sa-mp-0[.]3[.]7-R5-1-install[.]exe

resource	yara_rule
static1/unpack001/samp.exe	upx

resource
sa-mp-0.3.7-R5-1-install.exe
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/SAMPUninstall.exe
unpack002/$PLUGINSDIR/InstallOptions.dll
unpack001/bass.dll
unpack001/rcon.exe
unpack001/samp.dll
unpack001/samp.exe
unpack003/out.upx
unpack001/samp_debug.exe

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2
static1/unpack001/SAMPUninstall.exe	nsis_installer_1
static1/unpack001/SAMPUninstall.exe	nsis_installer_2

sa-mp-0.3.7-R5-1-install.exe

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 550321da5b10c472bc719bca2c0df74b240f80eff828079eb5253598fe112ae3
MD5 f7874cc8637e5ddb98b07ed40a24de58
SHA1 0a9eac60f516a8661b5b2ae9f1d5d798ee7fecef
SHA512 c0e2078d8bd1d6aeb8d6cc77ea935e41fb31c271f6503a3625d2bcbebf9a8b142a1d7856816381fb4be79a45e1ea6dbe8cdb8efa027f29c32faf52794c49f2b1
SSDEEP 393216:suNmflaNtY7G8t+LdFyBV9DVimtbA9yRbABehQtAuGuSwcBk:3NklUt3Nd2VvimtbeGbbhQtWBk
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12491

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/InstallOptions.dll

IMPHASH b1cd0d78f652ce5fc63f0879371af012
SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
MD5 325b008aec81e5aaa57096f05d4212b5
SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetCurrentDirectoryA GetCurrentDirectoryA MultiByteToWideChar GetPrivateProfileIntA GlobalLock GetModuleHandleA lstrcmpiA GetPrivateProfileStringA lstrcatA lstrcpynA WritePrivateProfileStringA lstrlenA lstrcpyA GlobalFree GlobalUnlock GlobalAlloc

user32

MapWindowPoints GetDlgCtrlID CloseClipboard GetClipboardData OpenClipboard PtInRect SetWindowRgn LoadIconA LoadImageA SetWindowLongA CreateWindowExA MapDialogRect SetWindowPos GetWindowRect CreateDialogParamA ShowWindow EnableMenuItem GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA LoadCursorA SetCursor DrawTextA GetWindowLongA DrawFocusRect CallWindowProcA PostMessageA MessageBoxA CharNextA wsprintfA GetWindowTextA SetWindowTextA SendMessageA GetClientRect

gdi32

SetTextColor CreateCompatibleDC GetObjectA GetDIBits CreateRectRgn CombineRgn DeleteObject SelectObject

shell32

SHBrowseForFolderA SHGetDesktopFolder SHGetPathFromIDListA ShellExecuteA

comdlg32

GetOpenFileNameA GetSaveFileNameA CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$SYSDIR/d3dx9_25.dll

IMPHASH cf59ec61a977c0dc219019890726b5d1
SHA256 4c54df27ce84d21b2924e64ff79b13e7876ce85d8e0c9c1d0abd8da73888187a
MD5 5b48fe9d6686f0d54b26a005ace24d1d
SHA1 1c395f6d2aa729a607e69dca73f8205cefd26aa4
SHA512 6a4fa549578097ba36495ec210365c27d165065820f0fdad20864a3139949e72da00f9b7c614d07d8950307e596b693ed7a291a5c69cc0f9ba30c5f74d6332f1
SSDEEP 49152:IxfcP6/1/QQ0ANFrbfxdqPeQ6eg+XMD3hP7zfOHXD:IxfcP6/1X0ANFrbfxdqPeQfg+XMD3hPQ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

