532678b720ae2ebfb3b5250310c4b54a95af5e8947ebcfe42d740630c9c50122

Sharing

Copy URL Twitter E-mail

General

Target

532678b720ae2ebfb3b5250310c4b54a95af5e8947ebcfe42d740630c9c50122
Size

10.2MB
MD5

a19afa695fb97b08697bb7809214df39
SHA1

09f4de2592524e4e6429caf1d4e30efce39c1d6d
SHA256

532678b720ae2ebfb3b5250310c4b54a95af5e8947ebcfe42d740630c9c50122
SHA512

446d6741ffe25dcac2e2c4e343a97c795e69ee82732bea6a61a06d07093419f490e76e8dd8af8f257c54ad13c1bb7cd97071b0dcaa3bbda93a9966d08e9c6657
SSDEEP

98304:Sa3sW2W8Sh0o8sWgUQ4pouuvgNOhdJLf5YCY/+Wrd2Zv2eAOM4wkPiUctw:Sa3sW2Ke/oshuvgNA5YC0+Wri+eHf9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
532678b720ae2ebfb3b5250310c4b54a95af5e8947ebcfe42d740630c9c50122

Files

532678b720ae2ebfb3b5250310c4b54a95af5e8947ebcfe42d740630c9c50122
.exe windows:6 windows x86 arch:x86

34acef9d49ab4d2531471bf157bdfa37

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

elementskill

?SetAbility@ElementSkill@GNET@@SAHIH@Z
?GetComboSkActivated@ElementSkill@GNET@@SAXABUComboSkillState@2@AAV?$vector@U?$pair@IH@std@@V?$allocator@U?$pair@IH@std@@@2@@std@@@Z
?SetLevel@ElementSkill@GNET@@SAHIH@Z
?PetLearn@ElementSkill@GNET@@SAHIAAUPetRequirement@2@H@Z
?LearnCondition@ElementSkill@GNET@@SAHIAAULearnRequirement@2@H@Z
?GetAbilityPercent@ElementSkill@GNET@@SAHI@Z
?Condition@ElementSkill@GNET@@SAHIAAUUseRequirement@2@H@Z
?Destroy@ElementSkill@GNET@@QAEXXZ
?Create@ElementSkill@GNET@@SAPAV12@IH@Z
?GoblinLearn@ElementSkill@GNET@@SAHIAAUGoblinRequirement@2@H@Z
?GetEffect@ElementSkill@GNET@@SAPBDI@Z
?Query@VisibleState@GNET@@SAPBV12@HH@Z
?GetCommonCoolDown@ElementSkill@GNET@@SAHI@Z
?GetName@ElementSkill@GNET@@SAPB_WI@Z
?LoadSkillData@ElementSkill@GNET@@SAXPAX@Z
?GetRequiredMoney@ElementSkill@GNET@@SAHIH@Z
?GetRequiredSp@ElementSkill@GNET@@SAHIH@Z
?GoblinCondition@ElementSkill@GNET@@SAHIAAUGoblinUseRequirement@2@H@Z
?GetVersion@ElementSkill@GNET@@SAHXZ
?GetExecuteTime@ElementSkill@GNET@@SAHIH@Z
?GetNativeName@ElementSkill@GNET@@SAPBDI@Z
?GetRequiredBook@ElementSkill@GNET@@SAHIH@Z
?NextSkill@ElementSkill@GNET@@SAII@Z
?GetComboSkPreSkill@ElementSkill@GNET@@SAHI@Z
?GetInherentSkills@ElementSkill@GNET@@SAABV?$vector@IV?$allocator@I@std@@@std@@H@Z
?InitStaticData@ElementSkill@GNET@@SAXXZ
?IsMovingSkill@ElementSkill@GNET@@SA_NI@Z
?GetAbility@ElementSkill@GNET@@SAHI@Z
?GetMaxAbility@ElementSkill@GNET@@SAHIH@Z
?IsOverridden@ElementSkill@GNET@@SA_NI@Z
?GetRequiredLevel@ElementSkill@GNET@@SAHIH@Z
?GetRequiredRealmLevel@ElementSkill@GNET@@SAHIH@Z
?GetType@ElementSkill@GNET@@SADI@Z
?IsGoblinSkill@ElementSkill@GNET@@SA_NI@Z
?Query@TeamState@GNET@@SAPBV12@H@Z
?GetIcon@ElementSkill@GNET@@SAPBDI@Z

