95cc292871e94c199cbbf9f61e41c7929d796289cf3d8008d1f4851677e59925

Sharing

Copy URL Twitter E-mail

General

Target

95cc292871e94c199cbbf9f61e41c7929d796289cf3d8008d1f4851677e59925
Size

5.9MB
MD5

a8e1e2aa3fe2f7ba30db7d65368b186e
SHA1

188c13dd433b8c89818b17d88dae7c69780d26a5
SHA256

95cc292871e94c199cbbf9f61e41c7929d796289cf3d8008d1f4851677e59925
SHA512

c49aa6bbd741efefb16d6be7a3d350716e905a3bb9f61cf4e867990cc34f2cfb34c3540c1aac1af8df442038e16a3b5b5473812036bfdce8b133421bc38f5da2
SSDEEP

98304:vMFJPF5mb+9q/hJc/V3aDacLxlfvk7LaCAV+zt+RpsH9McdeF1p:07jm8qEdKOcbvk3aEIc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95cc292871e94c199cbbf9f61e41c7929d796289cf3d8008d1f4851677e59925

Files

95cc292871e94c199cbbf9f61e41c7929d796289cf3d8008d1f4851677e59925
.exe windows:6 windows x86 arch:x86

d40ac6e09c82eb75368f4c4de084ca1c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileA
GetPrivateProfileStringA
lstrlenA
GlobalFree
WaitForSingleObjectEx
DeleteFileA
GetCurrentDirectoryA
GetTickCount
GetCurrentDirectoryW
ReadProcessMemory
GetCurrentProcessId
GetCurrentProcess
GetLastError
GetModuleFileNameA
FindNextFileA
FindFirstFileA
FindClose
MultiByteToWideChar
SetFileAttributesA
Module32Next
Module32First
CreateToolhelp32Snapshot
GetSystemInfo
OpenProcess
Sleep
CreateEventA
WaitForSingleObject
SetEvent
DeleteCriticalSection
LeaveCriticalSection
WriteConsoleW
HeapSize
PeekConsoleInputA
ReadConsoleInputW
GetNumberOfConsoleInputEvents
SetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
HeapReAlloc
ReadConsoleW
GetFileSizeEx
MoveFileExW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetTempPathW
GetConsoleMode
GetTimeZoneInformation
UnlockFileEx
LockFileEx
HeapCompact
CreateProcessW
SetFilePointerEx
VirtualQuery
VirtualProtect
VirtualAlloc
SetStdHandle
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
ExitProcess
GetDriveTypeW
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
InterlockedPushEntrySList
RaiseException
RtlUnwind
FlushFileBuffers
GetExitCodeThread
CreateThread
SwitchToThread
FlushViewOfFile
GetStdHandle
ExpandEnvironmentStringsW
ResetEvent
SetConsoleCtrlHandler
GetACP
QueryPerformanceFrequency
GetExitCodeProcess
GenerateConsoleCtrlEvent
GetProcessTimes
MoveFileW
GetSystemTime
GetFileType
CreateProcessA
SystemTimeToFileTime
SetEnvironmentVariableA
SetCurrentDirectoryW
DeleteFileW
GetFileAttributesExW
SetFileAttributesW
SetCurrentDirectoryA
GetVersion
DuplicateHandle
GetFileAttributesW
GetEnvironmentVariableA
CreatePipe
SetEnvironmentVariableW
SetFileTime
RemoveDirectoryW
FindNextFileW
GetFullPathNameW
GetFileAttributesExA
FindFirstFileW
CreateDirectoryW
SetErrorMode
LoadLibraryExA
TlsFree
EnterCriticalSection
InitializeCriticalSection
TlsGetValue
HeapAlloc
TlsAlloc
SetLastError
HeapFree
TlsSetValue
GetFullPathNameA
SetEndOfFile
IsDBCSLeadByte
OutputDebugStringW
GetConsoleCP
GetConsoleOutputCP
GetFileAttributesA
GetFileInformationByHandle
GetModuleFileNameW
WaitNamedPipeW
PeekNamedPipe
GetSystemTimeAsFileTime
GetModuleHandleW
CloseHandle
TryAcquireSRWLockExclusive
GlobalAlloc
CreateDirectoryA
RemoveDirectoryA
OutputDebugStringA
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
CreateFileA
GetFileSize
SetUnhandledExceptionFilter
GetCurrentThreadId
GetProcAddress
LoadLibraryA
ReadFile
SetFilePointer
WriteFile
GetModuleHandleA
GetVersionExA
GetSystemDirectoryA
FreeLibrary
GlobalUnlock
GlobalLock
lstrlenW
WideCharToMultiByte
CompareStringA
GetLocaleInfoA
ReleaseSemaphore
QueryPerformanceCounter
FormatMessageA
GetStringTypeW
InitializeCriticalSectionEx
LocalFree
EncodePointer
DecodePointer
LCMapStringEx
CompareStringEx
GetCPInfo
HeapValidate
GetProcessHeap
IsProcessorFeaturePresent
CreateFileW
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
UnhandledExceptionFilter
TerminateProcess
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetLocalTime

user32

GetKeyboardLayout
LoadCursorA
OpenClipboard
PostQuitMessage
SendMessageA
SetWindowPos
GetAsyncKeyState
GetCursorPos
ScreenToClient
FindWindowA
LoadIconA
SystemParametersInfoA
GetKeyState
ShowCursor
SetCursor
DestroyCursor
LoadImageA
SetCursorPos
ClientToScreen
ShowWindow
GetCapture
SetCapture
ReleaseCapture
GetMessageA
TranslateMessage
CloseClipboard
GetClipboardData
CharNextW
CharPrevA
InvalidateRect
GetClientRect
FillRect
SetRect
DispatchMessageA
OffsetRect
LoadStringA
MessageBoxA
GetKeyboardLayoutNameA
ChangeDisplaySettingsA
GetSystemMetrics
IsIconic
PeekMessageA
GetDC
ReleaseDC
AdjustWindowRectEx
DefWindowProcA
UnregisterClassA
RegisterClassExA
CreateWindowExA
IsWindow
DestroyWindow
MoveWindow
SetFocus
UpdateWindow
GetWindowLongA
SetWindowLongA
CharNextExA
CharPrevExA
RegisterClassA
GetMenu

gdi32

DeleteObject
CreateSolidBrush
GetCharABCWidthsFloatW
CreateFontIndirectA
TextOutW
StretchBlt
CreateDIBSection
SetTextColor
SetBkMode
SetBkColor
SelectObject
DeleteDC
CreateCompatibleDC
GetStockObject
EnumFontFamiliesExA
TextOutA
GetTextExtentPoint32W
GetTextExtentPoint32A

ole32

OleInitialize
CoGetClassObject
CoUninitialize
CoInitialize
CoCreateInstance
OleUninitialize
OleSetContainedObject
CoInitializeEx

winmm

timeGetDevCaps
timeGetTime
timeEndPeriod
timeBeginPeriod

d3d8

Direct3DCreate8

imm32

ImmGetOpenStatus
ImmSetConversionStatus
ImmGetConversionStatus
ImmGetCandidateListW
ImmSetCompositionStringW
ImmNotifyIME
ImmAssociateContext
ImmReleaseContext
ImmGetContext
ImmIsIME
ImmGetIMEFileNameA
ImmGetCompositionStringW

