BioShockInfinite[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

BioShockInfinite.exe
Size

21.5MB
MD5

0056fb3a4a0d13f103cfa980bfd834d2
SHA1

58076c7dcb688f1baa5781795c4c2c00aabe4fd7
SHA256

ce469d440e92a5477e35f12d817b6aff6710d7fcb4f6f6c154a6cf0c59d6492a
SHA512

7da452b96ad8d635be25a676d148d174e07e413d71a4f585beadc92b0c0cfa13fedaf61cc44c7373d57126803eac31fab1e8d3e9692c08563d20fd99518bb62a
SSDEEP

196608:fnJYWd1HFF9+zhs1BGf2z/9ZtN6cFHd0B4urvzhRZxMFlEcRYxMFlEcRuaNtt:fJlFvCiu25ZtNNFSB4uPbMFNRgMFNRD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BioShockInfinite.exe

Files

BioShockInfinite.exe
.exe windows:5 windows x86 arch:x86

78c709932c4887f689f696b31cd13f9a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord345

wsock32

htons
ntohs
shutdown
closesocket
bind
WSAGetLastError
connect
listen
select
inet_ntoa
ntohl
send
recvfrom
recv
getsockname
htonl
WSAStartup
gethostname
socket
accept
ioctlsocket
gethostbyname
sendto
setsockopt
getsockopt
WSACleanup

kernel32

EnterCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
InterlockedIncrement
InterlockedDecrement
InterlockedExchangeAdd
InterlockedExchange
InterlockedCompareExchange
GetCurrentThread
GetCurrentThreadId
SetThreadIdealProcessor
TlsAlloc
TlsSetValue
TlsGetValue
TlsFree
CreateSemaphoreW
CloseHandle
WaitForSingleObject
ReleaseSemaphore
SetCurrentDirectoryW
GetFileSize
CreateFileW
GetLastError
GetFileAttributesW
CreateDirectoryW
GetFileTime
SystemTimeToFileTime
GetSystemTime
SetEndOfFile
SetFilePointer
GetCurrentProcess
VerifyVersionInfoW
VerSetConditionMask
RtlCaptureStackBackTrace
RtlCaptureContext
ReadFile
RaiseException
GetProcAddress
GetModuleHandleW
FlushFileBuffers
ExitProcess
SetConsoleCtrlHandler
Sleep
CreateEventW
SetEvent
ResetEvent
ResumeThread
SuspendThread
SetThreadPriority
OutputDebugStringW
FormatMessageW
LoadLibraryW
FreeLibrary
GetVersionExW
GetLocalTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetSystemTimeAsFileTime
LocalFileTimeToFileTime
TerminateProcess
GetCurrentProcessId
GetModuleFileNameW
GetComputerNameW
QueryPerformanceFrequency
LocalFree
VirtualQuery
WriteFile
SetFilePointerEx
lstrlenA
DeleteFileW
SetFileAttributesW
GetFullPathNameA
SetThreadAffinityMask
CreateThread
MultiByteToWideChar
InitializeCriticalSection
GlobalUnlock
GlobalLock
FindClose
FindNextFileW
FindFirstFileW
TerminateThread
GlobalAlloc
CreateProcessW
RemoveDirectoryW
GetCommandLineW
LoadLibraryA
CopyFileW
MoveFileW
WriteConsoleW
SetConsoleTextAttribute
SetConsoleTitleW
LockResource
SizeofResource
LoadResource
FindResourceW
GetConsoleScreenBufferInfo
GetConsoleWindow
FreeConsole
SetConsoleScreenBufferSize
GetStdHandle
AllocConsole
GlobalMemoryStatusEx
GetSystemInfo
GetFileSizeEx
SetErrorMode
InterlockedCompareExchange64
VirtualAlloc
VirtualFree
ReleaseMutex
CreateMutexW
SetUnhandledExceptionFilter
GetDiskFreeSpaceExW
WaitForMultipleObjectsEx
HeapFree
GetTickCount
GetFileInformationByHandle
HeapAlloc
GetProcessHeap
lstrcmpiW
GetTimeZoneInformation
GetModuleHandleA
GetComputerNameA
GetFileInformationByHandleEx
OpenFileById
SetLastError
GetModuleHandleExA
GetEnvironmentStringsW
UnmapViewOfFile
GetFullPathNameW
HeapSize
CreateFileMappingA
AddVectoredExceptionHandler
GetStartupInfoW
CreateSemaphoreA
RemoveVectoredExceptionHandler
CreateFileA
MapViewOfFile
GetCurrentDirectoryW
CreateEventA
GetModuleFileNameA
CreateMutexA
OutputDebugStringA
DebugBreak
IsDebuggerPresent
UnhandledExceptionFilter
GetStartupInfoA
SleepEx
OpenEventA
HeapDestroy
HeapCreate
GetWindowsDirectoryW
OpenFileMappingA
GetSystemDirectoryW
OpenEventW
SetCriticalSectionSpinCount
lstrlenW
WideCharToMultiByte
DeleteCriticalSection
ExitThread
SwitchToThread
GetThreadPriority
InitializeSListHead
InterlockedPushEntrySList
InterlockedPopEntrySList
InterlockedFlushSList
SetStdHandle
LocalAlloc