ftdriver

?CreateFTManager@@YAPAVIFTManager@@HHH@Z

speedtreert

?SetTime@CSpeedTreeRT@@SAXM@Z
?Authorize@CSpeedTreeRT@@SAXPBD@Z
?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z
?SetLightState@CSpeedTreeRT@@SAXI_N@Z
??1STextures@CSpeedTreeRT@@QAE@XZ
??0STextures@CSpeedTreeRT@@QAE@XZ
??1SGeometry@CSpeedTreeRT@@QAE@XZ
??0SGeometry@CSpeedTreeRT@@QAE@XZ
?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z
?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z
?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z
?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z
?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ
?GetDiscreteLeafLodLevel@CSpeedTreeRT@@QBEGM@Z
?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z
?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z
??0CSpeedTreeRT@@QAE@XZ
??1CSpeedTreeRT@@QAE@XZ
??2CSpeedTreeRT@@SAPAXI@Z
??3CSpeedTreeRT@@SAXPAX@Z
?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z
?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ
?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z
?GetTreeSize@CSpeedTreeRT@@QBEXAAM0@Z
?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z
?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z
?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z
?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z
?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z
?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ
?SetCamera@CSpeedTreeRT@@SAXPBM0@Z
?SetLodLevel@CSpeedTreeRT@@QAEXM@Z

d3dx9_43

D3DXCreateCubeTextureFromFileInMemoryEx
D3DXGetImageInfoFromFileA
D3DXCompileShader
D3DXCreateVolumeTextureFromFileInMemoryEx
D3DXSaveVolumeToFileA
D3DXLoadSurfaceFromSurface
D3DXDeclaratorFromFVF
D3DXMatrixLookAtLH
D3DXMatrixRotationX
D3DXGetShaderConstantTable
D3DXCreateEffectCompiler
D3DXMatrixMultiply
D3DXMatrixRotationY
D3DXVec4Transform
D3DXMatrixRotationZ
D3DXPlaneTransform
D3DXMatrixRotationAxis
D3DXMatrixInverse
D3DXMatrixOrthoOffCenterLH
D3DXAssembleShader
D3DXCreateBuffer
D3DXLoadSurfaceFromFileInMemory
D3DXMatrixRotationQuaternion
D3DXQuaternionRotationMatrix
D3DXMatrixPerspectiveFovLH
D3DXGetImageInfoFromFileInMemory
D3DXCreateTextureFromFileInMemoryEx
D3DXSaveSurfaceToFileA
D3DXVec3TransformCoord

dsound

ord11

wininet

HttpAddRequestHeadersA
HttpSendRequestA
HttpOpenRequestA
InternetCloseHandle
InternetConnectA
InternetReadFile
HttpQueryInfoA
InternetOpenA

shlwapi

PathAppendW
PathFileExistsW
PathCanonicalizeA
PathCombineA
PathRemoveFileSpecA
PathFileExistsA
PathFindExtensionA
PathFindFileNameA
PathIsFileSpecA
StrToIntW

winmm

timeGetTime

ws2_32

WSAGetLastError
gethostbyname
inet_ntoa
WSAStartup
closesocket
getsockname
socket
ntohs
connect
recv
htons
sendto
ioctlsocket
setsockopt
WSACleanup
inet_addr
select
bind
__WSAFDIsSet
send

imm32

ImmGetCandidateListW
ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow
ImmGetProperty
ImmGetCompositionStringW
ImmAssociateContext
ImmSetCandidateWindow
ImmGetDescriptionW
ImmNotifyIME
ImmIsIME

zlibwapi

ord2
ord26
ord4
ord46
ord7
ord21
ord19
ord20
ord6

glu32

gluTessVertex
gluTessEndContour
gluTessBeginPolygon
gluTessBeginContour
gluNewTess
gluTessProperty
gluTessEndPolygon
gluDeleteTess
gluTessCallback