a9:a7:5e:d0:8d:8a:3c:30:1f:ef:76:a0:e8:09:ff:d4:64:64:4e:ef

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Feb 29, 2024

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Serial Number

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2008

Subject

Serial Number

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40

Issuer

Timespan

Jan 10, 1997 - Dec 31, 2020

Subject

Serial Number

6a:0b:99:4f:c0:00:0c:ab:11:d8:22:ef:7d:6c:79:7e

Issuer

Key Usages

KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 23, 2002 - Sep 25, 2011

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:05:87:58:00:03:00:00:00:5a

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 5, 2005 - Apr 5, 2006

Minor OS version

2

Major OS version

5

Entry point

2137756

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d3dx9_25.pdb

kernel32

GetFileSize CreateFileMappingA MapViewOfFile UnmapViewOfFile FindResourceA LoadResource LockResource SizeofResource FreeResource CompareStringA GetFullPathNameA LeaveCriticalSection DeleteCriticalSection InterlockedCompareExchange Sleep InitializeCriticalSection InterlockedExchange EnterCriticalSection lstrcmpiA IsDBCSLeadByte CreateFileW GetTempPathA GetTempFileNameA CreateFileA ReadFile CloseHandle DeleteFileA InterlockedDecrement InterlockedIncrement IsProcessorFeaturePresent GetSystemInfo VirtualAlloc VirtualFree WideCharToMultiByte MultiByteToWideChar OutputDebugStringA GetModuleHandleA GetProcAddress LoadLibraryA GetVersionExA DeleteFileW SetFilePointer MoveFileA MoveFileW GetTempFileNameW GlobalMemoryStatus FreeLibrary SetEndOfFile ExpandEnvironmentStringsA GetLastError CreateMutexA WaitForSingleObject ReleaseMutex IsBadWritePtr IsBadReadPtr IsBadCodePtr DisableThreadLibraryCalls HeapAlloc GetProcessHeap HeapFree QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter WriteFile FindResourceW

msvcrt

_except_handler3 ?terminate@@YAXXZ _adjust_fdiv _initterm srand _tempnam exit atol _ultoa wcstombs rand fread _wfopen fopen fwrite fclose isxdigit atof _CIcosh _CIexp _CIsinh _CItanh _fpclass strchr _isnan isalnum isalpha toupper tolower atoi floor _strtime _strdate sscanf isspace isdigit _setjmp3 longjmp ldexp frexp wcslen calloc realloc malloc _CIsqrt setlocale _strdup free ceil _controlfp _vsnprintf _CIasin __CxxFrameHandler _finite _CIacos memmove qsort _CIfmod _purecall _stricmp modf iswspace iswalpha iswdigit iswpunct _CIpow ??2@YAPAXI@Z ??3@YAXPAX@Z

gdi32

GetCurrentObject ExtTextOutW MoveToEx ExtTextOutA CreateCompatibleDC SetMapMode SetTextAlign CreateFontIndirectW CreateFontIndirectA GetFontLanguageInfo SetBkMode GetOutlineTextMetricsA SetTextColor GetCharacterPlacementW GetCharacterPlacementA SelectObject DeleteObject DeleteDC CreateDIBSection GetGlyphOutlineA GetTextMetricsA GetObjectW GetObjectA GetGlyphOutlineW SetBkColor GetTextMetricsW

