig@@QAEXG@Z
?setFormat@Setting@libconfig@@QAEXW4Format@12@@Z
?setIncludeDir@Config@libconfig@@QAEXPBD@Z
?setOption@Config@libconfig@@QAEXW4Option@12@_N@Z
?setOptions@Config@libconfig@@QAEXH@Z
?setTabWidth@Config@libconfig@@QAEXG@Z
?what@FileIOException@libconfig@@UBEPBDXZ
?what@ParseException@libconfig@@UBEPBDXZ
?what@SettingException@libconfig@@UBEPBDXZ
?what@SettingNameException@libconfig@@UBEPBDXZ
?what@SettingNotFoundException@libconfig@@UBEPBDXZ
?what@SettingRangeException@libconfig@@UBEPBDXZ
?what@SettingTypeException@libconfig@@UBEPBDXZ
?wrapSetting@Setting@libconfig@@CAAAV12@PAUconfig_setting_t@@@Z
?write@Config@libconfig@@QBEXPAU_iobuf@@@Z
?writeFile@Config@libconfig@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?writeFile@Config@libconfig@@QAEXPBD@Z

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 454KB - Virtual size: 1020KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 216KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d40ac6e09c82eb75368f4c4de084ca1c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

ole32

winmm

d3d8

imm32

version

devil

mss32

speedtreert

dinput8

ws2_32

ddraw

advapi32

shell32

oleaut32

shlwapi

Exports

Exports

Sections

.text Size: 4.0MB - Virtual size: 4.0MB

.rdata Size: 1.3MB - Virtual size: 1.3MB

.data Size: 454KB - Virtual size: 1020KB

.data1 Size: 2KB - Virtual size: 2KB

.rsrc Size: 47KB - Virtual size: 46KB

.reloc Size: 216KB - Virtual size: 216KB

.text
Size: 4.0MB - Virtual size: 4.0MB

.rdata
Size: 1.3MB - Virtual size: 1.3MB

.data
Size: 454KB - Virtual size: 1020KB

.data1
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 47KB - Virtual size: 46KB

.reloc
Size: 216KB - Virtual size: 216KB