camellia_1a513[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

camellia_1a513.zip
Size

269.6MB
MD5

850bbada0a47132499b8a4f531cc62bb
SHA1

0bce6ea3c5d8be78c52d3ae3912c2c206b8efb36
SHA256

332270803defb02ddb2bcaca7b03837fe8f15c4868866da83841c154b12afc5b
SHA512

15f1d12b24d3defb8d9b1eb80b9ff695ed272280f6be9ca57bf0c74badeab953be12069eedb4719eb9c866ac39b56255f851734b4decccdc9547e577df9afe76
SSDEEP

6291456:T+LDM+FB7yg6mqCOoUsxpbxccUc1uSK1yUVGH8XUB4FpuwN5UhXthHlhMhC1L:f0P6qUHSK8cGcXUyruF481L

Score

3^/10

Malware Config

Signatures

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/extension-webm.ndll
unpack001/lime.ndll
unpack001/vs. Camellia.exe

Files

camellia_1a513.zip
.zip
LICENSE.txt
assets/camelliaweek/images/background.jpg
.jpg
assets/camelliaweek/images/boyfriendPort.png
.png
assets/camelliaweek/images/boyfriendPort.xml
assets/camelliaweek/images/menus/cache/bg.png
.png
assets/camelliaweek/images/menus/main/back.png
.png
assets/camelliaweek/images/menus/main/front.png
.png
assets/camelliaweek/images/menus/pause/pausemenu.png
.png
assets/camelliaweek/images/menus/title/bg.png
.png
assets/camelliaweek/images/notes/death.png
.png
assets/camelliaweek/images/notes/death.xml
.xml
assets/camelliaweek/images/stage1/BF_GLOW.png
.png
assets/camelliaweek/images/stage1/BG_CITY.png
.png
assets/camelliaweek/images/stage1/BG_WALL.png
.png
assets/camelliaweek/images/stage1/CAMELLIA_GLOW.png
.png
assets/camelliaweek/images/stage1/FG_Floor.png
.png
assets/camelliaweek/images/stage1/camelliaJumpscare.png
.png
assets/camelliaweek/images/stage2/backcrowd.png
.png
assets/camelliaweek/images/stage2/buildings.png
.png
assets/camelliaweek/images/stage2/camelliaJumpscare.png
.png
assets/camelliaweek/images/stage2/farbuildings.png
.png
assets/camelliaweek/images/stage2/frontcrowd.png
.png
assets/camelliaweek/images/stage2/frontcrowd_hf.png
.png
assets/camelliaweek/images/stage2/jabibiamogus.png
.png
assets/camelliaweek/images/stage2/sky.png
.png
assets/camelliaweek/images/stage2/speaker_left.png
.png
assets/camelliaweek/images/stage2/speaker_left.xml
assets/camelliaweek/images/stage2/speaker_right.png
.png
assets/camelliaweek/images/stage2/speaker_right.xml
assets/camelliaweek/images/stage2/speakerleft.png
.png
assets/camelliaweek/images/stage2/speakerleft.xml
assets/camelliaweek/images/stage2/stage.png
.png
assets/camelliaweek/images/stage2/win1.png
.png
assets/camelliaweek/images/stage2/win2.png
.png
assets/camelliaweek/images/stage2/win3.png
.png
assets/camelliaweek/images/stage2/win4.png
.png
assets/camelliaweek/images/stage2/win5.png
.png
assets/data/characterList.txt
assets/data/characters/gf.json
assets/data/controls.txt
assets/data/creditsList.txt
assets/data/freeplaySonglist.txt
assets/data/gfVersionList.txt
assets/data/introText.txt
assets/data/main-view.xml
assets/data/noteStyleList.txt
assets/data/songs/boyfriend/_meta.json
assets/data/songs/boyfriend/boyfriend-easy.json
assets/data/songs/boyfriend/boyfriend-hard.json
assets/data/songs/boyfriend/boyfriend.json
assets/data/songs/crystallized/_meta.json
assets/data/songs/crystallized/crystallized-easy.json
assets/data/songs/crystallized/crystallized-hard.json
assets/data/songs/crystallized/crystallized.json
assets/data/songs/crystallized/dialogue-c.txt
assets/data/songs/crystallized/dialogue.txt
assets/data/songs/first-town/_meta.json
assets/data/songs/first-town/dialogue-c.txt
assets/data/songs/first-town/dialogue.txt
assets/data/songs/first-town/first-town-easy.json
assets/data/songs/first-town/first-town-hard.json
assets/data/songs/first-town/first-town.json
assets/data/songs/first-town/modchart.lua
assets/data/songs/ghost-vip/_meta.json
assets/data/songs/ghost-vip/dialogue-c.txt
assets/data/songs/ghost-vip/dialogue.txt
assets/data/songs/ghost-vip/ghost-vip-easy.json
assets/data/songs/ghost-vip/ghost-vip-hard.json
assets/data/songs/ghost-vip/ghost-vip.json
assets/data/songs/ghost/_meta.json
assets/data/songs/ghost/dialogue-c.txt
assets/data/songs/ghost/dialogue.txt
assets/data/songs/ghost/ghost-easy.json
assets/data/songs/ghost/ghost-hard.json
assets/data/songs/ghost/ghost.json
assets/data/songs/ghost/modchart-c.lua
assets/data/songs/ghost/modchart.lua
assets/data/songs/ghoul/_meta.json
assets/data/songs/ghoul/dialogue-c.txt
assets/data/songs/ghoul/dialogue.txt
assets/data/songs/ghoul/ghoul-easy.json
assets/data/songs/ghoul/ghoul-hard.json
assets/data/songs/ghoul/ghoul.json
assets/data/songs/lioness-pride/_meta.json
assets/data/songs/lioness-pride/dialogue-c.txt
assets/data/songs/lioness-pride/dialogue.txt
assets/data/songs/lioness-pride/lioness-pride-easy.json
assets/data/songs/lioness-pride/lioness-pride-hard.json
assets/data/songs/lioness-pride/lioness-pride.json