discord_game_sdk

DiscordCreate

kernel32

UnmapViewOfFile
WinExec
GlobalReAlloc
GlobalFree
GlobalSize
IsDBCSLeadByteEx
SetFilePointer
QueryPerformanceCounter
QueryPerformanceFrequency
LoadLibraryExW
MulDiv
lstrcmpW
lstrcmpiW
QueueUserAPC
FindResourceW
LoadResource
RaiseException
SetLastError
SizeofResource
CreateSemaphoreW
ReleaseSemaphore
OpenFile
CreateFileMappingW
GetPrivateProfileStringA
GetPrivateProfileIntA
GetNativeSystemInfo
GetVersion
LocalFree
SetCurrentDirectoryA
GetCurrentDirectoryA
SetThreadPriorityBoost
SuspendThread
SetThreadPriority
GetDiskFreeSpaceA
ConnectNamedPipe
CreateProcessW
CreateMutexA
CreateNamedPipeW
WriteFile
IsDebuggerPresent
FindClose
ExitProcess
ResumeThread
CreateDirectoryW
OutputDebugStringA
GetCommandLineW
ReadFile
GetFileSize
MapViewOfFile
LocalAlloc
GetWindowsDirectoryA
VirtualFree
VirtualAlloc
FormatMessageA
InterlockedPushEntrySList
VirtualQuery
SetCurrentDirectoryW
LoadLibraryExA
GetLocalTime
ResetEvent
CopyFileA
GetExitCodeThread
WaitForMultipleObjects
FindNextFileA
FindFirstFileA
CreateDirectoryA
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
WaitForSingleObjectEx
InitializeSListHead
GetSystemTimeAsFileTime
GetStartupInfoW
EncodePointer
DuplicateHandle
GetCurrentDirectoryW
SetEvent
GetModuleFileNameA
EnterCriticalSection
GetCurrentProcess
GetModuleFileNameW
LeaveCriticalSection
CreateFileW
GetCurrentThreadId
GetLastError
GetCurrentThread
CloseHandle
LoadLibraryW
GetProcAddress
GetCurrentProcessId
FreeLibrary
lstrcpyW
IsBadReadPtr
GetTempPathA
GetTempFileNameA
GetTickCount
GetCommandLineA
GetFileAttributesA
WritePrivateProfileStringW
GetPrivateProfileIntW
GetPrivateProfileStringW
GetTickCount64
VirtualProtect
InitializeCriticalSection
WaitForSingleObject
GetModuleHandleA
LoadLibraryA
CreateThread
DeleteCriticalSection
Process32First
TerminateProcess
OpenProcess
CreateToolhelp32Snapshot
Process32Next
ReadProcessMemory
VirtualQueryEx
lstrlenA
GetVersionExW
Sleep
CreateFileA
GetSystemInfo
GlobalMemoryStatus
HeapFree
HeapAlloc
GetProcessHeap
SystemTimeToFileTime
GetSystemTime
GetModuleHandleW
FlushInstructionCache
CreateMutexW
ReleaseMutex
IsBadWritePtr
OutputDebugStringW
GlobalAlloc
GlobalLock
WideCharToMultiByte
GlobalUnlock
MultiByteToWideChar
DeleteFileA
InitializeCriticalSectionAndSpinCount
CreateEventW
InterlockedPopEntrySList