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

devil

ilInit
ilTexImage
ilDeleteImages
ilBindImage
ilGenImages
ilGetInteger
ilLoad
ilConvertImage
ilCopyPixels
ilEnable
ilOriginFunc
ilShutDown
ilSave
ilSetPixels

mss32

_AIL_mem_free_lock@4
_AIL_file_read@8
_AIL_auto_update_3D_position@8
_AIL_3D_sample_volume@4
_AIL_3D_sample_status@4
_AIL_set_file_callbacks@16
_AIL_WAV_info@8
_AIL_decompress_ASI@24
_AIL_decompress_ADPCM@12
_AIL_file_type@8
_AIL_open_digital_driver@16
_AIL_open_stream@12
_AIL_close_digital_driver@4
_AIL_enumerate_3D_providers@12
_AIL_close_3D_provider@4
_AIL_open_3D_listener@4
_AIL_close_3D_listener@4
_AIL_set_3D_position@16
_AIL_set_3D_velocity@20
_AIL_set_3D_orientation@28
_AIL_startup@0
_AIL_shutdown@0
_AIL_set_redist_directory@4
_AIL_close_stream@4
_AIL_start_stream@4
_AIL_pause_stream@8
_AIL_set_3D_sample_loop_count@8
_AIL_set_3D_sample_volume@8
_AIL_set_3D_sample_file@8
_AIL_end_3D_sample@4
_AIL_open_3D_provider@4
_AIL_set_stream_volume_levels@12
_AIL_stream_volume_levels@12
_AIL_set_stream_loop_count@8
_AIL_stream_status@4
_AIL_last_error@0
_AIL_allocate_sample_handle@4
_AIL_release_sample_handle@4
_AIL_init_sample@4
_AIL_set_sample_file@12
_AIL_start_sample@4
_AIL_stop_sample@4
_AIL_resume_sample@4
_AIL_end_sample@4
_AIL_set_sample_volume_pan@12
_AIL_set_sample_loop_count@8
_AIL_sample_status@4
_AIL_sample_volume_pan@12
_AIL_allocate_3D_sample_handle@4
_AIL_release_3D_sample_handle@4
_AIL_start_3D_sample@4
_AIL_stop_3D_sample@4
_AIL_resume_3D_sample@4

speedtreert

??1STextures@CSpeedTreeRT@@QAE@XZ
?SetTime@CSpeedTreeRT@@SAXM@Z
?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z
?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z
?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ
?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z
?GetCurrentError@CSpeedTreeRT@@SAPBDXZ
?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z
?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z
?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z
?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ
?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z
?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z
?SetLodLevel@CSpeedTreeRT@@QAEXM@Z
?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ
?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z
?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z
?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z
?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ
?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z
?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ
?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z
?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z
?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ
?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z
??3CSpeedTreeRT@@SAXPAX@Z
??2CSpeedTreeRT@@SAPAXI@Z
??1CSpeedTreeRT@@QAE@XZ
??0CSpeedTreeRT@@QAE@XZ
??0STextures@CSpeedTreeRT@@QAE@XZ
??1SGeometry@CSpeedTreeRT@@QAE@XZ
??0SGeometry@CSpeedTreeRT@@QAE@XZ
?SetCamera@CSpeedTreeRT@@SAXPBM0@Z
?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z
?SetLightState@CSpeedTreeRT@@SAXI_N@Z

dinput8

DirectInput8Create

ws2_32

WSAStartup
WSACleanup
htons
WSAGetLastError
gethostbyname
socket
send
select
recv
ioctlsocket
connect
closesocket
__WSAFDIsSet
inet_addr

ddraw

DirectDrawCreate

advapi32

RegSetValueA
RegOpenKeyExA
RegCreateKeyA
RegQueryValueExA
RegDeleteKeyA
RegCreateKeyExA
RegFlushKey
RegQueryValueA
RegSetValueExA
RegLoadKeyA
RegQueryInfoKeyA
RegEnumValueA
RegDeleteValueA
RegConnectRegistryA
RegSaveKeyA
RegEnumKeyExA
CryptReleaseContext
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyA
RegCloseKey

shell32

ShellExecuteA
ShellExecuteW
SHGetSpecialFolderPathA
SetCurrentProcessExplicitAppUserModelID