assets/data/songs/liquated/_meta.json
assets/data/songs/liquated/dialogue-c.txt
assets/data/songs/liquated/dialogue.txt
assets/data/songs/liquated/liquated-easy.json
assets/data/songs/liquated/liquated-hard.json
assets/data/songs/liquated/liquated.json
assets/data/songs/liquated/modchart.lua
assets/data/songs/nacreous-snowmelt/_meta.json
assets/data/songs/nacreous-snowmelt/dialogue-c.txt
assets/data/songs/nacreous-snowmelt/dialogue.txt
assets/data/songs/nacreous-snowmelt/nacreous-snowmelt-easy.json
assets/data/songs/nacreous-snowmelt/nacreous-snowmelt-hard.json
assets/data/songs/nacreous-snowmelt/nacreous-snowmelt.json
assets/data/songs/pico/_meta.json
assets/data/songs/pico/pico-easy.json
assets/data/songs/pico/pico-hard.json
assets/data/songs/pico/pico.json
assets/data/songs/quaoar/_meta.json
assets/data/songs/quaoar/dialogue-c.txt
assets/data/songs/quaoar/dialogue.txt
assets/data/songs/quaoar/quaoar-easy.json
assets/data/songs/quaoar/quaoar-hard.json
assets/data/songs/quaoar/quaoar.json
assets/data/songs/tutorial/_meta.json
assets/data/songs/tutorial/tutorial-easy.json
assets/data/songs/tutorial/tutorial-hard.json
assets/data/songs/tutorial/tutorial.json
assets/data/songs/why-do-you-hate-me/_meta.json
assets/data/songs/why-do-you-hate-me/dialogue-c.txt
assets/data/songs/why-do-you-hate-me/dialogue.txt
assets/data/songs/why-do-you-hate-me/modchart.lua
assets/data/songs/why-do-you-hate-me/why-do-you-hate-me-easy.json
assets/data/songs/why-do-you-hate-me/why-do-you-hate-me-hard.json
assets/data/songs/why-do-you-hate-me/why-do-you-hate-me.json
assets/data/specialThanks.txt
assets/data/stageList.txt
assets/data/weekNames.txt
assets/images/FNF_main_menu_assets.png
.png
assets/images/FNF_main_menu_assets.xml
assets/images/KadeEngineLogo.png
.png
assets/images/alphabet.png
.png
assets/images/alphabet.xml
assets/images/campaign_menu_UI_assets.png
.png
assets/images/campaign_menu_UI_assets.xml
assets/images/campaign_menu_UI_characters.png
.png
assets/images/campaign_menu_UI_characters.xml
assets/images/conic.png
.png
assets/images/gfDanceTitle.png
.png
assets/images/gfDanceTitle.xml
assets/images/iconGrid.png
.png
assets/images/icons/icon-bf.png
.png
assets/images/icons/icon-bfHalloween.png
.png
assets/images/icons/icon-botan.png
.png
assets/images/icons/icon-camellia.png
.png
assets/images/icons/icon-camelliaHalloween.png
.png
assets/images/icons/icon-dad.png
.png
assets/images/icons/icon-gf.png
.png
assets/images/icons/icon-gfHalloween.png
.png
assets/images/icons/icon-pico.png
.png
assets/images/icons/icon-sm.png
.png
assets/images/logo.png
.png
assets/images/logoBumpin.png
.png
assets/images/logoBumpin.xml
assets/images/menuBG.png
.png
assets/images/menuBGBlue.png
.png
assets/images/menuBGMagenta.png
.png
assets/images/menuDesat.png
.png
assets/images/newgrounds_logo.png
.png
assets/images/num0.png
.png
assets/images/num1.png
.png
assets/images/num2.png
.png
assets/images/num3.png
.png
assets/images/num4.png
.png
assets/images/num5.png
.png
assets/images/num6.png
.png
assets/images/num7.png
.png
assets/images/num8.png
.png
assets/images/num9.png
.png
assets/images/something.png
.png
assets/images/storymenu/week0.png
.png
assets/images/storymenu/week1.png
.png
assets/images/storymenu/week2.png
.png
assets/images/storymenu/week3.png
.png
assets/images/titleEnter.png
.png
assets/images/titleEnter.xml
assets/music/freakyMenu.ogg
assets/shared/images/Dialogue_Box.png
.png
assets/shared/images/Dialogue_Box.xml
assets/shared/images/_105482203__105172250_gettyimages-857294664.jpg
.jpg
assets/shared/images/backspace.png
.png
assets/shared/images/backspace.xml
assets/shared/images/bad.png
.png
assets/shared/images/characters/BOYFRIEND.png
.png
assets/shared/images/characters/BOYFRIEND.xml
assets/shared/images/characters/BOYFRIEND_halloween.png
.png
assets/shared/images/characters/BOYFRIEND_halloween.xml
assets/shared/images/characters/GF_assets.png
.png
assets/shared/images/characters/GF_assets.xml
assets/shared/images/characters/GF_assets_halloween.png
.png
assets/shared/images/characters/GF_assets_halloween.xml
assets/shared/images/characters/Pico_FNF_assetss.png
.png
assets/shared/images/characters/Pico_FNF_assetss.xml
assets/shared/images/characters/bfPixelsDEAD.xml
assets/shared/images/characters/botan.png
.png
assets/shared/images/characters/botan.xml
assets/shared/images/characters/camellia.png
.png
assets/shared/images/characters/camellia.xml
assets/shared/images/characters/camellia_halloween.png
.png
assets/shared/images/characters/camellia_halloween.xml
assets/shared/images/characters/offsets/bfHalloweenOffsets.txt
assets/shared/images/characters/offsets/bfOffsets.txt
assets/shared/images/characters/offsets/botanOffsets.txt
assets/shared/images/characters/offsets/camelliaHalloweenOffsets.txt