user32

GetTopWindow
GetWindowTextA
GetClassNameA
GetWindow
GetWindowThreadProcessId
PtInRect
FindWindowA
SetWindowsHookExW
GetWindowDC
EnumThreadWindows
IsWindowUnicode
SetCaretPos
GetKeyboardLayout
CreateCaret
GetClipboardData
RegisterClipboardFormatW
LoadCursorFromFileA
DestroyCursor
SetRect
EnumDisplaySettingsW
IsRectEmpty
UnhookWindowsHookEx
CallNextHookEx
GetWindowRect
EnumWindows
PostQuitMessage
GetCursorPos
ScreenToClient
SetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
GetKeyState
ClientToScreen
PostMessageW
GetClientRect
GetActiveWindow
GetWindowTextW
IntersectRect
GetWindowTextLengthW
GetMessageW
CallWindowProcW
GetFocus
DestroyWindow
GetDC
keybd_event
FillRect
InvalidateRgn
SetTimer
RedrawWindow
SetWindowLongA
DestroyAcceleratorTable
IsChild
GetSysColor
CreateAcceleratorTableW
SetFocus
CharNextW
GetDlgItem
KillTimer
GetDesktopWindow
GetClassInfoExW
GetParent
RegisterWindowMessageW
GetAncestor
ReleaseDC
DefWindowProcW
MessageBoxW
CreateWindowExW
GetSystemMetrics
RegisterClassExW
MoveWindow
AdjustWindowRect
LoadCursorW
UpdateWindow
SetForegroundWindow
wsprintfW
GetCapture
SetCapture
ReleaseCapture
ChangeDisplaySettingsW
DispatchMessageW
PeekMessageW
GetForegroundWindow
TranslateMessage
LoadIconW
SetCursor
GetGUIThreadInfo
BeginPaint
EndPaint
SetWindowTextW
SetCursorPos
AdjustWindowRectEx
SetWindowLongW
InvalidateRect
GetAsyncKeyState
SetActiveWindow
EnumChildWindows
SendMessageW
UnregisterClassW
GetMenuBarInfo
IsWindow
GetWindowLongW
IsWindowVisible
SetWindowPos
ShowWindow
IsWindowEnabled
FindWindowW
GetClassNameW
IsZoomed
IsIconic
MessageBoxA

gdi32

GetGlyphOutlineW
CreatePolygonRgn
PtInRegion
CreateFontIndirectW
EnumFontFamiliesExW
CreateFontW
GetTextExtentPoint32W
SetMapMode
CreateDIBSection
CreateEllipticRgn
SetBkColor
SetTextAlign
ExtTextOutW
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
GetDeviceCaps
DeleteDC
GetObjectW
DeleteObject
CreateSolidBrush
GetStockObject
BitBlt
GetDIBits
SetTextColor

advapi32

RegEnumKeyExW
OpenThreadToken
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RegDeleteValueW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegQueryInfoKeyW

shell32

ShellExecuteW
ShellExecuteA
SHOpenFolderAndSelectItems
ShellExecuteExA
SHGetFolderPathW
Shell_NotifyIconW

ole32

OleLockRunning
CLSIDFromString
CoTaskMemRealloc
OleInitialize
CreateStreamOnHGlobal
CoTaskMemFree
CLSIDFromProgID
StringFromGUID2
CoTaskMemAlloc
OleUninitialize
CoGetClassObject
CoInitializeEx
CoInitialize
CoSetProxyBlanket
CoCreateInstance
CoUninitialize
CoInitializeSecurity

oleaut32

SysFreeString
VariantClear
SysAllocString
VarUI4FromStr
SysAllocStringLen
SysStringLen
VariantCopy
OleCreateFontIndirect
LoadRegTypeLi
VariantInit
LoadTypeLi

msvcp140

?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Random_device@std@@YAIXZ
_Mtx_destroy_in_situ
_Mtx_init_in_situ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QAE@I@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MAE@XZ
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
?_Syserror_map@std@@YAPBDH@Z
?_Xinvalid_argument@std@@YAXPBD@Z
_To_byte
_Stat
_Read_dir
_Lstat
_Open_dir
_Close_dir
_To_wide
_Remove_dir
_Unlink
?_Xbad_function_call@std@@YAXXZ
??Bid@locale@std@@QAEIXZ
?good@ios_base@std@@QBE_NXZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z

urlmon

URLDownloadToFileW

vcruntime140

_setjmp3
memchr
memcpy
__std_terminate
strstr
strrchr
__std_exception_destroy
_local_unwind4
_purecall
wcsstr
wcsrchr
wcschr
__std_type_info_compare
strchr
__std_type_info_name
longjmp
__std_exception_copy
__current_exception
__current_exception_context
_except_handler4_common
memset
memmove
_CxxThrowException
__RTDynamicCast
__CxxFrameHandler3

api-ms-win-crt-stdio-l1-1-0

fputs
_fseeki64
__p__commode
fgetws
ungetc
fgets
feof
setvbuf
_wfopen
__stdio_common_vsprintf_s
__stdio_common_vswprintf_s
__stdio_common_vsscanf
ftell
fseek
_set_fmode
rewind
fread
__stdio_common_vswscanf
__stdio_common_vsprintf
fflush
__stdio_common_vfprintf
_fileno
fwrite
__acrt_iob_func
_popen
_chsize
_ftelli64
fclose
fopen
tmpfile
__stdio_common_vfwprintf
_pclose
clearerr
tmpnam
fgetwc
__stdio_common_vfscanf
__stdio_common_vswprintf
getc
ferror
freopen

