modloader[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

modloader.rar
Size

34.8MB
MD5

e62376ce20fdd9ee607b872efb634eca
SHA1

d108da07c637732a1b3137749e34f14529c50df4
SHA256

0221397cf77b41ad50424fede93633464666724ec418c6c9bf0f80b74203aabb
SHA512

0425aa87f714e52ab804d32e853dbff1928a51f24396bb3085a2b98badbc5927766fe802a56dcbfab078a9a66cc9e967e3e300e1e0f7d21d5deaad839bd472f4
SSDEEP

786432:EJY4jWBIW+SnRsxoFDu4ZELbAprK2v4Vh8LWYb3mWQu:EjWBIW+SRsCluwGAF4h893mNu

Score

3^/10

Malware Config

Signatures

Unsigned PE 11 IoCs

Checks for missing Authenticode signature.

resource
unpack001/modloader/modloader.asi
unpack001/modloader/modloader/.data/plugins/gta3/std.asi.dll
unpack001/modloader/modloader/.data/plugins/gta3/std.bank.dll
unpack001/modloader/modloader/.data/plugins/gta3/std.data.dll
unpack001/modloader/modloader/.data/plugins/gta3/std.fx.dll
unpack001/modloader/modloader/.data/plugins/gta3/std.movies.dll
unpack001/modloader/modloader/.data/plugins/gta3/std.scm.dll
unpack001/modloader/modloader/.data/plugins/gta3/std.sprites.dll
unpack001/modloader/modloader/.data/plugins/gta3/std.stream.dll
unpack001/modloader/modloader/.data/plugins/gta3/std.text.dll
unpack001/modloader/modloader/.data/plugins/gta3/std.tracks.dll

Files

modloader.rar
.rar
modloader/modloader.asi
.dll windows:6 windows x86 arch:x86

b43860eb0867600c6d053de7501de0c9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\modloader\bin\modloader.pdb

Imports

dbghelp

SymFromAddr
SymInitialize
SymCleanup
SymSetOptions
StackWalk64

kernel32

GetStringTypeW
SetEndOfFile
CreateFileW
WriteConsoleW
OutputDebugStringW
LoadLibraryExW
GetCommandLineW
LocalFree
WideCharToMultiByte
SetUnhandledExceptionFilter
GetCurrentProcess
GetCurrentThread
VirtualQuery
GetModuleFileNameA
GetModuleHandleExA
CloseHandle
HeapCreate
HeapDestroy
HeapAlloc
ExitProcess
VirtualProtect
MapViewOfFile
UnmapViewOfFile
GetModuleHandleA
CreateFileMappingA
OpenFileMappingA
GetUserDefaultLCID
SetCurrentDirectoryA
GetCurrentDirectoryA
CreateDirectoryA
FindClose
FindFirstFileA
FindNextFileA
GetFileAttributesA
GetLastError
CopyFileA
FreeLibrary
GetProcAddress
LoadLibraryA
CreateFileA
GetOverlappedResult
CancelIo
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
WaitForSingleObject
CreateEventA
CreateThread
ResumeThread
WaitForMultipleObjects
ReadDirectoryChangesW
SetFilePointerEx
ReadConsoleW
ReadFile
SetStdHandle
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
MultiByteToWideChar
RaiseException
RtlUnwind
HeapFree
GetSystemInfo
VirtualAlloc
GetCommandLineA
GetCurrentThreadId
GetCPInfo
UnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
IsProcessorFeaturePresent
LCMapStringW
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesW
IsDebuggerPresent
GetStdHandle
GetFileType
IsValidCodePage
GetACP
GetOEMCP
GetProcessHeap
GetModuleHandleExW
AreFileApisANSI
WriteFile
GetModuleFileNameW
HeapSize
FlushFileBuffers
GetConsoleCP
GetConsoleMode
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapReAlloc

user32

MessageBoxA

shell32

SHGetFolderPathA
CommandLineToArgvW

Exports

Exports

GetLoaderVersion
GetPluginData

Sections

.text
Size: 432KB - Virtual size: 432KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
modloader/modloader/.data/CHANGELOG.md
modloader/modloader/.data/Command Line Arguments.md
modloader/modloader/.data/LICENSE
modloader/modloader/.data/Leia-me.md
modloader/modloader/.data/Profiles.md
modloader/modloader/.data/Readme.md
modloader/modloader/.data/config.ini
modloader/modloader/.data/config.ini.0
modloader/modloader/.data/licenses/boost.txt
modloader/modloader/.data/licenses/cereal.txt
modloader/modloader/.data/licenses/tinympl.txt
modloader/modloader/.data/modloader.ini.0
modloader/modloader/.data/plugins.ini.0
modloader/modloader/.data/plugins/gta3/std.asi.dll
.dll windows:6 windows x86 arch:x86