oleaut32

SysFreeString
SysAllocString
VariantClear
VariantInit

shlwapi

PathIsRelativeA

Exports

Exports

??0Config@libconfig@@QAE@XZ
??0ConfigException@libconfig@@QAE@$$QAV01@@Z
??0ConfigException@libconfig@@QAE@ABV01@@Z
??0ConfigException@libconfig@@QAE@XZ
??0FileIOException@libconfig@@QAE@$$QAV01@@Z
??0FileIOException@libconfig@@QAE@ABV01@@Z
??0FileIOException@libconfig@@QAE@XZ
??0ParseException@libconfig@@QAE@ABV01@@Z
??0ParseException@libconfig@@QAE@PBDH0@Z
??0Setting@libconfig@@AAE@PAUconfig_setting_t@@@Z
??0SettingConstIterator@libconfig@@QAE@ABV01@@Z
??0SettingConstIterator@libconfig@@QAE@ABVSetting@1@_N@Z
??0SettingException@libconfig@@QAE@ABV01@@Z
??0SettingException@libconfig@@QAE@ABVSetting@1@@Z
??0SettingException@libconfig@@QAE@ABVSetting@1@H@Z
??0SettingException@libconfig@@QAE@ABVSetting@1@PBD@Z
??0SettingException@libconfig@@QAE@PBD@Z
??0SettingIterator@libconfig@@QAE@AAVSetting@1@_N@Z
??0SettingIterator@libconfig@@QAE@ABV01@@Z
??0SettingNameException@libconfig@@QAE@$$QAV01@@Z
??0SettingNameException@libconfig@@QAE@ABV01@@Z
??0SettingNameException@libconfig@@QAE@ABVSetting@1@PBD@Z
??0SettingNotFoundException@libconfig@@QAE@$$QAV01@@Z
??0SettingNotFoundException@libconfig@@QAE@ABV01@@Z
??0SettingNotFoundException@libconfig@@QAE@ABVSetting@1@H@Z
??0SettingNotFoundException@libconfig@@QAE@ABVSetting@1@PBD@Z
??0SettingNotFoundException@libconfig@@QAE@PBD@Z
??0SettingRangeException@libconfig@@QAE@$$QAV01@@Z
??0SettingRangeException@libconfig@@QAE@ABV01@@Z
??0SettingRangeException@libconfig@@QAE@ABVSetting@1@@Z
??0SettingRangeException@libconfig@@QAE@ABVSetting@1@H@Z
??0SettingRangeException@libconfig@@QAE@ABVSetting@1@PBD@Z
??0SettingTypeException@libconfig@@QAE@$$QAV01@@Z
??0SettingTypeException@libconfig@@QAE@ABV01@@Z
??0SettingTypeException@libconfig@@QAE@ABVSetting@1@@Z
??0SettingTypeException@libconfig@@QAE@ABVSetting@1@H@Z
??0SettingTypeException@libconfig@@QAE@ABVSetting@1@PBD@Z
??1Config@libconfig@@UAE@XZ
??1ConfigException@libconfig@@UAE@XZ
??1FileIOException@libconfig@@UAE@XZ
??1ParseException@libconfig@@UAE@XZ
??1Setting@libconfig@@UAE@XZ
??1SettingException@libconfig@@UAE@XZ
??1SettingNameException@libconfig@@UAE@XZ
??1SettingNotFoundException@libconfig@@UAE@XZ
??1SettingRangeException@libconfig@@UAE@XZ
??1SettingTypeException@libconfig@@UAE@XZ
??4ConfigException@libconfig@@QAEAAV01@$$QAV01@@Z
??4ConfigException@libconfig@@QAEAAV01@ABV01@@Z
??4FileIOException@libconfig@@QAEAAV01@$$QAV01@@Z
??4FileIOException@libconfig@@QAEAAV01@ABV01@@Z
??4ParseException@libconfig@@QAEAAV01@ABV01@@Z
??4Setting@libconfig@@QAEAAV01@ABN@Z
??4Setting@libconfig@@QAEAAV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??4Setting@libconfig@@QAEAAV01@AB_J@Z
??4Setting@libconfig@@QAEAAV01@H@Z
??4Setting@libconfig@@QAEAAV01@J@Z
??4Setting@libconfig@@QAEAAV01@M@Z
??4Setting@libconfig@@QAEAAV01@PBD@Z
??4Setting@libconfig@@QAEAAV01@_N@Z
??4SettingConstIterator@libconfig@@QAEAAV01@ABV01@@Z
??4SettingException@libconfig@@QAEAAV01@ABV01@@Z
??4SettingIterator@libconfig@@QAEAAV01@ABV01@@Z
??4SettingNameException@libconfig@@QAEAAV01@$$QAV01@@Z