advapi32

RegCloseKey RegOpenKeyA RegQueryValueExA

D3DXAssembleShader D3DXAssembleShaderFromFileA D3DXAssembleShaderFromFileW D3DXAssembleShaderFromResourceA D3DXAssembleShaderFromResourceW D3DXBoxBoundProbe D3DXCheckCubeTextureRequirements D3DXCheckTextureRequirements D3DXCheckVersion D3DXCheckVolumeTextureRequirements D3DXCleanMesh D3DXColorAdjustContrast D3DXColorAdjustSaturation D3DXCompileShader D3DXCompileShaderFromFileA D3DXCompileShaderFromFileW D3DXCompileShaderFromResourceA D3DXCompileShaderFromResourceW D3DXComputeBoundingBox D3DXComputeBoundingSphere D3DXComputeNormalMap D3DXComputeNormals D3DXComputeTangent D3DXComputeTangentFrame D3DXComputeTangentFrameEx D3DXConcatenateMeshes D3DXConvertMeshSubsetToSingleStrip D3DXConvertMeshSubsetToStrips D3DXCpuOptimizations D3DXCreateAnimationController D3DXCreateBox D3DXCreateBuffer D3DXCreateCompressedAnimationSet D3DXCreateCubeTexture D3DXCreateCubeTextureFromFileA D3DXCreateCubeTextureFromFileExA D3DXCreateCubeTextureFromFileExW D3DXCreateCubeTextureFromFileInMemory D3DXCreateCubeTextureFromFileInMemoryEx D3DXCreateCubeTextureFromFileW D3DXCreateCubeTextureFromResourceA D3DXCreateCubeTextureFromResourceExA D3DXCreateCubeTextureFromResourceExW D3DXCreateCubeTextureFromResourceW D3DXCreateCylinder D3DXCreateEffect D3DXCreateEffectCompiler D3DXCreateEffectCompilerFromFileA D3DXCreateEffectCompilerFromFileW D3DXCreateEffectCompilerFromResourceA D3DXCreateEffectCompilerFromResourceW D3DXCreateEffectEx D3DXCreateEffectFromFileA D3DXCreateEffectFromFileExA D3DXCreateEffectFromFileExW D3DXCreateEffectFromFileW D3DXCreateEffectFromResourceA D3DXCreateEffectFromResourceExA D3DXCreateEffectFromResourceExW D3DXCreateEffectFromResourceW D3DXCreateEffectPool D3DXCreateFontA D3DXCreateFontIndirectA D3DXCreateFontIndirectW D3DXCreateFontW D3DXCreateFragmentLinker D3DXCreateKeyframedAnimationSet D3DXCreateLine D3DXCreateMatrixStack D3DXCreateMesh D3DXCreateMeshFVF D3DXCreateNPatchMesh D3DXCreatePMeshFromStream D3DXCreatePRTBuffer D3DXCreatePRTBufferTex D3DXCreatePRTCompBuffer D3DXCreatePRTEngine D3DXCreatePatchMesh D3DXCreatePolygon D3DXCreateRenderToEnvMap D3DXCreateRenderToSurface D3DXCreateSPMesh D3DXCreateSkinInfo D3DXCreateSkinInfoFVF D3DXCreateSkinInfoFromBlendedMesh D3DXCreateSphere D3DXCreateSprite D3DXCreateTeapot D3DXCreateTextA D3DXCreateTextW D3DXCreateTexture D3DXCreateTextureFromFileA D3DXCreateTextureFromFileExA D3DXCreateTextureFromFileExW D3DXCreateTextureFromFileInMemory D3DXCreateTextureFromFileInMemoryEx D3DXCreateTextureFromFileW D3DXCreateTextureFromResourceA D3DXCreateTextureFromResourceExA D3DXCreateTextureFromResourceExW D3DXCreateTextureFromResourceW D3DXCreateTextureGutterHelper D3DXCreateTextureShader D3DXCreateTorus D3DXCreateVolumeTexture D3DXCreateVolumeTextureFromFileA D3DXCreateVolumeTextureFromFileExA D3DXCreateVolumeTextureFromFileExW D3DXCreateVolumeTextureFromFileInMemory D3DXCreateVolumeTextureFromFileInMemoryEx D3DXCreateVolumeTextureFromFileW D3DXCreateVolumeTextureFromResourceA D3DXCreateVolumeTextureFromResourceExA D3DXCreateVolumeTextureFromResourceExW D3DXCreateVolumeTextureFromResourceW D3DXDebugMute D3DXDeclaratorFromFVF D3DXDisassembleEffect D3DXDisassembleShader D3DXFVFFromDeclarator D3DXFileCreate D3DXFillCubeTexture D3DXFillCubeTextureTX D3DXFillTexture D3DXFillTextureTX D3DXFillVolumeTexture D3DXFillVolumeTextureTX D3DXFilterTexture D3DXFindShaderComment D3DXFloat16To32Array D3DXFloat32To16Array D3DXFrameAppendChild D3DXFrameCalculateBoundingSphere D3DXFrameDestroy D3DXFrameFind D3DXFrameNumNamedMatrices D3DXFrameRegisterNamedMatrices D3DXFresnelTerm D3DXGatherFragments D3DXGatherFragmentsFromFileA D3DXGatherFragmentsFromFileW D3DXGatherFragmentsFromResourceA D3DXGatherFragmentsFromResourceW D3DXGenerateOutputDecl D3DXGeneratePMesh D3DXGetDeclLength D3DXGetDeclVertexSize D3DXGetDriverLevel D3DXGetFVFVertexSize D3DXGetImageInfoFromFileA D3DXGetImageInfoFromFileInMemory