38f7138b90e535b51da7cec4eecb6e84

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\modloader\bin\plugins\gta3\std.asi.pdb

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
FindClose
FindFirstFileA
FindNextFileA
GetFileAttributesA
GetFileAttributesW
GetFileAttributesExA
GetLastError
SetLastError
GetCurrentProcessId
VirtualProtect
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleExA
GetProcAddress
LoadLibraryA
CreateToolhelp32Snapshot
Module32First
Module32Next
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetCommandLineA
GetCurrentThreadId
IsProcessorFeaturePresent
HeapAlloc
HeapFree
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
HeapSize
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LCMapStringW
WriteFile
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
GetStringTypeW
LoadLibraryExW
HeapReAlloc
GetConsoleCP
GetConsoleMode
SetFilePointerEx
OutputDebugStringW
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileW
CloseHandle

Exports

Exports

GetLoaderVersion
GetPluginData

Sections

.text
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
modloader/modloader/.data/plugins/gta3/std.asi.md
modloader/modloader/.data/plugins/gta3/std.bank.dll
.dll windows:6 windows x86 arch:x86

01d85787d8658ddacdb02579259e463a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\modloader\bin\plugins\gta3\std.bank.pdb

Imports

kernel32

CreateFileA
GetFileAttributesA
GetFileSize
ReadFile
CloseHandle
ReleaseSemaphore
WaitForSingleObject
Sleep
CreateThread
GetCurrentThread
SetThreadPriority
GetThreadPriority
ResumeThread
VirtualProtect
GetModuleHandleA
CreateSemaphoreA
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetCommandLineA
GetCurrentThreadId
IsProcessorFeaturePresent
GetLastError
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapSize
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetProcessHeap
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LCMapStringW
WriteFile
GetModuleFileNameW
LoadLibraryExW
HeapReAlloc
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetStringTypeW
OutputDebugStringW
WriteConsoleW
CreateFileW
SetEndOfFile

Exports

Exports

GetLoaderVersion
GetPluginData

Sections

.text
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
modloader/modloader/.data/plugins/gta3/std.bank.md
modloader/modloader/.data/plugins/gta3/std.data.dll
.dll windows:6 windows x86 arch:x86

ce2433333298e7aaccbac31b09ab2566

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\modloader\bin\plugins\gta3\std.data.pdb

Imports

kernel32

CreateDirectoryA
DeleteFileA
FindClose
FindFirstFileA
FindNextFileA
GetFileAttributesA
GetFileAttributesExA
GetLastError
VirtualProtect
GetModuleHandleA
SetCurrentDirectoryA
GetCurrentDirectoryA
CopyFileA
RemoveDirectoryA
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
GetStringTypeW
HeapFree
RaiseException
RtlUnwind
GetSystemInfo
VirtualAlloc
VirtualQuery
GetCommandLineA
GetCurrentThreadId
GetCPInfo
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
IsProcessorFeaturePresent
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapSize
IsDebuggerPresent
CloseHandle
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
GetStdHandle
GetFileType
ReadFile
SetFilePointerEx
IsValidCodePage
GetACP
GetOEMCP
GetProcessHeap
ReadConsoleW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameW
HeapReAlloc
LoadLibraryExW
SetStdHandle
WriteConsoleW
OutputDebugStringW
CreateFileW
SetEndOfFile

Exports

Exports

GetLoaderVersion
GetPluginData

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 283KB - Virtual size: 297KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
modloader/modloader/.data/plugins/gta3/std.data.md
modloader/modloader/.data/plugins/gta3/std.fx.dll
.dll windows:6 windows x86 arch:x86

d447561b7b2a54408cda6ce3eeb900d6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\modloader\bin\plugins\gta3\std.fx.pdb

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
GetFileAttributesA
VirtualProtect
GetModuleHandleA
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetCommandLineA
GetCurrentThreadId
IsProcessorFeaturePresent
GetLastError
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
HeapSize
IsDebuggerPresent
SetLastError
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LCMapStringW
WriteFile
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
GetConsoleCP
GetConsoleMode
SetFilePointerEx
OutputDebugStringW
GetStringTypeW
ReadFile
ReadConsoleW
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileW
CloseHandle

Exports

Exports

GetLoaderVersion
GetPluginData

Sections

.text
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
modloader/modloader/.data/plugins/gta3/std.fx.md
modloader/modloader/.data/plugins/gta3/std.movies.dll
.dll windows:6 windows x86 arch:x86

21f1a80f4a9caa7084925bf84361dff0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\modloader\bin\plugins\gta3\std.movies.pdb