??4SettingNameException@libconfig@@QAEAAV01@ABV01@@Z
??4SettingNotFoundException@libconfig@@QAEAAV01@$$QAV01@@Z
??4SettingNotFoundException@libconfig@@QAEAAV01@ABV01@@Z
??4SettingRangeException@libconfig@@QAEAAV01@$$QAV01@@Z
??4SettingRangeException@libconfig@@QAEAAV01@ABV01@@Z
??4SettingTypeException@libconfig@@QAEAAV01@$$QAV01@@Z
??4SettingTypeException@libconfig@@QAEAAV01@ABV01@@Z
??8SettingConstIterator@libconfig@@QBE_NABV01@@Z
??8SettingIterator@libconfig@@QBE_NABV01@@Z
??9SettingConstIterator@libconfig@@QBE_NABV01@@Z
??9SettingIterator@libconfig@@QBE_NABV01@@Z
??ASetting@libconfig@@QBEAAV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??ASetting@libconfig@@QBEAAV01@H@Z
??ASetting@libconfig@@QBEAAV01@PBD@Z
??BSetting@libconfig@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??BSetting@libconfig@@QBEHXZ
??BSetting@libconfig@@QBEIXZ
??BSetting@libconfig@@QBEJXZ
??BSetting@libconfig@@QBEKXZ
??BSetting@libconfig@@QBEMXZ
??BSetting@libconfig@@QBENXZ
??BSetting@libconfig@@QBEPBDXZ
??BSetting@libconfig@@QBE_JXZ
??BSetting@libconfig@@QBE_KXZ
??BSetting@libconfig@@QBE_NXZ
??CSettingConstIterator@libconfig@@QAEPBVSetting@1@XZ
??CSettingConstIterator@libconfig@@QBEPBVSetting@1@XZ
??CSettingIterator@libconfig@@QAEPAVSetting@1@XZ
??CSettingIterator@libconfig@@QBEPBVSetting@1@XZ
??DSettingConstIterator@libconfig@@QAEABVSetting@1@XZ
??DSettingConstIterator@libconfig@@QBEABVSetting@1@XZ
??DSettingIterator@libconfig@@QAEAAVSetting@1@XZ
??DSettingIterator@libconfig@@QBEABVSetting@1@XZ
??ESettingConstIterator@libconfig@@QAE?AV01@H@Z
??ESettingConstIterator@libconfig@@QAEAAV01@XZ
??ESettingIterator@libconfig@@QAE?AV01@H@Z
??ESettingIterator@libconfig@@QAEAAV01@XZ
??FSettingConstIterator@libconfig@@QAE?AV01@H@Z
??FSettingConstIterator@libconfig@@QAEAAV01@XZ
??FSettingIterator@libconfig@@QAE?AV01@H@Z
??FSettingIterator@libconfig@@QAEAAV01@XZ
??GSettingConstIterator@libconfig@@QBE?AV01@H@Z
??GSettingConstIterator@libconfig@@QBEHABV01@@Z
??GSettingIterator@libconfig@@QBE?AV01@H@Z
??GSettingIterator@libconfig@@QBEHABV01@@Z
??HSettingConstIterator@libconfig@@QBE?AV01@H@Z
??HSettingIterator@libconfig@@QBE?AV01@H@Z
??YSettingConstIterator@libconfig@@QAEAAV01@H@Z
??YSettingIterator@libconfig@@QAEAAV01@H@Z
??ZSettingConstIterator@libconfig@@QAEAAV01@H@Z
??ZSettingIterator@libconfig@@QAEAAV01@H@Z
??_7Config@libconfig@@6B@
??_7ConfigException@libconfig@@6B@
??_7FileIOException@libconfig@@6B@
??_7ParseException@libconfig@@6B@
??_7Setting@libconfig@@6B@
??_7SettingException@libconfig@@6B@
??_7SettingNameException@libconfig@@6B@
??_7SettingNotFoundException@libconfig@@6B@
??_7SettingRangeException@libconfig@@6B@
??_7SettingTypeException@libconfig@@6B@
?ConfigDestructor@Config@libconfig@@CAXPAX@Z
?add@Setting@libconfig@@QAEAAV12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4Type@12@@Z
?add@Setting@libconfig@@QAEAAV12@PBDW4Type@12@@Z
?add@Setting@libconfig@@QAEAAV12@W4Type@12@@Z
?assertType@Setting@libconfig@@ABEXW4Type@12@@Z
?begin@Setting@libconfig@@QAE?AVSettingIterator@2@XZ
?begin@Setting@libconfig@@QBE?AVSettingConstIterator@2@XZ
?c_str@Setting@libconfig@@QBEPBDXZ
?clear@Config@libconfig@@QAEXXZ
