Diablo 4 Events Tracker overlay-3-2-0-1-1708670866[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Diablo 4 Events Tracker overlay-3-2-0-1-1708670866.zip
Size

56.9MB
MD5

cc9aa64aadcbf0c4d920c88468b357a0
SHA1

407fb0a9c6f8be45bcae83521488b7adf682b22d
SHA256

609e72fe2102b16397d8ad66db490c431621a0ce2761b9b2eddb1c57fdfa5ba1
SHA512

c953c61379fe4b3730ae182abfa2fedeb2fd1c9b60ff2b909c96c0df9dc8be128aade568e3a759e7fc85e3eae5d67a4f7ca3a9f0f489e5b55aa51b3440e0563e
SSDEEP

1572864:ObfRn9fKOCOTSkRzgXkCdzh1tByTqdkD8oht5VpWX/iwQRaLlbkEw2wi:En9yXOOkzCdzryTTooht5VOiwQRaLmEJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 4 IoCs

Checks for missing Authenticode signature.

resource
unpack001/D4.exe
unpack001/bin/leptonica_util/leptonica_util.exe
unpack001/bin/leptonica_util/liblept168.dll
unpack001/bin/tesseract/tesseract.exe

Files

Diablo 4 Events Tracker overlay-3-2-0-1-1708670866.zip
.zip
D4.exe
.exe windows:5 windows x86 arch:x86

8d813561e4ad07e9f8918a83e16f95c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

gethostbyname
inet_addr
WSACleanup
gethostname
WSAStartup

winmm

mixerGetLineInfoW
mixerGetDevCapsW
mixerOpen
mciSendStringW
joyGetPosEx
mixerGetLineControlsW
mixerGetControlDetailsW
mixerSetControlDetails
waveOutGetVolume
mixerClose
waveOutSetVolume
joyGetDevCapsW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

comctl32

ImageList_Create
CreateStatusWindowW
ImageList_ReplaceIcon
InitCommonControlsEx
ImageList_GetIconSize
ImageList_Destroy
ImageList_AddMasked

psapi

GetModuleBaseNameW
GetModuleFileNameExW

wininet

InternetOpenW
InternetOpenUrlW
InternetCloseHandle
InternetReadFileExA
InternetReadFile

kernel32

GetSystemTimeAsFileTime
FindResourceW
SizeofResource
LoadResource
LockResource
GetFullPathNameW
GetShortPathNameW
FindFirstFileW
FindNextFileW
FindClose
FileTimeToLocalFileTime
SetEnvironmentVariableW
Beep
MoveFileW
OutputDebugStringW
CreateProcessW
GetFileAttributesW
WideCharToMultiByte
MultiByteToWideChar
GetExitCodeProcess
WriteProcessMemory
ReadProcessMemory
GetCurrentProcessId
OpenProcess
TerminateProcess
SetPriorityClass
SetLastError
GetEnvironmentVariableW
GetLocalTime
GetDateFormatW
GetTimeFormatW
GetDiskFreeSpaceExW
SetVolumeLabelW
CreateFileW
DeviceIoControl
GetDriveTypeW
GetVolumeInformationW
GetDiskFreeSpaceW
GetCurrentDirectoryW
CreateDirectoryW
ReadFile
WriteFile
DeleteFileW
SetFileAttributesW
LocalFileTimeToFileTime
GetModuleFileNameW
GetFileSizeEx
GetSystemTime
GetSystemDefaultUILanguage
GetComputerNameW
GetSystemWindowsDirectoryW
GetTempPathW
EnterCriticalSection
LeaveCriticalSection
VirtualProtect
QueryDosDeviceW
CompareStringW
RemoveDirectoryW
CopyFileW
GetCurrentProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
FormatMessageW
GetPrivateProfileStringW
GetPrivateProfileSectionW
GetPrivateProfileSectionNamesW
WritePrivateProfileStringW
WritePrivateProfileSectionW
SetEndOfFile
GetACP
GetFileType
GetStdHandle
SetFilePointerEx
SystemTimeToFileTime
FileTimeToSystemTime
GetFileSize
VirtualAllocEx
VirtualFreeEx
EnumResourceNamesW
LoadLibraryExW
GlobalSize
HeapSize
HeapReAlloc
HeapFree
ExitProcess
HeapAlloc
InterlockedIncrement
InterlockedDecrement
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
DeleteCriticalSection
InitializeCriticalSection
GetCPInfo
GetVersionExW
GetModuleHandleW
FreeLibrary
GetProcAddress
LoadLibraryW
GetLastError
CreateMutexW
CloseHandle
GetExitCodeThread
SetThreadPriority
CreateThread
GetStringTypeExW
lstrcmpiW
GetCurrentThreadId
GlobalUnlock
GlobalFree
GlobalAlloc
GlobalLock
SetErrorMode
SetCurrentDirectoryW
Sleep
GetTickCount
MulDiv
IsDebuggerPresent
HeapCreate
InitializeCriticalSectionAndSpinCount
HeapQueryInformation
GetCommandLineW
HeapSetInformation
IsProcessorFeaturePresent
GetStringTypeW
RaiseException
LCMapStringW
RtlUnwind
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetStartupInfoW
SetFilePointer
WriteConsoleW
SetStdHandle
FlushFileBuffers
GetProcessHeap
SetFileTime
VirtualQuery