user32

EnumDisplayDevicesW
SetActiveWindow
SetFocus
MessageBoxA
GetKeyboardLayoutNameW
ScreenToClient
SetCursor
MapWindowPoints
RegisterDeviceNotificationW
UnregisterDeviceNotification
CallWindowProcW
GetMessageA
IsDialogMessageA
SetCapture
PeekMessageA
SetWindowTextW
SetWindowsHookExW
PostThreadMessageW
GetKeyState
DefWindowProcA
UnregisterClassA
MoveWindow
GetDesktopWindow
SetWindowLongA
LoadCursorA
RegisterClassExA
GetWindowLongA
ValidateRect
CreateWindowExA
PostQuitMessage
DefWindowProcW
TranslateMessage
DispatchMessageW
PeekMessageW
UpdateWindow
SetWindowPlacement
GetWindowPlacement
SetWindowLongW
GetMonitorInfoW
UnhookWindowsHookEx
AdjustWindowRect
DispatchMessageA
GetCapture
MonitorFromWindow
SendInput
GetWindowLongW
CloseClipboard
GetClipboardData
OpenClipboard
GetActiveWindow
MessageBoxW
LoadIconW
DestroyWindow
CreateWindowExW
RegisterClassW
SetClipboardData
EmptyClipboard
ShowWindow
RegisterClassExW
EnableWindow
IsWindowEnabled
GetWindowThreadProcessId
EnumWindows
GetAncestor
ClipCursor
ReleaseCapture
ShowCursor
SystemParametersInfoW
GetSystemMetrics
GetWindowRect
DeleteMenu
GetSystemMenu
SetWindowPos
PostMessageW
EndPaint
GetClientRect
DrawStateW
BeginPaint
InvalidateRect
UnregisterClassW
GetMessageW
LoadImageW
LoadCursorW
ClientToScreen
IsIconic
GetFocus
IsWindow
GetForegroundWindow
CallNextHookEx
GetClipCursor
GetCursorInfo
GetCursorPos
SetCursorPos

advapi32

GetUserNameW
RegQueryValueExW
CryptHashData
CryptReleaseContext
CryptDestroyKey
CryptDestroyHash
CryptVerifySignatureW
CryptCreateHash
CryptImportKey
CryptAcquireContextW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegOpenKeyExW

gdi32

TextOutW
SetTextColor
GetObjectW
GetStockObject
SetBkMode
SetBkColor
SelectObject
DeleteObject
CreateFontIndirectW

iphlpapi

GetAdaptersInfo

common

RestartAppIfNecessary
WriteMiniDump
RunCallbacks
GameServer_RunCallbacks
Init
User
Friends
RemoteStorage
UserStats
SetMiniDumpComment
MatchmakingServers
Apps
Matchmaking
GameNetworking
GameServer_Init
GameServer
GameServerNetworking
MasterServerUpdater
RegisterCallback
UnregisterCallback
UnregisterCallResult
RegisterCallResult
GameServer_Shutdown
Shutdown
Client
GameServer_BSecure
GameServer_GetSteamID
Utils

dinput8

DirectInput8Create

xinput1_3

ord3
ord2

d3d9

Direct3DCreate9
D3DPERF_EndEvent
D3DPERF_BeginEvent

d3dx9_43

D3DXOptimizeFaces
D3DXMatrixOrthoOffCenterRH
D3DXMatrixLookAtRH
D3DXMatrixInverse
D3DXMatrixTranslation
D3DXMatrixMultiply
D3DXVec3Transform
D3DXMatrixScaling