?end@Setting@libconfig@@QAE?AVSettingIterator@2@XZ
?end@Setting@libconfig@@QBE?AVSettingConstIterator@2@XZ
?evaluateIncludePath@Config@libconfig@@UAEPAPBDPBDPAPBD@Z
?exists@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?exists@Config@libconfig@@QBE_NPBD@Z
?exists@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?exists@Setting@libconfig@@QBE_NPBD@Z
?getAutoConvert@Config@libconfig@@QBE_NXZ
?getDefaultFormat@Config@libconfig@@QBE?AW4Format@Setting@2@XZ
?getError@ParseException@libconfig@@QBEPBDXZ
?getFile@ParseException@libconfig@@QBEPBDXZ
?getFloatPrecision@Config@libconfig@@QBEGXZ
?getFormat@Setting@libconfig@@QBE?AW4Format@12@XZ
?getIncludeDir@Config@libconfig@@QBEPBDXZ
?getIndex@Setting@libconfig@@QBEHXZ
?getLength@Setting@libconfig@@QBEHXZ
?getLine@ParseException@libconfig@@QBEHXZ
?getName@Setting@libconfig@@QBEPBDXZ
?getOption@Config@libconfig@@QBE_NW4Option@12@@Z
?getOptions@Config@libconfig@@QBEHXZ
?getParent@Setting@libconfig@@QAEAAV12@XZ
?getParent@Setting@libconfig@@QBEABV12@XZ
?getPath@Setting@libconfig@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getPath@SettingException@libconfig@@QBEPBDXZ
?getRoot@Config@libconfig@@QBEAAVSetting@2@XZ
?getSourceFile@Setting@libconfig@@QBEPBDXZ
?getSourceLine@Setting@libconfig@@QBEIXZ
?getTabWidth@Config@libconfig@@QBEGXZ
?getType@Setting@libconfig@@QBE?AW4Type@12@XZ
?handleError@Config@libconfig@@ABEXXZ
?isAggregate@Setting@libconfig@@QBE_NXZ
?isArray@Setting@libconfig@@QBE_NXZ
?isGroup@Setting@libconfig@@QBE_NXZ
?isList@Setting@libconfig@@QBE_NXZ
?isNumber@Setting@libconfig@@QBE_NXZ
?isRoot@Setting@libconfig@@QBE_NXZ
?isScalar@Setting@libconfig@@QBE_NXZ
?isString@Setting@libconfig@@QBE_NXZ
?lookup@Config@libconfig@@QBEAAVSetting@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?lookup@Config@libconfig@@QBEAAVSetting@2@PBD@Z
?lookup@Setting@libconfig@@QBEAAV12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?lookup@Setting@libconfig@@QBEAAV12@PBD@Z
?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAH@Z
?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAI@Z
?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAM@Z
?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAN@Z
?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAPBD@Z
?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV34@@Z
?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AA_J@Z
?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AA_K@Z
?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AA_N@Z
?lookupValue@Config@libconfig@@QBE_NPBDAAH@Z
?lookupValue@Config@libconfig@@QBE_NPBDAAI@Z
?lookupValue@Config@libconfig@@QBE_NPBDAAM@Z
?lookupValue@Config@libconfig@@QBE_NPBDAAN@Z
?lookupValue@Config@libconfig@@QBE_NPBDAAPBD@Z
?lookupValue@Config@libconfig@@QBE_NPBDAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?lookupValue@Config@libconfig@@QBE_NPBDAA_J@Z
?lookupValue@Config@libconfig@@QBE_NPBDAA_K@Z
?lookupValue@Config@libconfig@@QBE_NPBDAA_N@Z
?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAH@Z
?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAI@Z
?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAM@Z