user32

DialogBoxParamW
SendDlgItemMessageW
GetDlgItem
SetDlgItemTextW
MessageBeep
GetCursorInfo
GetLastInputInfo
GetSystemMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuStringW
ExitWindowsEx
SetMenu
FlashWindow
GetPropW
SetPropW
RemovePropW
MapWindowPoints
RedrawWindow
SetParent
GetClassInfoExW
DefDlgProcW
GetAncestor
UpdateWindow
GetMessagePos
GetClassLongW
CallWindowProcW
CheckRadioButton
IntersectRect
GetUpdateRect
PtInRect
CreateDialogIndirectParamW
CreateAcceleratorTableW
DestroyAcceleratorTable
InsertMenuItemW
SetMenuDefaultItem
RemoveMenu
SetMenuItemInfoW
IsMenu
GetMenuItemInfoW
CreateMenu
CreatePopupMenu
SetMenuInfo
AppendMenuW
DestroyMenu
TrackPopupMenuEx
CopyImage
CreateIconIndirect
CreateIconFromResourceEx
EnumClipboardFormats
GetWindow
BringWindowToTop
MessageBoxW
GetTopWindow
GetQueueStatus
SetForegroundWindow
LoadAcceleratorsW
EnableMenuItem
GetMenu
CreateWindowExW
RegisterClassExW
LoadCursorW
DestroyIcon
SetLayeredWindowAttributes
MapVirtualKeyW
VkKeyScanExW
MapVirtualKeyExW
GetKeyboardLayoutNameW
ActivateKeyboardLayout
GetGUIThreadInfo
GetWindowTextW
mouse_event
WindowFromPoint
GetSystemMetrics
keybd_event
SetKeyboardState
GetKeyboardState
GetCursorPos
GetAsyncKeyState
AttachThreadInput
SendInput
UnregisterHotKey
RegisterHotKey
SendMessageTimeoutW
UnhookWindowsHookEx
SetWindowsHookExW
PostThreadMessageW
IsCharAlphaNumericW
IsCharUpperW
IsCharLowerW
ToUnicodeEx
GetKeyboardLayout
CallNextHookEx
CharLowerW
ReleaseDC
GetDC
OpenClipboard
GetClipboardData
GetClipboardFormatNameW
CloseClipboard
SetClipboardData
EmptyClipboard
PostMessageW
FindWindowW
EndDialog
IsWindow
DispatchMessageW
TranslateMessage
ShowWindow
CountClipboardFormats
SetWindowLongW
ScreenToClient
IsDialogMessageW
SendMessageW
DefWindowProcW
FillRect
DrawIconEx
GetSysColorBrush
GetSysColor
RegisterWindowMessageW
EnumDisplayMonitors
IsIconic
IsZoomed
EnumWindows
GetWindowTextLengthW
EnableWindow
SetClipboardViewer
InvalidateRect
IsWindowEnabled
GetWindowLongW
GetKeyState
TranslateAcceleratorW
KillTimer
PeekMessageW
GetFocus
GetClassNameW
GetWindowThreadProcessId
GetForegroundWindow
GetMessageW
SetWindowPos
SetWindowRgn
SetFocus
SetActiveWindow
ClientToScreen
EnumChildWindows
MoveWindow
GetWindowRect
GetMonitorInfoW
MonitorFromPoint
GetClientRect
SystemParametersInfoW
AdjustWindowRectEx
DrawTextW
SetRect
GetIconInfo
SetWindowTextW
IsWindowVisible
BlockInput
CheckMenuItem
PostQuitMessage
SetTimer
GetParent
GetDlgCtrlID
CharUpperW
IsClipboardFormatAvailable
LoadImageW
IsCharAlphaW
ChangeClipboardChain
DestroyWindow