d3dx11_43

D3DX11CheckVersion

nvtt

?setMipmapGeneration@InputOptions@nvtt@@QAEX_NH@Z
?setTextureLayout@InputOptions@nvtt@@QAEXW4TextureType@2@HHH@Z
??0InputOptions@nvtt@@QAE@XZ
?setMipmapData@InputOptions@nvtt@@QAE_NPBXHHHHH@Z
??0CompressionOptions@nvtt@@QAE@XZ
?setFormat@CompressionOptions@nvtt@@QAEXW4Format@2@@Z
?setQuality@CompressionOptions@nvtt@@QAEXW4Quality@2@@Z
??0Compressor@nvtt@@QAE@XZ
?enableCudaAcceleration@Compressor@nvtt@@QAEX_N@Z
??0OutputOptions@nvtt@@QAE@XZ
?setOutputHandler@OutputOptions@nvtt@@QAEXPAUOutputHandler@2@@Z
?setErrorHandler@OutputOptions@nvtt@@QAEXPAUErrorHandler@2@@Z
?process@Compressor@nvtt@@QBE_NABUInputOptions@2@ABUCompressionOptions@2@ABUOutputOptions@2@@Z
??1OutputOptions@nvtt@@QAE@XZ
??1Compressor@nvtt@@QAE@XZ
??1CompressionOptions@nvtt@@QAE@XZ
??1InputOptions@nvtt@@QAE@XZ

dbghelp

SymGetOptions
SymGetLineFromAddr64
SymGetSymFromAddr64
MiniDumpWriteDump
SymGetModuleInfo64
SymSetOptions
SymGetModuleInfoW64
SymInitialize
SymSetSearchPath
SymLoadModule64
StackWalk64
SymFunctionTableAccess64
SymGetModuleBase64

winmm

timeGetTime
timeBeginPeriod

shell32

ShellExecuteW
Shell_NotifyIconW
SHGetFolderPathW

ole32

CoCreateGuid
CoUninitialize
StringFromGUID2
CoCreateInstance
CoInitialize
CoSetProxyBlanket
CoInitializeEx

oleaut32

SysAllocString
SysFreeString

shlwapi

PathFindFileNameW
PathRemoveBlanksW
PathMatchSpecW

crypt32

CryptUnprotectData
CryptProtectData

winhttp

WinHttpQueryHeaders
WinHttpQueryDataAvailable
WinHttpReadData
WinHttpConnect
WinHttpReceiveResponse
WinHttpSetTimeouts
WinHttpOpen
WinHttpCheckPlatform
WinHttpSetOption
WinHttpAddRequestHeaders
WinHttpOpenRequest
WinHttpSendRequest
WinHttpWriteData
WinHttpSetStatusCallback
WinHttpCloseHandle

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

msvcr90

_amsg_exit
?terminate@@YAXXZ
_except_handler4_common
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_set_SSE2_enable
_except_handler3
strncpy
_CIexp
_wstat64
_wfopen_s
rewind
_errno
_itoa_s
_controlfp_s
_strtoui64
localeconv
strtod
strtol
strcspn
strspn
strtoul
wcscoll
_wcsicoll
isdigit
_CItan
_CIatan2
strrchr
isalnum
isalpha
isspace
fopen
atof
fprintf
_fpclass
sprintf_s
strchr
_aligned_free
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
sprintf
_setjmp3
longjmp
_iob
strlen
_aligned_malloc
printf
ftell
fseek
fread
fwrite
fgets
feof
fclose
vsprintf
fopen_s
isxdigit
tolower
_CIatan
_CIlog
_beginthreadex
_endthreadex
_CIsin
_CIcos
_CIsqrt
_vswprintf_c_l
wcsncmp
_set_purecall_handler
_set_invalid_parameter_handler
__iob_func
fflush
vswprintf_s
_snprintf
wctob
_wtoi64
strncmp
ceil
strstr
memmove_s
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
??0exception@std@@QAE@XZ
vsprintf_s
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
__libm_sse2_exp
__libm_sse2_log
_finite
_isnan
__libm_sse2_atan
__libm_sse2_tan
iswpunct
srand
swscanf_s
exit
free
malloc
_vscwprintf_p
_vsnprintf_s
_vsnwprintf_s
_set_abort_behavior
abort
wprintf
toupper
__libm_sse2_acos
__libm_sse2_asin
__libm_sse2_atan2
qsort
strncpy_s
wcsncpy_s
_wstrtime_s
_wstrdate_s
_wstat64i32
_time64
_gmtime64_s
_wutime64
_CxxThrowException
ldexp
__libm_sse2_pow
__libm_sse2_sin
_wcsnicmp
_wcstoui64
wcstoul
wcstod
_wtof
atoi
_wtoi
_stricmp
wcsrchr
wcschr
wcsstr
strcat_s
wcscat_s
wcscpy_s
strcpy_s
abs
vprintf
memmove
rand
_CIpow
_CIfmod
floor
_CIasin
_CIacos
memset
memcpy
__libm_sse2_cos
__CxxFrameHandler3
_purecall
_wcsicmp
_snprintf_s
wprintf_s
_snwprintf_s
printf_s
_vsnprintf