D3DXGetImageInfoFromFileW D3DXGetImageInfoFromResourceA D3DXGetImageInfoFromResourceW D3DXGetPixelShaderProfile D3DXGetShaderConstantTable D3DXGetShaderInputSemantics D3DXGetShaderOutputSemantics D3DXGetShaderSamplers D3DXGetShaderSize D3DXGetShaderVersion D3DXGetTargetDescByName D3DXGetTargetDescByVersion D3DXGetVertexShaderProfile D3DXIntersect D3DXIntersectSubset D3DXIntersectTri D3DXLoadMeshFromXA D3DXLoadMeshFromXInMemory D3DXLoadMeshFromXResource D3DXLoadMeshFromXW D3DXLoadMeshFromXof D3DXLoadMeshHierarchyFromXA D3DXLoadMeshHierarchyFromXInMemory D3DXLoadMeshHierarchyFromXW D3DXLoadPRTBufferFromFileA D3DXLoadPRTBufferFromFileW D3DXLoadPRTCompBufferFromFileA D3DXLoadPRTCompBufferFromFileW D3DXLoadPatchMeshFromXof D3DXLoadSkinMeshFromXof D3DXLoadSurfaceFromFileA D3DXLoadSurfaceFromFileInMemory D3DXLoadSurfaceFromFileW D3DXLoadSurfaceFromMemory D3DXLoadSurfaceFromResourceA D3DXLoadSurfaceFromResourceW D3DXLoadSurfaceFromSurface D3DXLoadVolumeFromFileA D3DXLoadVolumeFromFileInMemory D3DXLoadVolumeFromFileW D3DXLoadVolumeFromMemory D3DXLoadVolumeFromResourceA D3DXLoadVolumeFromResourceW D3DXLoadVolumeFromVolume D3DXMatrixAffineTransformation D3DXMatrixAffineTransformation2D D3DXMatrixDecompose D3DXMatrixDeterminant D3DXMatrixInverse D3DXMatrixLookAtLH D3DXMatrixLookAtRH D3DXMatrixMultiply D3DXMatrixMultiplyTranspose D3DXMatrixOrthoLH D3DXMatrixOrthoOffCenterLH D3DXMatrixOrthoOffCenterRH D3DXMatrixOrthoRH D3DXMatrixPerspectiveFovLH D3DXMatrixPerspectiveFovRH D3DXMatrixPerspectiveLH D3DXMatrixPerspectiveOffCenterLH D3DXMatrixPerspectiveOffCenterRH D3DXMatrixPerspectiveRH D3DXMatrixReflect D3DXMatrixRotationAxis D3DXMatrixRotationQuaternion D3DXMatrixRotationX D3DXMatrixRotationY D3DXMatrixRotationYawPitchRoll D3DXMatrixRotationZ D3DXMatrixScaling D3DXMatrixShadow D3DXMatrixTransformation D3DXMatrixTransformation2D D3DXMatrixTranslation D3DXMatrixTranspose D3DXOptimizeFaces D3DXOptimizeVertices D3DXPlaneFromPointNormal D3DXPlaneFromPoints D3DXPlaneIntersectLine D3DXPlaneNormalize D3DXPlaneTransform D3DXPlaneTransformArray D3DXQuaternionBaryCentric D3DXQuaternionExp D3DXQuaternionInverse D3DXQuaternionLn D3DXQuaternionMultiply D3DXQuaternionNormalize D3DXQuaternionRotationAxis D3DXQuaternionRotationMatrix D3DXQuaternionRotationYawPitchRoll D3DXQuaternionSlerp D3DXQuaternionSquad D3DXQuaternionSquadSetup D3DXQuaternionToAxisAngle D3DXRectPatchSize D3DXSHAdd D3DXSHDot D3DXSHEvalConeLight D3DXSHEvalDirection D3DXSHEvalDirectionalLight D3DXSHEvalHemisphereLight D3DXSHEvalSphericalLight D3DXSHPRTCompSplitMeshSC D3DXSHPRTCompSuperCluster D3DXSHProjectCubeMap D3DXSHRotate D3DXSHRotateZ D3DXSHScale D3DXSaveMeshHierarchyToFileA D3DXSaveMeshHierarchyToFileW D3DXSaveMeshToXA D3DXSaveMeshToXW D3DXSavePRTBufferToFileA D3DXSavePRTBufferToFileW D3DXSavePRTCompBufferToFileA D3DXSavePRTCompBufferToFileW D3DXSaveSurfaceToFileA D3DXSaveSurfaceToFileInMemory D3DXSaveSurfaceToFileW D3DXSaveTextureToFileA D3DXSaveTextureToFileInMemory D3DXSaveTextureToFileW D3DXSaveVolumeToFileA D3DXSaveVolumeToFileInMemory D3DXSaveVolumeToFileW D3DXSimplifyMesh D3DXSphereBoundProbe D3DXSplitMesh D3DXTessellateNPatches D3DXTessellateRectPatch D3DXTessellateTriPatch D3DXTriPatchSize D3DXUVAtlasCreate D3DXUVAtlasPack D3DXUVAtlasPartition D3DXValidMesh D3DXValidPatchMesh D3DXVec2BaryCentric D3DXVec2CatmullRom D3DXVec2Hermite D3DXVec2Normalize D3DXVec2Transform D3DXVec2TransformArray D3DXVec2TransformCoord D3DXVec2TransformCoordArray D3DXVec2TransformNormal D3DXVec2TransformNormalArray D3DXVec3BaryCentric D3DXVec3CatmullRom D3DXVec3Hermite D3DXVec3Normalize D3DXVec3Project D3DXVec3ProjectArray D3DXVec3Transform D3DXVec3TransformArray D3DXVec3TransformCoord D3DXVec3TransformCoordArray D3DXVec3TransformNormal D3DXVec3TransformNormalArray D3DXVec3Unproject D3DXVec3UnprojectArray D3DXVec4BaryCentric D3DXVec4CatmullRom D3DXVec4Cross D3DXVec4Hermite D3DXVec4Normalize D3DXVec4Transform D3DXVec4TransformArray D3DXWeldVertices