gdi32

GetPixel
GetClipRgn
GetCharABCWidthsW
SetBkMode
CreatePatternBrush
SetBrushOrgEx
EnumFontFamiliesExW
CreateDIBSection
GdiFlush
SetBkColor
ExcludeClipRect
SetTextColor
GetClipBox
BitBlt
CreateCompatibleBitmap
GetSystemPaletteEntries
GetDIBits
CreateCompatibleDC
CreatePolygonRgn
CreateRectRgn
CreateRoundRectRgn
CreateEllipticRgn
DeleteDC
GetObjectW
GetTextMetricsW
GetTextFaceW
SelectObject
GetStockObject
CreateDCW
CreateSolidBrush
CreateFontW
FillRgn
GetDeviceCaps
DeleteObject

comdlg32

CommDlgExtendedError
GetSaveFileNameW
GetOpenFileNameW

advapi32

RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
CloseServiceHandle
UnlockServiceDatabase
LockServiceDatabase
OpenSCManagerW
GetUserNameW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegOpenKeyExW
RegCloseKey
RegConnectRegistryW
RegDeleteValueW

shell32

DragQueryPoint
SHEmptyRecycleBinW
SHFileOperationW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetDesktopFolder
SHGetMalloc
SHGetFolderPathW
ShellExecuteExW
Shell_NotifyIconW
DragFinish
DragQueryFileW
ExtractIconW

ole32

OleInitialize
OleUninitialize
CoCreateInstance
CoInitialize
CoUninitialize
CLSIDFromString
CLSIDFromProgID
CoGetObject
StringFromGUID2
CreateStreamOnHGlobal

oleaut32

SafeArrayGetLBound
GetActiveObject
OleLoadPicture
SafeArrayUnaccessData
SafeArrayGetElemsize
SafeArrayAccessData
SafeArrayUnlock
SafeArrayPtrOfIndex
SafeArrayLock
SafeArrayGetDim
SafeArrayDestroy
SafeArrayGetUBound
VariantCopyInd
SafeArrayCopy
SysAllocString
VariantChangeType
VariantClear
SafeArrayCreate
SysFreeString
SysStringLen

Sections

.text
Size: 642KB - Virtual size: 641KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 380KB - Virtual size: 379KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
D4.ico
bin/leptonica_util/Microsoft.VC90.CRT.manifest
.xml
bin/leptonica_util/leptonica_util.exe
.exe windows:5 windows x86 arch:x86

f13ac442dbf5c1dbecf7059eb11d4110

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Dev\c\Leptonica_Capture2Text\Release\leptonica_util.pdb

Imports

liblept168

pixConvertRGBToGray
pixWrite
pixAverageOnLine
splitPathAtExtension
pixRead
pixScaleGrayLI
pixDestroy
pixUnsharpMaskingGray
pixOtsuAdaptiveThreshold
pixInvert
pixWriteImpliedFormat

msvcr90

atof
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
exit
__initenv
strcpy_s
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
memset
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
atoi
_initterm
__p__fmode

kernel32

InterlockedCompareExchange
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedExchange
Sleep

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
bin/leptonica_util/liblept168.dll
.dll windows:5 windows x86 arch:x86