apexframeworkshipping_x86

NxCreateApexSDK

powrprof

CallNtPowerInformation

psapi

GetProcessMemoryInfo

faultrep

ReportFault

Exports

Exports

??1CAkRegisteredObj@@QAE@XZ
?AddBehavioralExtension@SoundEngine@AK@@YA?AW4AKRESULT@@P6AX_N@Z@Z
?AddLanguageChangeObserver@StreamMgr@AK@@YA?AW4AKRESULT@@P6AXQB_WPAX@Z1@Z
?AddPlayerMotionDevice@MotionEngine@AK@@YA?AW4AKRESULT@@EKKPAX@Z
?Break@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@K@Z
?BypassEnvironment@SoundEngine@AK@@YA?AW4AKRESULT@@K_N@Z
?CancelBankCallbackCookie@SoundEngine@AK@@YAXPAX@Z
?CancelEventCallback@SoundEngine@AK@@YAXK@Z
?CancelEventCallbackCookie@SoundEngine@AK@@YAXPAX@Z
?CheckPoolId@MemoryMgr@AK@@YA?AW4AKRESULT@@J@Z
?ClearBanks@SoundEngine@AK@@YA?AW4AKRESULT@@XZ
?ClearPreparedEvents@SoundEngine@AK@@YA?AW4AKRESULT@@XZ
?Close@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@K@Z
?Create@StreamMgr@AK@@YAPAVIAkStreamMgr@2@ABUAkStreamMgrSettings@@@Z
?CreateAudioInputSource@@YAPAVIAkPlugin@AK@@PAVIAkPluginMemAlloc@2@@Z
?CreateAudioInputSourceParams@@YAPAVIAkPluginParam@AK@@PAVIAkPluginMemAlloc@2@@Z
?CreateDevice@StreamMgr@AK@@YAKABUAkDeviceSettings@@PAVIAkLowLevelIOHook@12@@Z
?CreatePool@MemoryMgr@AK@@YAJPAXKKKK@Z
?DestroyDevice@StreamMgr@AK@@YA?AW4AKRESULT@@K@Z
?DestroyPool@MemoryMgr@AK@@YA?AW4AKRESULT@@J@Z
?ExecuteActionOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@KW4AkActionOnEventType@12@IJW4AkCurveInterpolation@@K@Z
?ExecuteActionOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PBDW4AkActionOnEventType@12@IJW4AkCurveInterpolation@@K@Z
?ExecuteActionOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WW4AkActionOnEventType@12@IJW4AkCurveInterpolation@@K@Z
?Falign@MemoryMgr@AK@@YA?AW4AKRESULT@@JPAX@Z
?Free@MemoryMgr@AK@@YA?AW4AKRESULT@@JPAX@Z
?GetActiveGameObjects@Query@SoundEngine@AK@@YA?AW4AKRESULT@@AAV?$AkArray@IIUArrayPoolDefault@@$0CA@@@@Z
?GetActiveListeners@Query@SoundEngine@AK@@YA?AW4AKRESULT@@IAAK@Z
?GetBlock@MemoryMgr@AK@@YAPAXJ@Z
?GetBlockSize@MemoryMgr@AK@@YAKJ@Z
?GetCurrentLanguage@StreamMgr@AK@@YAPB_WXZ
?GetDefaultDeviceSettings@StreamMgr@AK@@YAXAAUAkDeviceSettings@@@Z
?GetDefaultInitSettings@MusicEngine@AK@@YAXAAUAkMusicSettings@@@Z
?GetDefaultInitSettings@SoundEngine@AK@@YAXAAUAkInitSettings@@@Z
?GetDefaultPlatformInitSettings@SoundEngine@AK@@YAXAAUAkPlatformInitSettings@@@Z
?GetDefaultSettings@StreamMgr@AK@@YAXAAUAkStreamMgrSettings@@@Z
?GetEnvironmentBypass@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KAA_N@Z
?GetEnvironmentVolume@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KAAM@Z
?GetEnvironmentVolumes@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KAAUAkSpeakerVolumes@@@Z
?GetFileLocationResolver@StreamMgr@AK@@YAPAVIAkFileLocationResolver@12@XZ
?GetGameObjectDryLevelValue@Query@SoundEngine@AK@@YA?AW4AKRESULT@@IAAM@Z
?GetGameObjectEnvironmentsValues@Query@SoundEngine@AK@@YA?AW4AKRESULT@@IPAUAkEnvironmentValue@@AAK@Z
?GetIDFromString@SoundEngine@AK@@YAKPBD@Z
?GetIDFromString@SoundEngine@AK@@YAKPB_W@Z
?GetIsGameObjectActive@Query@SoundEngine@AK@@YA_NI@Z
?GetListenerPosition@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KAAUAkListenerPosition@@@Z
?GetListenerSpatialization@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KAA_NAAUAkSpeakerVolumes@@@Z
?GetMaxPools@MemoryMgr@AK@@YAJXZ
?GetMaxRadius@Query@SoundEngine@AK@@YA?AW4AKRESULT@@AAV?$AkArray@UGameObjDst@Query@SoundEngine@AK@@ABU1234@UArrayPoolDefault@@$0CA@@@@Z
?GetMaxRadius@Query@SoundEngine@AK@@YAMI@Z
?GetNumPools@MemoryMgr@AK@@YAJXZ
?GetObjAndAddref@CAkRegistryMgr@@QAEPAVCAkRegisteredObj@@I@Z
?GetObjectObstructionAndOcclusion@Query@SoundEngine@AK@@YA?AW4AKRESULT@@IKAAM0@Z
?GetPanningRule@SoundEngine@AK@@YA?AW4AkPanningRule@@XZ
?GetPlayingSegmentInfo@MusicEngine@AK@@YA?AW4AKRESULT@@KAAUAkSegmentInfo@@_N@Z
?GetPoolAttributes@MemoryMgr@AK@@YA?AW4AkMemPoolAttributes@@J@Z
?GetPoolID@StreamMgr@AK@@YAJXZ