assets/shared/images/characters/offsets/gfHalloweenOffsets.txt
assets/shared/images/characters/offsets/gfOffsets.txt
assets/shared/images/characters/offsets/picoOffsets.txt
assets/shared/images/characters/whatdacamelliadoin.png
.png
assets/shared/images/combo.png
.png
assets/shared/images/go.png
.png
assets/shared/images/good.png
.png
assets/shared/images/grafix.png
.png
assets/shared/images/healthBar.png
.png
assets/shared/images/i_am_INSIDE_YOUR_HOU.png
.png
assets/shared/images/lose.png
.png
assets/shared/images/lose.xml
assets/shared/images/marvelous.png
.png
assets/shared/images/noteskins/Arrows-pixel-ends.png
.png
assets/shared/images/noteskins/Arrows-pixel.png
.png
assets/shared/images/noteskins/Arrows.png
.png
assets/shared/images/noteskins/Arrows.xml
assets/shared/images/noteskins/Circles-pixel-ends.png
.png
assets/shared/images/noteskins/Circles-pixel.png
.png
assets/shared/images/noteskins/Circles.png
.png
assets/shared/images/noteskins/Circles.xml
assets/shared/images/noteskins/Holofunk.png
.png
assets/shared/images/noteskins/Holofunk.xml
assets/shared/images/noteskins/Stepmania.png
.png
assets/shared/images/noteskins/Stepmania.xml
assets/shared/images/pauseAlt/bfLol.png
.png
assets/shared/images/pauseAlt/bfLol.xml
assets/shared/images/pauseAlt/pauseBG.png
.png
assets/shared/images/pauseAlt/pauseUI.png
.png
assets/shared/images/pauseAlt/pauseUI.xml
assets/shared/images/ready.png
.png
assets/shared/images/restart.png
.png
assets/shared/images/set.png
.png
assets/shared/images/shit.png
.png
assets/shared/images/sick.png
.png
assets/shared/images/speech_bubble_talking.png
.png
assets/shared/images/speech_bubble_talking.xml
assets/shared/images/stage_light.png
.png
assets/shared/images/stageback.png
.png
assets/shared/images/stagecurtains.png
.png
assets/shared/images/stagefront.png
.png
assets/shared/images/trolled.png
.png
assets/shared/music/breakfast.ogg
assets/shared/music/gameOver.ogg
assets/shared/music/gameOverEnd.ogg
assets/shared/music/gameOver_alt.ogg
assets/shared/sounds/ANGRY.ogg
assets/shared/sounds/ANGRY_TEXT_BOX.ogg
assets/shared/sounds/CLAP.ogg
assets/shared/sounds/GF_1.ogg
assets/shared/sounds/GF_2.ogg
assets/shared/sounds/GF_3.ogg
assets/shared/sounds/GF_4.ogg
assets/shared/sounds/Lights_Shut_off.ogg
assets/shared/sounds/Lights_Turn_On.ogg
assets/shared/sounds/SNAP.ogg
assets/shared/sounds/Senpai_Dies.ogg
assets/shared/sounds/badnoise1.ogg
assets/shared/sounds/badnoise2.ogg
assets/shared/sounds/badnoise3.ogg
assets/shared/sounds/carPass0.ogg
assets/shared/sounds/carPass1.ogg
assets/shared/sounds/clickText.ogg
assets/shared/sounds/fnf_loss_sfx-pixel.ogg
assets/shared/sounds/fnf_loss_sfx.ogg
assets/shared/sounds/fnf_loss_sfx_botan.ogg
assets/shared/sounds/fnf_loss_sfx_camellia.ogg
assets/shared/sounds/gone.ogg
assets/shared/sounds/intro1-pixel.ogg
assets/shared/sounds/intro1.ogg
assets/shared/sounds/intro2-pixel.ogg
assets/shared/sounds/intro2.ogg
assets/shared/sounds/intro3-pixel.ogg
assets/shared/sounds/intro3.ogg
assets/shared/sounds/introGo-pixel.ogg
assets/shared/sounds/introGo.ogg
assets/shared/sounds/missnote-pixel1.ogg
assets/shared/sounds/missnote-pixel2.ogg
assets/shared/sounds/missnote-pixel3.ogg
assets/shared/sounds/missnote1.ogg
assets/shared/sounds/missnote2.ogg
assets/shared/sounds/missnote3.ogg
assets/shared/sounds/pixelText.ogg
assets/shared/sounds/soundTest.ogg
assets/shared/sounds/thunder_1.ogg
assets/shared/sounds/thunder_2.ogg
assets/shared/sounds/train_passes.ogg
assets/sm/HOW TO ADD SM FILES.txt
assets/songs/boyfriend/Inst.ogg
assets/songs/boyfriend/Voices.ogg
assets/songs/crystallized/Inst.ogg
assets/songs/crystallized/Voices.ogg
assets/songs/first-town/Inst.ogg
assets/songs/first-town/Voices.ogg
assets/songs/ghost-vip/Inst.ogg
assets/songs/ghost-vip/Voices.ogg
assets/songs/ghost/Inst.ogg
assets/songs/ghost/Voices.ogg
assets/songs/ghoul/Inst.ogg
assets/songs/ghoul/Voices.ogg
assets/songs/lioness-pride/Inst.ogg
assets/songs/lioness-pride/Voices.ogg
assets/songs/liquated/Inst.ogg
assets/songs/liquated/Voices.ogg
assets/songs/nacreous-snowmelt/Inst.ogg
assets/songs/nacreous-snowmelt/Voices.ogg
assets/songs/pico/Inst.ogg
assets/songs/quaoar/Inst.ogg
assets/songs/quaoar/Voices.ogg
assets/songs/tutorial/Inst.ogg
assets/songs/tutorial/Inst_Alt.ogg
assets/songs/tutorial/Voices.ogg
assets/songs/why-do-you-hate-me/Inst.ogg
assets/songs/why-do-you-hate-me/Voices.ogg
assets/sounds/cancelMenu.ogg
assets/sounds/confirmMenu.ogg
assets/sounds/hitsound.ogg
assets/sounds/scrollMenu.ogg
assets/videos/daWeirdVid/dontDelete.webm
assets/videos/quaoar.ogg
assets/videos/quaoar.txt
assets/videos/quaoar.webm
do NOT readme.txt
extension-webm.ndll
.dll windows:6 windows x64 arch:x64