5d49e1581de254332214840b9ede873b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcessTimes
GetCurrentProcess
GetSystemTimeAsFileTime
GetTempPathA
CreateDirectoryA
GetFileAttributesA
RemoveDirectoryA
FindFirstFileA
MoveFileExA
CopyFileA
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
FindNextFileA
FindClose
DeleteFileA
GetLastError
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentProcessId

user32

ReleaseDC
GetDC

gdi32

CreateDIBSection
GetObjectA
DeleteObject

msvcr90

memcpy
fwrite
memmove
fread
_CIsqrt
fseek
fscanf
fclose
rand
memset
sprintf
sscanf
_snprintf_s
_CIlog
ceil
_CIpow
_CIatan
malloc
rewind
remove
_lseek
fgets
system
floor
longjmp
_setjmp3
atof
_CIexp
srand
fopen
fputc
_CItan
strstr
_localtime64
_time64
strncat
strchr
ftell
strrchr
strftime
_fullpath
memcmp
_snprintf
abort
strlen
strtod
fabs
pow
fflush
exit
ferror
getenv
_fstat64i32
realloc
vfprintf
isprint
fputs
bsearch
qsort
setvbuf
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
__iob_func
fprintf
strncmp
_CIsin
_CIcos
_CIatan2
calloc
free
_close
_open
_fdopen
fgetc
_fileno
_getpid
_read
_write
_setmode