?GetPoolMemoryUsed@MemoryMgr@AK@@YAXJAAUPoolMemInfo@12@@Z
?GetPoolName@MemoryMgr@AK@@YAPA_WJ@Z
?GetPoolStats@MemoryMgr@AK@@YA?AW4AKRESULT@@JAAUPoolStats@12@@Z
?GetPosition@Query@SoundEngine@AK@@YA?AW4AKRESULT@@IAAUAkSoundPosition@@@Z
?GetPositioningInfo@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KAAUAkPositioningInfo@@@Z
?GetRTPCValue@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KIAAMAAW4RTPCValue_type@123@@Z
?GetRTPCValue@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PBDIAAMAAW4RTPCValue_type@123@@Z
?GetRTPCValue@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WIAAMAAW4RTPCValue_type@123@@Z
?GetSourcePlayPosition@SoundEngine@AK@@YA?AW4AKRESULT@@KPAJ_N@Z
?GetSpeakerConfiguration@SoundEngine@AK@@YAKXZ
?GetState@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KAAK@Z
?GetState@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PBDAAK@Z
?GetState@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WAAK@Z
?GetSwitch@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KIAAK@Z
?GetSwitch@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PBDIAAK@Z
?GetSwitch@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WIAAK@Z
?GetTimeStamp@Monitor@AK@@YAJXZ
?Init@MusicEngine@AK@@YA?AW4AKRESULT@@PAUAkMusicSettings@@@Z
?Init@SoundEngine@AK@@YA?AW4AKRESULT@@PAUAkInitSettings@@PAUAkPlatformInitSettings@@@Z
?IsInitialized@MemoryMgr@AK@@YA_NXZ
?IsInitialized@SoundEngine@AK@@YA_NXZ
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@KJ@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@KP6AXKW43@JPAX@Z1J@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PBDJAAK@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PBDP6AXKW43@JPAX@Z2JAAK@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PBXKAAK@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PBXKP6AXKW43@JPAX@Z2AAK@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WJAAK@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WP6AXKW43@JPAX@Z2JAAK@Z
?LockPlaylist@DynamicSequence@SoundEngine@AK@@YAPAVPlaylist@123@K@Z
?Malign@MemoryMgr@AK@@YAPAXJIK@Z
?Malloc@MemoryMgr@AK@@YAPAXJI@Z
?Open@DynamicSequence@SoundEngine@AK@@YAKIKP6AXW4AkCallbackType@@PAUAkCallbackInfo@@@ZPAXW4DynamicSequenceType@123@@Z
?Pause@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@KJW4AkCurveInterpolation@@@Z
?Play@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@KJW4AkCurveInterpolation@@@Z
?PlaySourcePlugin@SoundEngine@AK@@YAKKKI@Z
?PostCode@Monitor@AK@@YA?AW4AKRESULT@@W4ErrorCode@12@W4ErrorLevel@12@@Z
?PostEvent@SoundEngine@AK@@YAKKIKP6AXW4AkCallbackType@@PAUAkCallbackInfo@@@ZPAXKPAUAkExternalSourceInfo@@K@Z
?PostEvent@SoundEngine@AK@@YAKPBDIKP6AXW4AkCallbackType@@PAUAkCallbackInfo@@@ZPAXKPAUAkExternalSourceInfo@@K@Z
?PostEvent@SoundEngine@AK@@YAKPB_WIKP6AXW4AkCallbackType@@PAUAkCallbackInfo@@@ZPAXKPAUAkExternalSourceInfo@@K@Z
?PostString@Monitor@AK@@YA?AW4AKRESULT@@PBDW4ErrorLevel@12@@Z
?PostString@Monitor@AK@@YA?AW4AKRESULT@@PB_WW4ErrorLevel@12@@Z
?PostTrigger@SoundEngine@AK@@YA?AW4AKRESULT@@KI@Z
?PostTrigger@SoundEngine@AK@@YA?AW4AKRESULT@@PBDI@Z
?PostTrigger@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WI@Z
?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@KP6AXKW43@JPAX@Z2W4AkBankContent@12@P6AXKPB_W_N@Z@Z
?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@KW4AkBankContent@12@P6AXKPB_W_N@Z@Z
?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PBDP6AXKW43@JPAX@Z3W4AkBankContent@12@P6AXKPB_W_N@Z@Z
?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PBDW4AkBankContent@12@P6AXKPB_W_N@Z@Z
?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PB_WP6AXKW43@JPAX@Z3W4AkBankContent@12@P6AXK1_N@Z@Z
?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PB_WW4AkBankContent@12@P6AXK1_N@Z@Z
?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PAKK@Z
?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PAKKP6AXKPB_W_N@ZPAXP6AXKW43@J5@Z5@Z