b97558180371685b98482b9215d6dbef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
GetModuleHandleA
GetProcAddress
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
HeapSize
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
GetStdHandle
GetFileType
GetModuleFileNameW
WriteConsoleW
HeapAlloc
HeapFree
LCMapStringW
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
OutputDebugStringW
CloseHandle
SetFilePointerEx
GetFileSizeEx
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
GetStringTypeW
CreateFileW

Exports

Exports

__neko_entry_point
hx_create_io__3
hx_set_loader
hx_vorbis_codec_dec_init__0
hx_vpx_codec_dec_init__0
hx_vpx_codec_decode__2
hx_vpx_codec_get_frame__1
hx_vpx_codec_iface_name__0
hx_webm_decoder_create__2
hx_webm_decoder_get_info__1
hx_webm_decoder_has_more__1
hx_webm_decoder_restart__1
hx_webm_decoder_step__3
neko_init__5

Sections

.text
Size: 310KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
icon.ico
lime.ndll
.dll windows:6 windows x64 arch:x64

7529e748d5cfe42d97fc685806c5f0a5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

GetMessageA
PostThreadMessageA
PeekMessageA
GetForegroundWindow
OpenClipboard
CloseClipboard
GetClipboardSequenceNumber
SetClipboardData
GetClipboardData
EmptyClipboard
IsClipboardFormatAvailable
TrackMouseEvent
SendMessageW
DefWindowProcW
RegisterClassW
UnregisterClassW
CreateWindowExW
DestroyWindow
ShowWindow
EndDialog
DialogBoxIndirectParamW
PostMessageW
GetDoubleClickTime
CreateWindowExA
RegisterClassExA
UnregisterClassA
RegisterRawInputDevices
CreateIconIndirect
LoadCursorW
SetLayeredWindowAttributes
SetWindowPos
GetFocus
GetMenu
SetForegroundWindow
SetPropW
RemovePropW
SetWindowTextW
GetWindowTextW
SetCursorPos
SetWindowRgn
GetRawInputDeviceList
ReleaseDC
GetDC
GetWindowTextLengthW
GetClientRect
GetWindowRect
AdjustWindowRectEx
GetClipCursor
ClientToScreen
ScreenToClient
ClipCursor
IsRectEmpty
GetWindowLongW
SetWindowLongW
GetWindowLongPtrW
SetWindowLongPtrW
GetParent
CreateIconFromResource
GetMessageW
TranslateMessage
DispatchMessageW
RegisterDeviceNotificationW
UnregisterDeviceNotification
PostThreadMessageW
RegisterClassExW
SetTimer
KillTimer
GetDesktopWindow
PeekMessageW
GetMessageExtraInfo
CallWindowProcW
GetClassInfoExW
IsWindowVisible
IsIconic
GetKeyState
GetAsyncKeyState
GetSystemMetrics
GetUpdateRect
InvalidateRect
ValidateRect
LoadIconA
SetClassLongPtrA
GetDlgItem
SetFocus
DrawTextW
SystemParametersInfoA
SystemParametersInfoW
LoadIconW
GetKeyboardLayout
GetKeyboardState
GetPropW
SetCursor
GetCursorPos
ToUnicode
MapVirtualKeyW
ChangeDisplaySettingsExW
EnumDisplaySettingsW
EnumDisplayDevicesW
GetMonitorInfoW
EnumDisplayMonitors
MessageBoxA
SendMessageA
GetRawInputDeviceInfoA
FlashWindowEx
GetRawInputData
DestroyIcon
WindowFromPoint

gdi32

GetDIBits
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
SetDeviceGammaRamp
GetDeviceGammaRamp
CreateDIBSection
CreateDCW
SelectObject
RemoveFontMemResourceEx
AddFontMemResourceEx
DeleteObject
CreateFontIndirectW
CombineRgn
CreateRectRgn
CreateBitmap
ChoosePixelFormat
DescribePixelFormat
GetPixelFormat
SetPixelFormat
GetDeviceCaps
GetTextExtentPoint32A
GetTextMetricsW
SwapBuffers
DeleteDC

kernel32

CompareStringW
DecodePointer
EncodePointer
GetStringTypeW
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
GetLocaleInfoW
RtlUnwind
LoadLibraryExW
SetStdHandle
GetDriveTypeW
MulDiv
lstrcatW
CreateDirectoryW
Process32Next
LCMapStringW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
InterlockedFlushSList
GetFileInformationByHandle
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
FreeLibraryAndExitThread
WriteConsoleW
GetFullPathNameW
SetConsoleCtrlHandler
ReadConsoleW
Process32First
InitializeCriticalSectionAndSpinCount
CompareStringA
GetConsoleOutputCP
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
FlushFileBuffers
GetCurrentDirectoryW
IsValidCodePage
GetACP
GetOEMCP
HeapSize
GetFileAttributesExW
SetEndOfFile
SetThreadExecutionState
GetTimeZoneInformation
FindFirstFileExW
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetFileSizeEx
SetFilePointer
SetFilePointerEx
SetErrorMode
GetCurrentProcessId
FreeLibrary
GetModuleHandleA
GetProcAddress
GetLocaleInfoA
GetStdHandle
GetConsoleMode
SetConsoleMode
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
CreateFileW
CloseHandle
QueryPerformanceCounter
QueryPerformanceFrequency
Sleep
ReleaseMutex
WaitForSingleObject
CreateMutexA
InitializeCriticalSectionEx
ExpandEnvironmentStringsA
GetLastError
SetLastError
FormatMessageA
GetFileType
ReadFile
PeekNamedPipe
WaitForMultipleObjects
SleepEx
VerSetConditionMask
GetSystemDirectoryA
LoadLibraryA
VerifyVersionInfoA
GetTickCount64
WaitForSingleObjectEx
FindClose
FindFirstFileW
FindNextFileW
GetDriveTypeA
GetFileAttributesW
HeapAlloc
HeapFree
GetProcessHeap
CancelIoEx
CreateEventA
ReadDirectoryChangesW
WideCharToMultiByte
GetModuleFileNameW
GetOverlappedResult
MapViewOfFile
UnmapViewOfFile
SetEvent
ResetEvent
ReleaseSemaphore
CreateSemaphoreA
GetSystemTime
lstrlenW
MultiByteToWideChar
CreateThread
IsDebuggerPresent
DebugBreak
SwitchToThread
TlsGetValue
TlsSetValue
GetModuleHandleExW
GetCurrentThreadId
GetCurrentThread
SetThreadPriority
VirtualQuery
CreateFileMappingW
LoadLibraryW
GetSystemInfo
RaiseException
TryEnterCriticalSection
CreateEventW
ExitThread
GetExitCodeThread
TlsAlloc
TlsFree
GetSystemTimeAsFileTime
ExitProcess
GlobalAlloc
GlobalUnlock
GlobalLock
GetModuleHandleW
GetSystemPowerStatus
GetEnvironmentVariableA
SetEnvironmentVariableA
GetTickCount
OutputDebugStringW
CreateToolhelp32Snapshot
GlobalMemoryStatusEx
FormatMessageW
CreateFileA
WriteFile
DeviceIoControl
CancelIo
LocalFree
GetCurrentProcess
TerminateProcess
CreateSemaphoreW