Exports

Exports

AlphaMaskBorderVals
ConvolveSamplingFactX
ConvolveSamplingFactY
ImageFileFormatExtensions
MORPH_BC
NumImageFileFormatExtensions
absDifferenceLow
accumulateLow
addColorizedGrayToCmap
addConstantGrayLow
addGrayLow
adjacentOnPixelInRaster
affineInvertXform
affineXformPt
affineXformSampledPt
applyCubicFit
applyLinearFit
applyQuadraticFit
applyQuarticFit
arrayFindEachSequence
arrayFindSequence
arrayRead
arrayReadStream
barcodeDispatchDecoder
barcodeFormatIsSupported
bbufferBytesToWrite
bbufferCreate
bbufferDestroy
bbufferDestroyAndSaveData
bbufferExtendArray
bbufferRead
bbufferReadStream
bbufferWrite
bbufferWriteStream
bilinearXformPt
bilinearXformSampledPt
blockconvAccumLow
blockconvLow
blocksumLow
bmfCreate
bmfDestroy
bmfGetBaseline
bmfGetLineStrings
bmfGetPix
bmfGetStringWidth
bmfGetWidth
bmfGetWordWidths
boxAdjustSides
boxBoundingRegion
boxChangeRefcount
boxClipToRectangle
boxClone
boxContains
boxContainsPt
boxCopy
boxCreate
boxCreateValid
boxDestroy
boxEqual
boxGetCenter
boxGetGeometry
boxGetRefcount
boxIntersectByLine
boxIntersects
boxOverlapFraction
boxOverlapRegion
boxPrintStreamInfo
boxRelocateOneSide
boxRotateOrth
boxSetGeometry
boxTransform
boxTransformOrdered
boxaAddBox
boxaAffineTransform
boxaBinSort
boxaClear
boxaClipToBox
boxaCombineOverlaps
boxaContainedInBox
boxaConvertToPta
boxaCopy
boxaCreate
boxaDestroy
boxaEqual
boxaExtendArray
boxaExtendArrayToSize
boxaExtractSortedPattern
boxaGetBox
boxaGetBoxGeometry
boxaGetCount
boxaGetCoverage
boxaGetExtent
boxaGetMedian
boxaGetNearestToPt
boxaGetRankSize
boxaGetValidBox
boxaGetValidCount
boxaGetWhiteblocks
boxaInitFull
boxaInsertBox
boxaIntersectsBox
boxaJoin
boxaLocationRange
boxaMakeSizeIndicator
boxaPermutePseudorandom
boxaPermuteRandom
boxaPruneSortedOnOverlap
boxaRead
boxaReadStream
boxaRemoveBox
boxaReplaceBox
boxaRotate
boxaRotateOrth
boxaScale
boxaSelectBySize
boxaSelectWithIndicator
boxaSizeRange
boxaSort
boxaSort2d
boxaSort2dByIndex
boxaSortByIndex
boxaSwapBoxes
boxaTransform
boxaTransformOrdered
boxaTranslate
boxaWrite
boxaWriteStream
boxaaAddBox
boxaaAddBoxa
boxaaAlignBox
boxaaCopy
boxaaCreate
boxaaDestroy
boxaaDisplay
boxaaExtendArray
boxaaFlattenToBoxa
boxaaGetBoxCount
boxaaGetBoxa
boxaaGetCount
boxaaGetExtent
boxaaInsertBoxa
boxaaQuadtreeRegions
boxaaRead
boxaaReadStream
boxaaRemoveBoxa
boxaaReplaceBoxa
boxaaWrite
boxaaWriteStream
ccbCreate
ccbDestroy
ccbaAddCcb
ccbaCreate
ccbaDestroy
ccbaDisplayBorder
ccbaDisplayImage1
ccbaDisplayImage2
ccbaDisplaySPBorder
ccbaExtendArray
ccbaGenerateGlobalLocs
ccbaGenerateSPGlobalLocs
ccbaGenerateSinglePath
ccbaGenerateStepChains
ccbaGetCcb
ccbaGetCount
ccbaRead
ccbaReadStream
ccbaStepChainsToPixCoords
ccbaWrite
ccbaWriteSVG
ccbaWriteSVGString
ccbaWriteStream
composeRGBPixel
compressed_dataDestroy
concatenatePdf
concatenatePdfToData
convertByteToHexAscii
convertFilesFittedToPS
convertFilesTo1bpp
convertFilesToPS
convertFilesToPdf
convertFlateToPS
convertFlateToPSEmbed
convertFlateToPSString
convertG4ToPS
convertG4ToPSEmbed
convertG4ToPSString
convertHSVToRGB
convertImageDataToPdf
convertImageDataToPdfData
convertJpegToPS
convertJpegToPSEmbed
convertJpegToPSString
convertOnBigEnd16
convertOnBigEnd32
convertOnLittleEnd16
convertOnLittleEnd32
convertRGBToHSV
convertRGBToYUV
convertSegmentedFilesToPdf
convertSegmentedPagesToPS
convertTiffMultipageToPS
convertToPSEmbed
convertToPdf
convertToPdfData
convertToPdfDataSegmented
convertToPdfSegmented
convertYUVToRGB
create2dFloatArray
create2dIntArray
createMatrix2dRotate
createMatrix2dScale
createMatrix2dTranslate
decodeAscii85
dewarpApplyDisparity
dewarpBuildModel
dewarpCreate
dewarpDestroy
dewarpMinimize
dewarpPopulateFullRes
dewarpRead
dewarpReadStream
dewarpWrite
dewarpWriteStream
dilateGrayLow
displayHSVColorRange
distanceFunctionLow
ditherTo2bppLineLow
ditherTo2bppLow
ditherToBinaryLUTLow
ditherToBinaryLineLUTLow
ditherToBinaryLineLow
ditherToBinaryLow
dpixChangeRefcount
dpixClone
dpixConvertToFPix
dpixCopy
dpixCopyResolution
dpixCreate
dpixCreateTemplate
dpixDestroy
dpixEndianByteSwap
dpixGetData
dpixGetDimensions
dpixGetPixel
dpixGetRefcount
dpixGetResolution
dpixGetWpl
dpixRead
dpixReadStream
dpixResizeImageData
dpixScaleByInteger