?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PAKKP6AXKW43@JPAX@Z3@Z
?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PAPBDK@Z
?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PAPBDKP6AXKW43@JPAX@Z3@Z
?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PAPB_WK@Z
?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PAPB_WKP6AXKW43@JPAX@Z3@Z
?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@KPAKK@Z
?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@KPAKKP6AXKW43@JPAX@Z4@Z
?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@PBDPAPBDK@Z
?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@PBDPAPBDKP6AXKW43@JPAX@Z5@Z
?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@PB_WPAPB_WK@Z
?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@PB_WPAPB_WKP6AXKW43@JPAX@Z5@Z
?QueryAudioObjectIDs@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KAAKPAUAkObjectInfo@@@Z
?QueryAudioObjectIDs@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PBDAAKPAUAkObjectInfo@@@Z
?QueryAudioObjectIDs@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WAAKPAUAkObjectInfo@@@Z
?RegisterCodec@SoundEngine@AK@@YA?AW4AKRESULT@@KKP6APAVIAkSoftwareCodec@@PAX@Z1@Z
?RegisterGameObj@SoundEngine@AK@@YA?AW4AKRESULT@@I@Z
?RegisterGameObj@SoundEngine@AK@@YA?AW4AKRESULT@@IPBD@Z
?RegisterGlobalCallback@SoundEngine@AK@@YA?AW4AKRESULT@@P6AX_N@Z@Z
?RegisterMotionDevice@MotionEngine@AK@@YAXKKP6APAVIAkPlugin@2@PAVIAkPluginMemAlloc@2@@Z@Z
?RegisterPlugin@SoundEngine@AK@@YA?AW4AKRESULT@@W4AkPluginType@@KKP6APAVIAkPlugin@2@PAVIAkPluginMemAlloc@2@@ZP6APAVIAkPluginParam@2@1@Z@Z
?ReleaseBlock@MemoryMgr@AK@@YA?AW4AKRESULT@@JPAX@Z
?RemoveBehavioralExtension@SoundEngine@AK@@YA?AW4AKRESULT@@P6AX_N@Z@Z
?RemoveLanguageChangeObserver@StreamMgr@AK@@YAXPAX@Z
?RemovePlayerMotionDevice@MotionEngine@AK@@YAXEKK@Z
?RenderAudio@SoundEngine@AK@@YA?AW4AKRESULT@@XZ
?ResetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@KIJW4AkCurveInterpolation@@@Z
?ResetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@PBDIJW4AkCurveInterpolation@@@Z
?ResetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WIJW4AkCurveInterpolation@@@Z
?ResolveDialogueEvent@DynamicDialogue@SoundEngine@AK@@YAKKPAKKK@Z
?ResolveDialogueEvent@DynamicDialogue@SoundEngine@AK@@YAKPBDPAPBDKK@Z
?ResolveDialogueEvent@DynamicDialogue@SoundEngine@AK@@YAKPB_WPAPB_WKK@Z
?Resume@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@KJW4AkCurveInterpolation@@@Z
?SeekOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@KIJ_N@Z
?SeekOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@KIM_N@Z
?SeekOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PBDIJ_N@Z
?SeekOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PBDIM_N@Z
?SeekOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WIJ_N@Z
?SeekOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WIM_N@Z
?SetActiveListeners@SoundEngine@AK@@YA?AW4AKRESULT@@IK@Z
?SetAttenuationScalingFactor@SoundEngine@AK@@YA?AW4AKRESULT@@IM@Z
?SetAudioInputCallbacks@@YAXP6AXKPAVAkAudioBuffer@@@ZP6AXKAAUAkAudioFormat@@@ZP6AMK@Z@Z
?SetBankLoadIOSettings@SoundEngine@AK@@YA?AW4AKRESULT@@MD@Z
?SetCurrentLanguage@StreamMgr@AK@@YA?AW4AKRESULT@@PB_W@Z
?SetEffect@SoundEngine@AK@@YA?AW4AKRESULT@@KKK@Z
?SetEnvironmentVolume@SoundEngine@AK@@YA?AW4AKRESULT@@KM@Z
?SetEnvironmentVolumes@SoundEngine@AK@@YA?AW4AKRESULT@@KABUAkSpeakerVolumes@@@Z
?SetFileLocationResolver@StreamMgr@AK@@YAXPAVIAkFileLocationResolver@12@@Z
?SetGameObjectDryLevelValue@SoundEngine@AK@@YA?AW4AKRESULT@@IM@Z
?SetGameObjectEnvironmentsValues@SoundEngine@AK@@YA?AW4AKRESULT@@IPAUAkEnvironmentValue@@K@Z
?SetListenerPipeline@SoundEngine@AK@@YA?AW4AKRESULT@@K_N0@Z
?SetListenerPosition@SoundEngine@AK@@YA?AW4AKRESULT@@ABUAkListenerPosition@@K@Z
?SetListenerScalingFactor@SoundEngine@AK@@YA?AW4AKRESULT@@KM@Z
?SetListenerSpatialization@SoundEngine@AK@@YA?AW4AKRESULT@@K_NPAUAkSpeakerVolumes@@@Z