advapi32

RegQueryValueExW
CryptReleaseContext
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptGenRandom
RegCloseKey
RegOpenKeyExW
CryptAcquireContextA

winmm

timeGetTime
timeEndPeriod
waveOutGetErrorTextW
waveOutReset
timeBeginPeriod
waveInReset
waveInStop
waveInStart
waveInAddBuffer
waveInUnprepareHeader
waveInPrepareHeader
waveInClose
waveOutGetNumDevs
waveOutGetDevCapsW
waveOutOpen
waveOutClose
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutWrite
waveInGetNumDevs
waveInGetDevCapsW
waveInOpen

imm32

ImmGetContext
ImmReleaseContext
ImmAssociateContext
ImmGetCompositionStringW
ImmSetCompositionStringW
ImmGetCandidateListW
ImmNotifyIME
ImmSetCompositionWindow
ImmGetIMEFileNameA

ole32

CoInitializeEx
CoCreateInstance
CoTaskMemFree
StringFromCLSID
CoInitialize
PropVariantClear
CoUninitialize
CoSetProxyBlanket

oleaut32

SysAllocString
SysFreeString
SysStringLen
VariantClear

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

ws2_32

gethostname
htons
ioctlsocket
__WSAFDIsSet
select
freeaddrinfo
getaddrinfo
WSAIoctl
socket
setsockopt
recv
getsockopt
getpeername
WSASetLastError
bind
recvfrom
sendto
WSAStartup
WSACleanup
accept
getsockname
listen
ntohs
send
closesocket
connect
WSAGetLastError

wldap32

ord46
ord211
ord60
ord50
ord41
ord22
ord26
ord27
ord32
ord33
ord79
ord301
ord143
ord30
ord200
ord35

shell32

DragAcceptFiles
DragQueryFileW
DragFinish
ExtractIconExW
SHGetFolderPathW
SHGetPathFromIDListW
SHGetSpecialFolderPathW
SHGetFolderPathA
SHBrowseForFolderW