dpixSetData
dpixSetDimensions
dpixSetPixel
dpixSetResolution
dpixSetWpl
dpixWrite
dpixWriteStream
encodeAscii85
erodeGrayLow
expandBinaryPower2Low
extractG4DataFromFile
extractJpegDataFromArray
extractJpegDataFromFile
extractMinMaxComponent
extractNumberFromFilename
extractRGBValues
fgetJpegResolution
fgetPngResolution
fhmtautogen
fhmtautogen1
fhmtautogen2
fhmtgen_low_1
fileAppendString
fileConcatenate
fileCopy
fileFormatIsTiff
filesAreIdentical
finalAccumulateLow
finalAccumulateThreshLow
findFileFormat
findFileFormatBuffer
findFileFormatStream
findNextBorderPixel
findTiffCompression
flipLRLow
flipTBLow
fmorphautogen
fmorphautogen1
fmorphautogen2
fmorphopgen_low_1
fmorphopgen_low_2
fnbytesInFile
fopenReadStream
fopenWriteStream
fpixAddBorder
fpixAddMirroredBorder
fpixAddMultConstant
fpixBuildHorizontalDisparity
fpixChangeRefcount
fpixClone
fpixConvertToDPix
fpixConvertToPix
fpixConvolve
fpixConvolveSep
fpixCopy
fpixCopyResolution
fpixCreate
fpixCreateTemplate
fpixDestroy
fpixDisplayMaxDynamicRange
fpixEndianByteSwap
fpixGetData
fpixGetDimensions
fpixGetMax
fpixGetMin
fpixGetPixel
fpixGetRefcount
fpixGetResolution
fpixGetWpl
fpixLinearCombination
fpixPrintStream
fpixRasterop
fpixRead
fpixReadStream
fpixRemoveBorder
fpixRenderContours
fpixResizeImageData
fpixSampledDisparity
fpixScaleByInteger
fpixSetData
fpixSetDimensions
fpixSetPixel
fpixSetResolution
fpixSetWpl
fpixWrite
fpixWriteStream
fpixaAddFPix
fpixaChangeRefcount
fpixaCopy
fpixaCreate
fpixaDestroy
fpixaDisplayQuadtree
fpixaExtendArray
fpixaExtendArrayToSize
fpixaGetCount
fpixaGetFPix
fpixaGetFPixDimensions
fpixaGetPixel
fpixaSetPixel
fprintTiffInfo
freadHeaderJpeg
freadHeaderPng
freadHeaderPnm
freadHeaderSpix
freadHeaderTiff
gaussjordan
genPathname
genRandomIntegerInRange
genTempFilename
generateBinaryMaze
generateFlatePS
generateG4PS
generateJpegPS
generatePtaBox
generatePtaBoxa
generatePtaFilledCircle
generatePtaHashBox
generatePtaLine
generatePtaLineFromPt
generatePtaPolyline
generatePtaWideLine
generatePtaaBoxa
generatePtaaHashBoxa
generateUncompressedPS
getAffineXformCoeffs
getBilinearXformCoeffs
getCompositeParameters
getCutPathForHole
getExtendedCompositeParameters
getFilenamesInDirectory
getFormatExtension
getImagelibVersions
getImpliedFileFormat
getLeptonicaVersion
getLogBase2
getMorphBorderPixelColor
getNumberedPathnamesInDirectory
getOctcubeIndexFromRGB
getProjectiveXformCoeffs
getResA4Page
getResLetterPage
getScaledParametersPS
getSortedPathnamesInDirectory
getTiffResolution
gplotAddPlot
gplotCreate
gplotDestroy
gplotGenCommandFile
gplotGenDataFiles
gplotMakeOutput
gplotRead
gplotSetScaling
gplotSimple1
gplotSimple2
gplotSimpleN
gplotWrite
ioFormatTest
jbAccumulateComposites
jbAddPage
jbAddPageComponents
jbAddPages
jbClasserCreate
jbClasserDestroy
jbClassifyCorrelation
jbClassifyRankHaus
jbCorrelation
jbCorrelationInit
jbCorrelationInitWithoutComponents
jbDataDestroy
jbDataRead
jbDataRender
jbDataSave
jbDataWrite
jbGetComponents
jbGetLLCorners
jbGetULCorners
jbRankHaus
jbRankHausInit
jbTemplatesFromComposites
jbWordsInTextlines
kernelCopy
kernelCreate
kernelCreateFromFile
kernelCreateFromPix
kernelCreateFromString
kernelDestroy
kernelDisplayInPix
kernelGetElement
kernelGetMinMax
kernelGetParameters
kernelGetSum
kernelInvert
kernelNormalize
kernelRead
kernelReadStream
kernelSetElement
kernelSetOrigin
kernelWrite
kernelWriteStream
l_binaryCopy
l_binaryRead
l_binaryReadStream
l_binaryWrite
l_byteaAppendData
l_byteaAppendString
l_byteaCopy
l_byteaCopyData
l_byteaCreate
l_byteaDestroy
l_byteaExtendArrayToSize
l_byteaFindEachSequence
l_byteaGetData
l_byteaGetSize
l_byteaInitFromFile
l_byteaInitFromMem
l_byteaInitFromStream
l_byteaJoin
l_byteaSplit
l_byteaWrite
l_byteaWriteStream
l_chooseDisplayProg
l_clearDataBit
l_clearDataDibit
l_clearDataQbit
l_error
l_errorFloat
l_errorInt
l_errorString
l_generateFlateData
l_generateG4Data
l_generateJpegData
l_getCurrentTime
l_getDataBit
l_getDataByte
l_getDataDibit
l_getDataFourBytes
l_getDataQbit
l_getDataTwoBytes
l_getFormattedDate
l_info
l_infoFloat
l_infoFloat2
l_infoInt
l_infoInt2
l_infoString
l_jpegSetNoChromaSampling
l_pdfSetDateAndVersion
l_pdfSetG4ImageMask
l_pngSetStrip16To8