api-ms-win-crt-string-l1-1-0

toupper
_stricmp
wcsncat
_strnicmp
wcsncpy
isspace
isalpha
isalnum
_wcsicmp
iscntrl
strncpy
strtok
strncmp
strncpy_s
wcsncpy_s
strcoll
iswdigit
strncat
isdigit
strcspn
_wcsupr
strpbrk
isupper
tolower
isxdigit
ispunct
islower
_wcslwr
wcsncmp
_strlwr
strcpy_s

api-ms-win-crt-utility-l1-1-0

qsort
srand
rand

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe
_set_app_type
_configure_wide_argv
strerror
_initialize_wide_environment
_controlfp_s
_crt_atexit
_get_wide_winmain_command_line
_invalid_parameter_noinfo_noreturn
_initterm
_register_onexit_function
_initterm_e
_initialize_onexit_table
_exit
_cexit
_errno
_invalid_parameter_noinfo
_resetstkoflw
_c_exit
_register_thread_local_exe_atexit_callback
system
terminate
exit
_beginthreadex
_beginthread

api-ms-win-crt-filesystem-l1-1-0

_splitpath
_mkdir
_findfirst32
_findfirst64i32
_findclose
remove
_access
rename
_rmdir
_findnext64i32
_stat32
_stat64i32
_findnext32
_fstat64i32

api-ms-win-crt-time-l1-1-0

_time64
_gmtime32
_time32
_localtime64
_localtime32
_mktime32
_gmtime64
strftime
_mktime64
asctime
clock
_difftime64

api-ms-win-crt-heap-l1-1-0

realloc
_set_new_mode
malloc
calloc
free
_recalloc

api-ms-win-crt-convert-l1-1-0

atof
_itow
_wtoi
atoi
strtod
_itoa
strtoul

api-ms-win-crt-math-l1-1-0

frexp
ldexp
__libm_sse2_asinf
__libm_sse2_asin
__libm_sse2_acosf
__libm_sse2_acos
__libm_sse2_atan
_CItanh
_CIsinh
_CIfmod
_CIcosh
__libm_sse2_exp
__libm_sse2_atan2
modf
__setusermatherr
__libm_sse2_cosf
_isnan
floor
__libm_sse2_cos
ceil
__libm_sse2_tanf
__libm_sse2_tan
__libm_sse2_sinf
__libm_sse2_sin
__libm_sse2_powf
__libm_sse2_pow
__libm_sse2_logf
__libm_sse2_log10
__libm_sse2_log
__libm_sse2_expf

api-ms-win-crt-locale-l1-1-0

localeconv
setlocale
_configthreadlocale

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

AmdPowerXpressRequestHighPerformance
NvOptimusEnablement

Sections

.text
Size: 7.9MB - Virtual size: 7.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 274KB - Virtual size: 478KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 514KB - Virtual size: 514KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

34acef9d49ab4d2531471bf157bdfa37

Headers

DLL Characteristics

File Characteristics

Imports

elementskill

ftdriver

speedtreert

d3dx9_43

dsound

wininet

shlwapi

winmm

ws2_32

imm32

zlibwapi

glu32

discord_game_sdk

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

msvcp140

urlmon

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-environment-l1-1-0

Exports

Exports

Sections

.text Size: 7.9MB - Virtual size: 7.9MB

.rdata Size: 1.3MB - Virtual size: 1.3MB

.data Size: 274KB - Virtual size: 478KB

_RDATA Size: 156KB - Virtual size: 155KB

.rsrc Size: 79KB - Virtual size: 78KB

.reloc Size: 514KB - Virtual size: 514KB

.text
Size: 7.9MB - Virtual size: 7.9MB

.rdata
Size: 1.3MB - Virtual size: 1.3MB

.data
Size: 274KB - Virtual size: 478KB

_RDATA
Size: 156KB - Virtual size: 155KB

.rsrc
Size: 79KB - Virtual size: 78KB

.reloc
Size: 514KB - Virtual size: 514KB