Imports

kernel32

GetFileAttributesA
VirtualProtect
GetModuleHandleA
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetCommandLineA
GetCurrentThreadId
IsProcessorFeaturePresent
GetLastError
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
HeapSize
IsDebuggerPresent
SetLastError
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LCMapStringW
WriteFile
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
GetConsoleCP
GetConsoleMode
SetFilePointerEx
OutputDebugStringW
GetStringTypeW
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileW
CloseHandle

Exports

Exports

GetLoaderVersion
GetPluginData

Sections

.text
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
modloader/modloader/.data/plugins/gta3/std.movies.md
modloader/modloader/.data/plugins/gta3/std.scm.dll
.dll windows:6 windows x86 arch:x86

21f1a80f4a9caa7084925bf84361dff0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\modloader\bin\plugins\gta3\std.scm.pdb

Imports

kernel32

GetFileAttributesA
VirtualProtect
GetModuleHandleA
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetCommandLineA
GetCurrentThreadId
IsProcessorFeaturePresent
GetLastError
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
HeapSize
IsDebuggerPresent
SetLastError
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LCMapStringW
WriteFile
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
GetConsoleCP
GetConsoleMode
SetFilePointerEx
OutputDebugStringW
GetStringTypeW
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileW
CloseHandle

Exports

Exports

GetLoaderVersion
GetPluginData

Sections

.text
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
modloader/modloader/.data/plugins/gta3/std.scm.md
modloader/modloader/.data/plugins/gta3/std.sprites.dll
.dll windows:6 windows x86 arch:x86

c5a019fe79d2f83a460528bdc414cc77

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\modloader\bin\plugins\gta3\std.sprites.pdb

Imports

kernel32

VirtualProtect
GetModuleHandleA
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
GetStringTypeW
GetLastError
HeapFree
GetSystemInfo
VirtualAlloc
VirtualQuery
RaiseException
RtlUnwind
GetCommandLineA
GetCurrentThreadId
GetCPInfo
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
IsProcessorFeaturePresent
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ExitProcess
GetModuleHandleExW
HeapSize
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
GetProcessHeap
GetStdHandle
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteFile
GetModuleFileNameW
HeapReAlloc
LoadLibraryExW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
OutputDebugStringW
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileW
CloseHandle

Exports

Exports

GetLoaderVersion
GetPluginData

Sections

.text
Size: 262KB - Virtual size: 262KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
modloader/modloader/.data/plugins/gta3/std.sprites.md
modloader/modloader/.data/plugins/gta3/std.stream.dll
.dll windows:6 windows x86 arch:x86

210197862ca958670b89c797a493cd51

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\modloader\bin\plugins\gta3\std.stream.pdb

Imports

kernel32

VirtualProtect
GetModuleHandleA
GetFileAttributesA
InitializeCriticalSection
DeleteCriticalSection
CreateFileA
ReadFile
CloseHandle
GetLastError
GetOverlappedResult
EnterCriticalSection
LeaveCriticalSection
ReleaseSemaphore
WaitForSingleObject
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetCommandLineA
GetCurrentThreadId
IsProcessorFeaturePresent
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapSize
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
IsDebuggerPresent
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetProcessHeap
GetStdHandle
GetFileType
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LCMapStringW
WriteFile
GetModuleFileNameW
LoadLibraryExW
HeapReAlloc
GetStringTypeW
SetStdHandle
FlushFileBuffers
GetConsoleCP
OutputDebugStringW
WriteConsoleW
CreateFileW
SetEndOfFile

Exports

Exports

GetLoaderVersion
GetPluginData
StreamRefresherCreate

Sections

.text
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
modloader/modloader/.data/plugins/gta3/std.stream.md
modloader/modloader/.data/plugins/gta3/std.text.dll
.dll windows:6 windows x86 arch:x86

ba1240ddf5575a3196f2ed721fbc40eb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\modloader\bin\plugins\gta3\std.text.pdb

Imports

kernel32

GetFileAttributesA
VirtualProtect
GetModuleHandleA
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetCommandLineA
GetCurrentThreadId
IsProcessorFeaturePresent
GetLastError
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapSize
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
CloseHandle
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetProcessHeap
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LCMapStringW
WriteFile
GetModuleFileNameW
LoadLibraryExW
HeapReAlloc
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadFile
ReadConsoleW
SetFilePointerEx
GetStringTypeW
OutputDebugStringW
WriteConsoleW
CreateFileW
SetEndOfFile

Exports

Exports

GetLoaderVersion
GetPluginData

Sections

.text
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
modloader/modloader/.data/plugins/gta3/std.text.md
modloader/modloader/.data/plugins/gta3/std.tracks.dll
.dll windows:6 windows x86 arch:x86

fed023705fcb35f8993e9ca2658544f1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\modloader\bin\plugins\gta3\std.tracks.pdb