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 252KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
bin/tesseract/tessdata_best/deu.traineddata
bin/tesseract/tessdata_best/eng.traineddata
bin/tesseract/tessdata_best/fra.traineddata
bin/tesseract/tessdata_best/kor.traineddata
bin/tesseract/tessdata_best/spa.traineddata
.ps1
bin/tesseract/tesseract.exe
.exe windows:6 windows x86 arch:x86

279159be65dcd67a7bdfa666ea3aea54

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

connect
WSAStartup
gethostbyname
socket
send
select
recv
htons
closesocket

kernel32

IsDebuggerPresent
WriteConsoleW
HeapSize
GetCurrentDirectoryW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
FindClose
FindFirstFileA
FindNextFileA
MultiByteToWideChar
WideCharToMultiByte
ReleaseMutex
WaitForSingleObject
CreateMutexA
GetModuleFileNameA
ReleaseSemaphore
Sleep
CreateThread
CreateProcessA
CreateSemaphoreA
GetStartupInfoA
GetCurrentProcess
GetSystemTimeAsFileTime
DeleteFileA
SetFileAttributesA
GetTempPathA
GetTempFileNameA
GetLastError
CreateFileA
CreateFileW
GetFileSize
ReadFile
SetFilePointer
WriteFile
CloseHandle
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
ExitProcess
IsValidCodePage
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObjectEx
GetCurrentThread
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
GetProcAddress
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
SetEvent
ResetEvent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
GetThreadTimes
FreeLibrary
LoadLibraryExW
RtlUnwind
RaiseException
GetModuleHandleExW
GetFileType
GetFullPathNameA
HeapAlloc
HeapFree
HeapReAlloc
GetStdHandle
GetCommandLineA
GetCommandLineW
GetACP
GetDriveTypeW
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
ReadConsoleW
GetTimeZoneInformation
SetEndOfFile
GetFileAttributesExW
GetProcessHeap
FindFirstFileExA