?SetLocalOutput@Monitor@AK@@YA?AW4AKRESULT@@KP6AXW4ErrorCode@12@PB_WW4ErrorLevel@12@KI@Z@Z
?SetMaxNumVoicesLimit@SoundEngine@AK@@YA?AW4AKRESULT@@G@Z
?SetMonitoring@MemoryMgr@AK@@YA?AW4AKRESULT@@J_N@Z
?SetMultiplePositions@SoundEngine@AK@@YA?AW4AKRESULT@@IPBUAkSoundPosition@@GW4MultiPositionType@12@@Z
?SetObjectObstructionAndOcclusion@SoundEngine@AK@@YA?AW4AKRESULT@@IKMM@Z
?SetPanningRule@SoundEngine@AK@@YA?AW4AKRESULT@@W4AkPanningRule@@@Z
?SetPlayerListener@MotionEngine@AK@@YAXEE@Z
?SetPlayerVolume@MotionEngine@AK@@YAXEM@Z
?SetPoolName@MemoryMgr@AK@@YA?AW4AKRESULT@@JPBD@Z
?SetPoolName@MemoryMgr@AK@@YA?AW4AKRESULT@@JPB_W@Z
?SetPoolName@Monitor@AK@@YA?AW4AKRESULT@@JPAD@Z
?SetPoolName@Monitor@AK@@YA?AW4AKRESULT@@JPA_W@Z
?SetPosition@SoundEngine@AK@@YA?AW4AKRESULT@@IABUAkSoundPosition@@K@Z
?SetPositionInternal@SoundEngine@AK@@YA?AW4AKRESULT@@IABUAkSoundPosition@@K@Z
?SetRTPCInternal@CAkRTPCMgr@@QAE?AW4AKRESULT@@KMPAVCAkRegisteredObj@@AAUTransParams@@W4AkValueMeaning@@@Z
?SetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@KMIJW4AkCurveInterpolation@@@Z
?SetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@PBDMIJW4AkCurveInterpolation@@@Z
?SetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WMIJW4AkCurveInterpolation@@@Z
?SetState@SoundEngine@AK@@YA?AW4AKRESULT@@KK@Z
?SetState@SoundEngine@AK@@YA?AW4AKRESULT@@PBD0@Z
?SetState@SoundEngine@AK@@YA?AW4AKRESULT@@PB_W0@Z
?SetSwitch@SoundEngine@AK@@YA?AW4AKRESULT@@KKI@Z
?SetSwitch@SoundEngine@AK@@YA?AW4AKRESULT@@PBD0I@Z
?SetSwitch@SoundEngine@AK@@YA?AW4AKRESULT@@PB_W0I@Z
?SetVolumeThreshold@SoundEngine@AK@@YA?AW4AKRESULT@@M@Z
?StartOutputCapture@SoundEngine@AK@@YA?AW4AKRESULT@@PB_W@Z
?Stop@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@KJW4AkCurveInterpolation@@@Z
?StopAll@SoundEngine@AK@@YAXI@Z
?StopOutputCapture@SoundEngine@AK@@YA?AW4AKRESULT@@XZ
?StopPlayingID@SoundEngine@AK@@YAXKJW4AkCurveInterpolation@@@Z
?StopSourcePlugin@SoundEngine@AK@@YA?AW4AKRESULT@@KKK@Z
?Term@MemoryMgr@AK@@YAXXZ
?Term@MusicEngine@AK@@YAXXZ
?Term@SoundEngine@AK@@YAXXZ
?TootleCleanup@@YAXXZ
?TootleClusterMesh@@YA?AW4TootleResult@@PBXPBIIIIIPAI22@Z
?TootleFastOptimize@@YA?AW4TootleResult@@PBXPBIIIIIW4TootleFaceWinding@@PAI3M@Z
?TootleFastOptimizeVCacheAndClusterMesh@@YA?AW4TootleResult@@PBIIIIPAI11M@Z
?TootleInit@@YA?AW4TootleResult@@XZ
?TootleMeasureCacheEfficiency@@YA?AW4TootleResult@@PBIIIPAM@Z
?TootleMeasureOverdraw@@YA?AW4TootleResult@@PBXPBIIIIPBMIW4TootleFaceWinding@@PAM4W4TootleOverdrawOptimizer@@@Z
?TootleOptimize@@YA?AW4TootleResult@@PBXPBIIIIIPBMIW4TootleFaceWinding@@PAI4W4TootleVCacheOptimizer@@W4TootleOverdrawOptimizer@@@Z
?TootleOptimizeOverdraw@@YA?AW4TootleResult@@PBXPBIIIIPBMIW4TootleFaceWinding@@1PAI4W4TootleOverdrawOptimizer@@@Z
?TootleOptimizeVCache@@YA?AW4TootleResult@@PBIIIIPAI1W4TootleVCacheOptimizer@@@Z
?TootleOptimizeVertexMemory@@YA?AW4TootleResult@@PBXPBIIIIPAXPAI3@Z
?TootleVCacheClusters@@YA?AW4TootleResult@@PBIIII0PAI1W4TootleVCacheOptimizer@@@Z
?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@KP6AXKW43@JPAX@Z1@Z
?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@KPAJ@Z
?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PBDP6AXKW43@JPAX@Z2@Z
?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PBDPAJ@Z
?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WP6AXKW43@JPAX@Z2@Z
?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WPAJ@Z
?UnlockPlaylist@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@K@Z
?UnregisterAllGameObj@SoundEngine@AK@@YA?AW4AKRESULT@@XZ
?UnregisterGameObj@SoundEngine@AK@@YA?AW4AKRESULT@@I@Z
?UnregisterGlobalCallback@SoundEngine@AK@@YA?AW4AKRESULT@@P6AX_N@Z@Z
?g_DefaultPoolId@@3JA
?g_LEngineDefaultPoolId@@3JA
?g_pAssertHook@@3P6AXPBD0H@ZA
?g_pRTPCMgr@@3PAVCAkRTPCMgr@@A
?g_pRegistryMgr@@3PAVCAkRegistryMgr@@A
?m_pStreamMgr@IAkStreamMgr@AK@@1PAV12@A
GetOutermost
PIBGetInterface