comdlg32

GetOpenFileNameW
GetSaveFileNameW

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo

usp10

ScriptPlace
ScriptItemize
ScriptShape
ScriptFreeCache

rpcrt4

UuidCreate

dwrite

DWriteCreateFactory

Exports

Exports

?hl_error_msg@@YAXPEB_WZZ
SDL_AddEventWatch
SDL_AddHintCallback
SDL_AddTimer
SDL_AllocFormat
SDL_AllocPalette
SDL_AllocRW
SDL_AtomicAdd
SDL_AtomicCAS
SDL_AtomicCASPtr
SDL_AtomicGet
SDL_AtomicGetPtr
SDL_AtomicLock
SDL_AtomicSet
SDL_AtomicSetPtr
SDL_AtomicTryLock
SDL_AtomicUnlock
SDL_AudioInit
SDL_AudioQuit
SDL_AudioStreamAvailable
SDL_AudioStreamClear
SDL_AudioStreamFlush
SDL_AudioStreamGet
SDL_AudioStreamPut
SDL_BuildAudioCVT
SDL_CalculateGammaRamp
SDL_CaptureMouse
SDL_ClearError
SDL_ClearHints
SDL_ClearQueuedAudio
SDL_CloseAudio
SDL_CloseAudioDevice
SDL_ComposeCustomBlendMode
SDL_CondBroadcast
SDL_CondSignal
SDL_CondWait
SDL_CondWaitTimeout
SDL_ConvertAudio
SDL_ConvertPixels
SDL_ConvertSurface
SDL_ConvertSurfaceFormat
SDL_CreateColorCursor
SDL_CreateCond
SDL_CreateCursor
SDL_CreateMutex
SDL_CreateRGBSurface
SDL_CreateRGBSurfaceFrom
SDL_CreateRGBSurfaceWithFormat
SDL_CreateRGBSurfaceWithFormatFrom
SDL_CreateRenderer
SDL_CreateSemaphore
SDL_CreateShapedWindow
SDL_CreateSoftwareRenderer
SDL_CreateSystemCursor
SDL_CreateTexture
SDL_CreateTextureFromSurface
SDL_CreateThread
SDL_CreateThreadWithStackSize
SDL_CreateWindow
SDL_CreateWindowAndRenderer
SDL_CreateWindowFrom
SDL_DXGIGetOutputInfo
SDL_DYNAPI_entry
SDL_DelEventWatch
SDL_DelHintCallback
SDL_Delay
SDL_DequeueAudio
SDL_DestroyCond
SDL_DestroyMutex
SDL_DestroyRenderer
SDL_DestroySemaphore
SDL_DestroyTexture
SDL_DestroyWindow
SDL_DetachThread
SDL_Direct3D9GetAdapterIndex
SDL_DisableScreenSaver
SDL_DuplicateSurface
SDL_EnableScreenSaver
SDL_EnclosePoints
SDL_Error
SDL_EventState
SDL_FillRect
SDL_FillRects
SDL_FilterEvents
SDL_FlushEvent
SDL_FlushEvents
SDL_FreeAudioStream
SDL_FreeCursor
SDL_FreeFormat
SDL_FreePalette
SDL_FreeRW
SDL_FreeSurface
SDL_FreeWAV
SDL_GL_BindTexture
SDL_GL_CreateContext
SDL_GL_DeleteContext
SDL_GL_ExtensionSupported
SDL_GL_GetAttribute
SDL_GL_GetCurrentContext
SDL_GL_GetCurrentWindow
SDL_GL_GetDrawableSize
SDL_GL_GetProcAddress
SDL_GL_GetSwapInterval
SDL_GL_LoadLibrary
SDL_GL_MakeCurrent
SDL_GL_ResetAttributes
SDL_GL_SetAttribute
SDL_GL_SetSwapInterval
SDL_GL_SwapWindow
SDL_GL_UnbindTexture
SDL_GL_UnloadLibrary
SDL_GameControllerAddMapping
SDL_GameControllerAddMappingsFromRW
SDL_GameControllerClose
SDL_GameControllerEventState
SDL_GameControllerFromInstanceID
SDL_GameControllerFromPlayerIndex
SDL_GameControllerGetAttached
SDL_GameControllerGetAxis
SDL_GameControllerGetAxisFromString
SDL_GameControllerGetBindForAxis
SDL_GameControllerGetBindForButton
SDL_GameControllerGetButton
SDL_GameControllerGetButtonFromString
SDL_GameControllerGetJoystick
SDL_GameControllerGetPlayerIndex
SDL_GameControllerGetProduct
SDL_GameControllerGetProductVersion
SDL_GameControllerGetStringForAxis
SDL_GameControllerGetStringForButton
SDL_GameControllerGetType
SDL_GameControllerGetVendor
SDL_GameControllerMapping
SDL_GameControllerMappingForDeviceIndex
SDL_GameControllerMappingForGUID
SDL_GameControllerMappingForIndex
SDL_GameControllerName
SDL_GameControllerNameForIndex
SDL_GameControllerNumMappings
SDL_GameControllerOpen
SDL_GameControllerRumble
SDL_GameControllerSetPlayerIndex
SDL_GameControllerTypeForIndex
SDL_GameControllerUpdate
SDL_GetAssertionHandler
SDL_GetAssertionReport
SDL_GetAudioDeviceName
SDL_GetAudioDeviceStatus
SDL_GetAudioDriver
SDL_GetAudioStatus
SDL_GetBasePath
SDL_GetCPUCacheLineSize
SDL_GetCPUCount
SDL_GetClipRect
SDL_GetClipboardText
SDL_GetClosestDisplayMode
SDL_GetColorKey
SDL_GetCurrentAudioDriver
SDL_GetCurrentDisplayMode
SDL_GetCurrentVideoDriver
SDL_GetCursor
SDL_GetDefaultAssertionHandler
SDL_GetDefaultCursor
SDL_GetDesktopDisplayMode
SDL_GetDisplayBounds
SDL_GetDisplayDPI
SDL_GetDisplayMode
SDL_GetDisplayName
SDL_GetDisplayOrientation
SDL_GetDisplayUsableBounds
SDL_GetError
SDL_GetEventFilter
SDL_GetGlobalMouseState
SDL_GetGrabbedWindow
SDL_GetHint
SDL_GetHintBoolean
SDL_GetKeyFromName
SDL_GetKeyFromScancode
SDL_GetKeyName
SDL_GetKeyboardFocus
SDL_GetKeyboardState
SDL_GetMemoryFunctions
SDL_GetModState
SDL_GetMouseFocus
SDL_GetMouseState
SDL_GetNumAllocations
SDL_GetNumAudioDevices
SDL_GetNumAudioDrivers
SDL_GetNumDisplayModes
SDL_GetNumRenderDrivers
SDL_GetNumTouchDevices
SDL_GetNumTouchFingers
SDL_GetNumVideoDisplays
SDL_GetNumVideoDrivers
SDL_GetPerformanceCounter
SDL_GetPerformanceFrequency
SDL_GetPixelFormatName
SDL_GetPlatform
SDL_GetPowerInfo
SDL_GetPrefPath
SDL_GetQueuedAudioSize
SDL_GetRGB
SDL_GetRGBA
SDL_GetRelativeMouseMode
SDL_GetRelativeMouseState
SDL_GetRenderDrawBlendMode
SDL_GetRenderDrawColor
SDL_GetRenderDriverInfo
SDL_GetRenderTarget
SDL_GetRenderer
SDL_GetRendererInfo
SDL_GetRendererOutputSize
SDL_GetRevision
SDL_GetRevisionNumber
SDL_GetScancodeFromKey
SDL_GetScancodeFromName
SDL_GetScancodeName
SDL_GetShapedWindowMode
SDL_GetSurfaceAlphaMod
SDL_GetSurfaceBlendMode
SDL_GetSurfaceColorMod
SDL_GetSystemRAM
SDL_GetTextureAlphaMod
SDL_GetTextureBlendMode
SDL_GetTextureColorMod
SDL_GetTextureScaleMode
SDL_GetThreadID
SDL_GetThreadName
SDL_GetTicks
SDL_GetTouchDevice
SDL_GetTouchDeviceType
SDL_GetTouchFinger
SDL_GetVersion
SDL_GetVideoDriver
SDL_GetWindowBordersSize