Imports

kernel32

CreateFileA
GetFileAttributesA
VirtualProtect
GetModuleHandleA
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetCommandLineA
GetCurrentThreadId
IsProcessorFeaturePresent
GetLastError
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
HeapSize
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LCMapStringW
WriteFile
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
HeapReAlloc
GetConsoleCP
GetConsoleMode
SetFilePointerEx
GetStringTypeW
OutputDebugStringW
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileW
CloseHandle

Exports

Exports

GetLoaderVersion
GetPluginData

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
modloader/modloader/.data/plugins/gta3/std.tracks.md
modloader/modloader/.data/plugins/plugins.ini
modloader/modloader/.data/text/1033/menu.fxt
modloader/modloader/Particle/particle.txd
modloader/modloader/Remastered Effects/effects.fxp
modloader/modloader/Remastered Effects/effectsPC.txd
modloader/modloader/Skybox/CLEO/SkyBoX.cs
modloader/modloader/Skybox/CLEO/SkyBoX2.cs
modloader/modloader/Skybox/CLEO/SkyBoX3.cs
modloader/modloader/Skybox/CLEO/SkyBoX4.cs
modloader/modloader/Skybox/CLEO/cleoskybox.cs
modloader/modloader/Skybox/bdups_graf.dff
modloader/modloader/Skybox/graffiti_lan01.dff
modloader/modloader/Skybox/graffiti_lan01.txd
modloader/modloader/Skybox/lee_bdupsmain.txd
modloader/modloader/Timecyc/timecyc.dat
modloader/modloader/Timecyc/timecycp.dat
modloader/modloader/modloader.ini
modloader/modloader/modloader.log

Sharing

General

Malware Config

Signatures

Files

b43860eb0867600c6d053de7501de0c9

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

dbghelp

kernel32

user32

shell32

Exports

Exports

Sections

.text Size: 432KB - Virtual size: 432KB

.rdata Size: 108KB - Virtual size: 107KB

.data Size: 61KB - Virtual size: 73KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 25KB - Virtual size: 24KB

38f7138b90e535b51da7cec4eecb6e84

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

Exports

Exports

Sections

.text Size: 134KB - Virtual size: 134KB

.rdata Size: 38KB - Virtual size: 37KB

.data Size: 12KB - Virtual size: 22KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 11KB - Virtual size: 10KB

01d85787d8658ddacdb02579259e463a

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

Exports

Exports

Sections

.text Size: 163KB - Virtual size: 163KB

.rdata Size: 43KB - Virtual size: 42KB

.data Size: 17KB - Virtual size: 33KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 11KB - Virtual size: 10KB

ce2433333298e7aaccbac31b09ab2566

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

Exports

Exports

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rdata Size: 300KB - Virtual size: 300KB

.data Size: 283KB - Virtual size: 297KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 112KB - Virtual size: 111KB

d447561b7b2a54408cda6ce3eeb900d6

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

Exports

Exports

Sections

.text Size: 184KB - Virtual size: 183KB

.rdata Size: 57KB - Virtual size: 57KB

.text
Size: 432KB - Virtual size: 432KB

.rdata
Size: 108KB - Virtual size: 107KB

.data
Size: 61KB - Virtual size: 73KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 25KB - Virtual size: 24KB

.text
Size: 134KB - Virtual size: 134KB

.rdata
Size: 38KB - Virtual size: 37KB

.data
Size: 12KB - Virtual size: 22KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 11KB - Virtual size: 10KB

.text
Size: 163KB - Virtual size: 163KB

.rdata
Size: 43KB - Virtual size: 42KB

.data
Size: 17KB - Virtual size: 33KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 11KB - Virtual size: 10KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 300KB - Virtual size: 300KB

.data
Size: 283KB - Virtual size: 297KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 112KB - Virtual size: 111KB

.text
Size: 184KB - Virtual size: 183KB

.rdata
Size: 57KB - Virtual size: 57KB

.data
Size: 33KB - Virtual size: 41KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 16KB - Virtual size: 15KB

.text
Size: 90KB - Virtual size: 89KB

.rdata
Size: 32KB - Virtual size: 31KB

.data
Size: 9KB - Virtual size: 17KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 7KB - Virtual size: 6KB

.text
Size: 89KB - Virtual size: 89KB

.rdata
Size: 32KB - Virtual size: 31KB

.data
Size: 9KB - Virtual size: 17KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 7KB - Virtual size: 6KB

.text
Size: 262KB - Virtual size: 262KB

.rdata
Size: 79KB - Virtual size: 78KB

.data
Size: 44KB - Virtual size: 53KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 16KB - Virtual size: 15KB

.text
Size: 239KB - Virtual size: 239KB

.rdata
Size: 72KB - Virtual size: 72KB

.data
Size: 44KB - Virtual size: 52KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 21KB - Virtual size: 21KB