Sections

.text
Size: 13.6MB - Virtual size: 13.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.conceal
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.7MB - Virtual size: 5.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 151KB - Virtual size: 920KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 851KB - Virtual size: 852KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

78c709932c4887f689f696b31cd13f9a

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

wsock32

kernel32

user32

advapi32

gdi32

iphlpapi

common

dinput8

xinput1_3

d3d9

d3dx9_43

d3dx11_43

nvtt

dbghelp

winmm

shell32

ole32

oleaut32

shlwapi

crypt32

winhttp

msvcp90

msvcr90

apexframeworkshipping_x86

powrprof

psapi

faultrep

Exports

Exports

Sections

.text Size: 13.6MB - Virtual size: 13.6MB

.conceal Size: 6KB - Virtual size: 8KB

.rdata Size: 5.7MB - Virtual size: 5.7MB

.data Size: 151KB - Virtual size: 920KB

.rsrc Size: 851KB - Virtual size: 852KB

.reloc Size: 1.2MB - Virtual size: 1.2MB

.text
Size: 13.6MB - Virtual size: 13.6MB

.conceal
Size: 6KB - Virtual size: 8KB

.rdata
Size: 5.7MB - Virtual size: 5.7MB

.data
Size: 151KB - Virtual size: 920KB

.rsrc
Size: 851KB - Virtual size: 852KB

.reloc
Size: 1.2MB - Virtual size: 1.2MB