SDL_GetWindowBrightness
SDL_GetWindowData
SDL_GetWindowDisplayIndex
SDL_GetWindowDisplayMode
SDL_GetWindowFlags
SDL_GetWindowFromID
SDL_GetWindowGammaRamp
SDL_GetWindowGrab
SDL_GetWindowID
SDL_GetWindowMaximumSize
SDL_GetWindowMinimumSize
SDL_GetWindowOpacity
SDL_GetWindowPixelFormat
SDL_GetWindowPosition
SDL_GetWindowSize
SDL_GetWindowSurface
SDL_GetWindowTitle
SDL_GetWindowWMInfo
SDL_GetYUVConversionMode
SDL_GetYUVConversionModeForResolution
SDL_HapticClose
SDL_HapticDestroyEffect
SDL_HapticEffectSupported
SDL_HapticGetEffectStatus
SDL_HapticIndex
SDL_HapticName
SDL_HapticNewEffect
SDL_HapticNumAxes
SDL_HapticNumEffects
SDL_HapticNumEffectsPlaying
SDL_HapticOpen
SDL_HapticOpenFromJoystick
SDL_HapticOpenFromMouse
SDL_HapticOpened
SDL_HapticPause
SDL_HapticQuery
SDL_HapticRumbleInit
SDL_HapticRumblePlay
SDL_HapticRumbleStop
SDL_HapticRumbleSupported
SDL_HapticRunEffect
SDL_HapticSetAutocenter
SDL_HapticSetGain
SDL_HapticStopAll
SDL_HapticStopEffect
SDL_HapticUnpause
SDL_HapticUpdateEffect
SDL_Has3DNow
SDL_HasARMSIMD
SDL_HasAVX
SDL_HasAVX2
SDL_HasAVX512F
SDL_HasAltiVec
SDL_HasClipboardText
SDL_HasColorKey
SDL_HasEvent
SDL_HasEvents
SDL_HasIntersection
SDL_HasMMX
SDL_HasNEON
SDL_HasRDTSC
SDL_HasSSE
SDL_HasSSE2
SDL_HasSSE3
SDL_HasSSE41
SDL_HasSSE42
SDL_HasScreenKeyboardSupport
SDL_HideWindow
SDL_Init
SDL_InitSubSystem
SDL_IntersectRect
SDL_IntersectRectAndLine
SDL_IsGameController
SDL_IsScreenKeyboardShown
SDL_IsScreenSaverEnabled
SDL_IsShapedWindow
SDL_IsTablet
SDL_IsTextInputActive
SDL_JoystickClose
SDL_JoystickCurrentPowerLevel
SDL_JoystickEventState
SDL_JoystickFromInstanceID
SDL_JoystickFromPlayerIndex
SDL_JoystickGetAttached
SDL_JoystickGetAxis
SDL_JoystickGetAxisInitialState
SDL_JoystickGetBall
SDL_JoystickGetButton
SDL_JoystickGetDeviceGUID
SDL_JoystickGetDeviceInstanceID
SDL_JoystickGetDevicePlayerIndex
SDL_JoystickGetDeviceProduct
SDL_JoystickGetDeviceProductVersion
SDL_JoystickGetDeviceType
SDL_JoystickGetDeviceVendor
SDL_JoystickGetGUID
SDL_JoystickGetGUIDFromString
SDL_JoystickGetGUIDString
SDL_JoystickGetHat
SDL_JoystickGetPlayerIndex
SDL_JoystickGetProduct
SDL_JoystickGetProductVersion
SDL_JoystickGetType
SDL_JoystickGetVendor
SDL_JoystickInstanceID
SDL_JoystickIsHaptic
SDL_JoystickName
SDL_JoystickNameForIndex
SDL_JoystickNumAxes
SDL_JoystickNumBalls
SDL_JoystickNumButtons
SDL_JoystickNumHats
SDL_JoystickOpen
SDL_JoystickRumble
SDL_JoystickSetPlayerIndex
SDL_JoystickUpdate
SDL_LoadBMP_RW
SDL_LoadDollarTemplates
SDL_LoadFile
SDL_LoadFile_RW
SDL_LoadFunction
SDL_LoadObject
SDL_LoadWAV_RW
SDL_LockAudio
SDL_LockAudioDevice
SDL_LockJoysticks
SDL_LockMutex
SDL_LockSurface
SDL_LockTexture
SDL_LockTextureToSurface
SDL_Log
SDL_LogCritical
SDL_LogDebug
SDL_LogError
SDL_LogGetOutputFunction
SDL_LogGetPriority
SDL_LogInfo
SDL_LogMessage
SDL_LogMessageV
SDL_LogResetPriorities
SDL_LogSetAllPriority
SDL_LogSetOutputFunction
SDL_LogSetPriority
SDL_LogVerbose
SDL_LogWarn
SDL_LowerBlit
SDL_LowerBlitScaled
SDL_MapRGB
SDL_MapRGBA
SDL_MasksToPixelFormatEnum
SDL_MaximizeWindow
SDL_MemoryBarrierAcquireFunction
SDL_MemoryBarrierReleaseFunction
SDL_Metal_CreateView
SDL_Metal_DestroyView
SDL_MinimizeWindow
SDL_MixAudio
SDL_MixAudioFormat
SDL_MouseIsHaptic
SDL_NewAudioStream
SDL_NumHaptics
SDL_NumJoysticks
SDL_NumSensors
SDL_OnApplicationDidBecomeActive
SDL_OnApplicationDidEnterBackground
SDL_OnApplicationDidReceiveMemoryWarning
SDL_OnApplicationWillEnterForeground
SDL_OnApplicationWillResignActive
SDL_OnApplicationWillTerminate
SDL_OpenAudio
SDL_OpenAudioDevice
SDL_PauseAudio
SDL_PauseAudioDevice
SDL_PeepEvents
SDL_PixelFormatEnumToMasks
SDL_PollEvent
SDL_PumpEvents
SDL_PushEvent
SDL_QueryTexture
SDL_QueueAudio
SDL_Quit
SDL_QuitSubSystem
SDL_RWFromConstMem
SDL_RWFromFP
SDL_RWFromFile
SDL_RWFromMem
SDL_RWclose
SDL_RWread
SDL_RWseek
SDL_RWsize
SDL_RWtell
SDL_RWwrite
SDL_RaiseWindow
SDL_ReadBE16
SDL_ReadBE32
SDL_ReadBE64
SDL_ReadLE16
SDL_ReadLE32
SDL_ReadLE64
SDL_ReadU8
SDL_RecordGesture
SDL_RegisterApp
SDL_RegisterEvents
SDL_RemoveTimer
SDL_RenderClear
SDL_RenderCopy
SDL_RenderCopyEx
SDL_RenderCopyExF
SDL_RenderCopyF
SDL_RenderDrawLine
SDL_RenderDrawLineF
SDL_RenderDrawLines
SDL_RenderDrawLinesF
SDL_RenderDrawPoint
SDL_RenderDrawPointF
SDL_RenderDrawPoints
SDL_RenderDrawPointsF
SDL_RenderDrawRect
SDL_RenderDrawRectF
SDL_RenderDrawRects
SDL_RenderDrawRectsF
SDL_RenderFillRect
SDL_RenderFillRectF
SDL_RenderFillRects
SDL_RenderFillRectsF
SDL_RenderFlush
SDL_RenderGetClipRect
SDL_RenderGetD3D9Device
SDL_RenderGetIntegerScale
SDL_RenderGetLogicalSize
SDL_RenderGetMetalCommandEncoder
SDL_RenderGetMetalLayer
SDL_RenderGetScale
SDL_RenderGetViewport
SDL_RenderIsClipEnabled
SDL_RenderPresent
SDL_RenderReadPixels
SDL_RenderSetClipRect
SDL_RenderSetIntegerScale
SDL_RenderSetLogicalSize
SDL_RenderSetScale
SDL_RenderSetViewport
SDL_RenderTargetSupported
SDL_ReportAssertion
SDL_ResetAssertionReport
SDL_RestoreWindow
SDL_SIMDAlloc
SDL_SIMDFree
SDL_SIMDGetAlignment
SDL_SaveAllDollarTemplates
SDL_SaveBMP_RW
SDL_SaveDollarTemplate
SDL_SemPost
SDL_SemTryWait
SDL_SemValue
SDL_SemWait
SDL_SemWaitTimeout
SDL_SensorClose
SDL_SensorFromInstanceID
SDL_SensorGetData
SDL_SensorGetDeviceInstanceID
SDL_SensorGetDeviceName
SDL_SensorGetDeviceNonPortableType
SDL_SensorGetDeviceType
SDL_SensorGetInstanceID