?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAN@Z
?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAPBD@Z
?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV34@@Z
?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AA_J@Z
?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AA_K@Z
?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AA_N@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAAH@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAAI@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAAM@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAAN@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAAPBD@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAA_J@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAA_K@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAA_N@Z
?read@Config@libconfig@@QAEXPAU_iobuf@@@Z
?readFile@Config@libconfig@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?readFile@Config@libconfig@@QAEXPBD@Z
?readString@Config@libconfig@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?readString@Config@libconfig@@QAEXPBD@Z
?remove@Setting@libconfig@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?remove@Setting@libconfig@@QAEXI@Z
?remove@Setting@libconfig@@QAEXPBD@Z
?setAutoConvert@Config@libconfig@@QAEX_N@Z
?setDefaultFormat@Config@libconfig@@QAEXW4Format@Setting@2@@Z
?setFloatPrecision@Config@libconfig@@QAEXG@Z
?setFormat@Setting@libconfig@@QAEXW4Format@12@@Z
?setIncludeDir@Config@libconfig@@QAEXPBD@Z
?setOption@Config@libconfig@@QAEXW4Option@12@_N@Z
?setOptions@Config@libconfig@@QAEXH@Z
?setTabWidth@Config@libconfig@@QAEXG@Z
?what@FileIOException@libconfig@@UBEPBDXZ
?what@ParseException@libconfig@@UBEPBDXZ
?what@SettingException@libconfig@@UBEPBDXZ
?what@SettingNameException@libconfig@@UBEPBDXZ
?what@SettingNotFoundException@libconfig@@UBEPBDXZ
?what@SettingRangeException@libconfig@@UBEPBDXZ
?what@SettingTypeException@libconfig@@UBEPBDXZ
?wrapSetting@Setting@libconfig@@CAAAV12@PAUconfig_setting_t@@@Z
?write@Config@libconfig@@QBEXPAU_iobuf@@@Z
?writeFile@Config@libconfig@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?writeFile@Config@libconfig@@QAEXPBD@Z

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 454KB - Virtual size: 1020KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 216KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d40ac6e09c82eb75368f4c4de084ca1c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

ole32

winmm

d3d8

imm32

version

devil

mss32

speedtreert

dinput8

ws2_32

ddraw

advapi32

shell32

oleaut32

shlwapi

Exports

Exports

Sections

.text Size: 4.0MB - Virtual size: 4.0MB

.rdata Size: 1.3MB - Virtual size: 1.3MB

.data Size: 454KB - Virtual size: 1020KB

.data1 Size: 2KB - Virtual size: 2KB

.rsrc Size: 47KB - Virtual size: 46KB

.reloc Size: 216KB - Virtual size: 216KB

.text
Size: 4.0MB - Virtual size: 4.0MB

.rdata
Size: 1.3MB - Virtual size: 1.3MB

.data
Size: 454KB - Virtual size: 1020KB

.data1
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 47KB - Virtual size: 46KB

.reloc
Size: 216KB - Virtual size: 216KB