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 833KB - Virtual size: 832KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
img/chests/frac/1.png
.png
img/chests/frac/1_1.png
.png
img/chests/frac/1_10.png
.png
img/chests/frac/1_11.png
.png
img/chests/frac/1_12.png
.png
img/chests/frac/1_2.png
.png
img/chests/frac/1_3.png
.png
img/chests/frac/1_4.png
.png
img/chests/frac/1_5.png
.png
img/chests/frac/1_6.png
.png
img/chests/frac/1_7.png
.png
img/chests/frac/1_8.png
.png
img/chests/frac/1_9.png
.png
img/chests/frac/2.png
.png
img/chests/frac/events.png
.png
img/chests/hawe/1.png
.png
img/chests/hawe/2.png
.png
img/chests/hawe/3.png
.png
img/chests/hawe/3_1.png
.png
img/chests/hawe/3_10.png
.png
img/chests/hawe/3_11.png
.png
img/chests/hawe/3_12.png
.png
img/chests/hawe/3_2.png
.png
img/chests/hawe/3_3.png
.png
img/chests/hawe/3_4.png
.png
img/chests/hawe/3_5.png
.png
img/chests/hawe/3_6.png
.png
img/chests/hawe/3_7.png
.png
img/chests/hawe/3_8.png
.png
img/chests/hawe/3_9.png
.png
img/chests/hawe/events.png
.png
img/chests/kehj/1.png
.png
img/chests/kehj/2.png
.png
img/chests/kehj/3.png
.png
img/chests/kehj/4.png
.png
img/chests/kehj/5.png
.png
img/chests/kehj/5_1.png
.png
img/chests/kehj/5_10.png
.png
img/chests/kehj/5_11.png
.png
img/chests/kehj/5_12.png
.png
img/chests/kehj/5_13.png
.png
img/chests/kehj/5_14.png
.png
img/chests/kehj/5_15.png
.png
img/chests/kehj/5_16.png
.png
img/chests/kehj/5_17.png
.png
img/chests/kehj/5_18.png
.png
img/chests/kehj/5_2.png
.png
img/chests/kehj/5_3.png
.png
img/chests/kehj/5_4.png
.png
img/chests/kehj/5_5.png
.png
img/chests/kehj/5_6.png
.png
img/chests/kehj/5_7.png
.png
img/chests/kehj/5_8.png
.png
img/chests/kehj/5_9.png
.png
img/chests/kehj/6.png
.png
img/chests/kehj/events.png
.png
img/chests/scos/1.png
.png
img/chests/scos/2.png
.png
img/chests/scos/3.png
.png
img/chests/scos/4.png
.png
img/chests/scos/4_1.png
.png
img/chests/scos/4_10.png
.png
img/chests/scos/4_2.png
.png
img/chests/scos/4_3.png
.png
img/chests/scos/4_4.png
.png
img/chests/scos/4_5.png
.png
img/chests/scos/4_6.png
.png
img/chests/scos/4_7.png
.png
img/chests/scos/4_8.png
.png
img/chests/scos/4_9.png
.png
img/chests/scos/events.png
.png
img/chests/step/1.png
.png
img/chests/step/2.png
.png
img/chests/step/2_1.png
.png
img/chests/step/2_10.png
.png
img/chests/step/2_11.png
.png
img/chests/step/2_12.png
.png
img/chests/step/2_2.png
.png
img/chests/step/2_3.png
.png
img/chests/step/2_4.png
.png
img/chests/step/2_5.png
.png
img/chests/step/2_6.png
.png
img/chests/step/2_7.png
.png
img/chests/step/2_8.png
.png
img/chests/step/2_9.png
.png
img/chests/step/events.png
.png
img/icons/BossAshava.png
.png
img/icons/BossAvarice.png
.png
img/icons/BossThe Wandering Death.png
.png
img/icons/Helltide.png
.png
img/icons/Legion.png
.png
img/icons/MysteryChest.png
.png
img/icons/autorun.png
.png
img/icons/check.png
.png
img/icons/combo.png
.png
img/icons/variants/Sorc_1.png
.png
img/icons/variants/Sorc_2.png
.png
img/icons/variants/aura_1.png
.png
img/icons/variants/aura_2.png
.png
img/icons/variants/aura_3.png
.png
img/icons/variants/aura_4.png
.png
img/icons/variants/autorun_1.png
.png
img/icons/variants/autorun_default.png
.png
img/icons/variants/combo_default.png
.png
sounds/boss.mp3
sounds/helltide.mp3
sounds/legion.mp3
sounds/newchest.mp3

Sharing

General

Malware Config

Signatures

Files

8d813561e4ad07e9f8918a83e16f95c0

Headers

File Characteristics

Imports

wsock32

winmm

version

comctl32

psapi

wininet

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 642KB - Virtual size: 641KB

.rdata Size: 144KB - Virtual size: 143KB

.data Size: 13KB - Virtual size: 35KB

.rsrc Size: 380KB - Virtual size: 379KB

f13ac442dbf5c1dbecf7059eb11d4110

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

liblept168

msvcr90

kernel32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 908B

.rsrc Size: 1024B - Virtual size: 688B

.reloc Size: 512B - Virtual size: 456B

5d49e1581de254332214840b9ede873b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msvcr90

Exports

Exports

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 252KB - Virtual size: 251KB

.data Size: 22KB - Virtual size: 24KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 25KB - Virtual size: 24KB

279159be65dcd67a7bdfa666ea3aea54

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

Sections

.text Size: 2.8MB - Virtual size: 2.8MB

.rdata Size: 833KB - Virtual size: 832KB

.data Size: 39KB - Virtual size: 1.6MB

_RDATA Size: 4KB - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 95KB - Virtual size: 94KB

.text
Size: 642KB - Virtual size: 641KB

.rdata
Size: 144KB - Virtual size: 143KB

.data
Size: 13KB - Virtual size: 35KB

.rsrc
Size: 380KB - Virtual size: 379KB

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 908B

.rsrc
Size: 1024B - Virtual size: 688B

.reloc
Size: 512B - Virtual size: 456B

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 252KB - Virtual size: 251KB

.data
Size: 22KB - Virtual size: 24KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 25KB - Virtual size: 24KB

.text
Size: 2.8MB - Virtual size: 2.8MB

.rdata
Size: 833KB - Virtual size: 832KB

.data
Size: 39KB - Virtual size: 1.6MB

_RDATA
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 95KB - Virtual size: 94KB