Sections

.text
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 220KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
manifest/camelliaweek.json
manifest/default.json
manifest/shared.json
manifest/sm.json
manifest/songs.json
mods/README.md
mods/introMod/_append/data/introText.txt
mods/introMod/_polymod_meta.json
mods/introMod/images/KadeEngineLogo.png
.png
vs. Camellia.exe
.exe windows:6 windows x64 arch:x64

9410e626ffde0fa76d8e882d28b036df

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

MessageBoxA

ws2_32

getaddrinfo
WSAGetLastError
WSAStartup
gethostbyname
socket
shutdown
setsockopt
send
freeaddrinfo
inet_ntoa
inet_addr
htons
ioctlsocket
connect
closesocket
recv

advapi32

CryptReleaseContext
CryptGenRandom
CryptAcquireContextA

crypt32

CertEnumCertificatesInStore
CertOpenSystemStoreA
CertCloseStore

kernel32

GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
GetFileAttributesExW
SetEnvironmentVariableW
GetFileSizeEx
SetFilePointerEx
FreeEnvironmentStringsW
ReadConsoleW
GetConsoleMode
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
OutputDebugStringW
FindFirstFileExW
GetCommandLineW
GetProcessHeap
HeapSize
SetEndOfFile
FlushFileBuffers
ReleaseSRWLockExclusive
TlsGetValue
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTime
SystemTimeToFileTime
RtlCaptureContext
TlsSetValue
TlsAlloc
CloseHandle
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObject
CreateEventA
CreateThread
GetCurrentThreadId
FreeLibrary
GetProcAddress
LoadLibraryW
GetCommandLineA
LoadLibraryA
ReadFile
WriteFile
DuplicateHandle
CreatePipe
GetCurrentProcess
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetCurrentProcessId
FormatMessageA
SetCurrentDirectoryW
GetCurrentDirectoryW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
GetFullPathNameW
Sleep
GetModuleFileNameW
GetLastError
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
PeekNamedPipe
RtlUnwindEx
RaiseException
SetLastError
VirtualFree
VirtualQuery
GetModuleHandleA
LoadLibraryExA
GetModuleFileNameA
GetModuleHandleExA
VirtualAlloc
VirtualProtect
WaitForSingleObjectEx
GetExitCodeThread
InitializeSRWLock
RtlUnwind
AcquireSRWLockExclusive
InitializeCriticalSectionEx
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
EncodePointer
DecodePointer
LCMapStringEx
GetSystemTimeAsFileTime
GetModuleHandleW
GetStringTypeW
GetCPInfo
InitializeCriticalSectionAndSpinCount
CreateEventW
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
InitializeSListHead
GetTimeFormatW
RtlPcToFileHeader
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetStdHandle
CreateDirectoryW
DeleteFileW
MoveFileExW
GetStdHandle
WriteConsoleW
GetTempPathW
GetConsoleCP
HeapFree
HeapAlloc
GetTimeZoneInformation
GetDateFormatW

Exports

Exports

AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
hx_cffi

Sections

.text
Size: 7.9MB - Virtual size: 7.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.0MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 329KB - Virtual size: 329KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 397KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b97558180371685b98482b9215d6dbef

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 310KB - Virtual size: 310KB

.rdata Size: 1.6MB - Virtual size: 1.6MB

.data Size: 5KB - Virtual size: 13KB

.pdata Size: 14KB - Virtual size: 14KB

_RDATA Size: 512B - Virtual size: 244B

.reloc Size: 10KB - Virtual size: 10KB

7529e748d5cfe42d97fc685806c5f0a5

Headers

DLL Characteristics

File Characteristics

Imports

user32

gdi32

kernel32

advapi32

winmm

imm32

ole32

oleaut32

version

ws2_32

wldap32

shell32

comdlg32

setupapi

usp10

rpcrt4

dwrite

Exports

Exports

Sections

.text Size: 4.2MB - Virtual size: 4.2MB

.rdata Size: 3.1MB - Virtual size: 3.1MB

.data Size: 37KB - Virtual size: 196KB

.pdata Size: 220KB - Virtual size: 220KB

_RDATA Size: 512B - Virtual size: 196B

.reloc Size: 27KB - Virtual size: 27KB

9410e626ffde0fa76d8e882d28b036df

Headers

DLL Characteristics

File Characteristics

Imports

user32

ws2_32

advapi32

crypt32

kernel32

Exports

Exports

Sections

.text Size: 7.9MB - Virtual size: 7.9MB

.rdata Size: 1.9MB - Virtual size: 1.9MB

.data Size: 1.0MB - Virtual size: 1.3MB

.pdata Size: 329KB - Virtual size: 329KB

_RDATA Size: 512B - Virtual size: 244B

.rsrc Size: 397KB - Virtual size: 396KB

.reloc Size: 181KB - Virtual size: 180KB

.text
Size: 310KB - Virtual size: 310KB

.rdata
Size: 1.6MB - Virtual size: 1.6MB

.data
Size: 5KB - Virtual size: 13KB

.pdata
Size: 14KB - Virtual size: 14KB

_RDATA
Size: 512B - Virtual size: 244B

.reloc
Size: 10KB - Virtual size: 10KB

.text
Size: 4.2MB - Virtual size: 4.2MB

.rdata
Size: 3.1MB - Virtual size: 3.1MB

.data
Size: 37KB - Virtual size: 196KB

.pdata
Size: 220KB - Virtual size: 220KB

_RDATA
Size: 512B - Virtual size: 196B

.reloc
Size: 27KB - Virtual size: 27KB

.text
Size: 7.9MB - Virtual size: 7.9MB

.rdata
Size: 1.9MB - Virtual size: 1.9MB

.data
Size: 1.0MB - Virtual size: 1.3MB

.pdata
Size: 329KB - Virtual size: 329KB

_RDATA
Size: 512B - Virtual size: 244B

.rsrc
Size: 397KB - Virtual size: 396KB

.reloc
Size: 181KB - Virtual size: 180KB