SAMP/SAMP.ide

SHA256 dd66aa822943526dffe0f80af88547615672c9bb6e9f3fcfde6d6f8b860f93f5
MD5 9fc8a6769f18d3daceabbbed8632c68e
SHA1 5aef67fcfe871e3828b4686553c9471cf9b72497
SHA512 17bad517167dd4fb1d70158dfe58015d2fa7760b3c005626d65a6b5280c29b3a92073ba856175b7e4b74cd2dea4e02b7b4ed83487163bbd2b0cbfda32b2190ee
SSDEEP 768:vYnhu2+hTAugR8SQHRcg7B3BOPxsmbPOfypzNEkuCm5UTsJE629iWnKjcGmjpEUB:ABNPxsMjzNwM6HkKEEUmfoqWtn
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

SAMP/SAMP.img

SHA256 7755badde82981616e6cdfe7f4be37ded413979f7c881e35ad63b758ca787d2f
MD5 c85eb523407583f602a2f48df572081f
SHA1 fba6b6ce9d6ec0743e8c4137c8808d3ad1bf9f8e
SHA512 ffa70dc3e102a56079247720006698d774a752822ec2da993a2d16d8a27c6b538eddf1c453ac257683d594e28aec5292b09683688be3f921939487fd885e4adc
SSDEEP 786432:lt+POUX4BBCLTmlfg5ehCDBsXOVVWdwN5nhdWvo0Qo5OCK7gsN:HUX4BBCLTme5SCDBsXOVVWdsnhdWvo0k
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

SAMP/SAMP.ipl

SHA256 a0c31a4593de2ffe6dc734eae06c3794dcec985f53a4e985f6b895789847a26d
MD5 f5fc70efa49b43fc48fc71e3c680b50e
SHA1 32d5cc60c1b56d62f0a4d5503ac1f60b1a1c97f1
SHA512 ebee62161e512339e91d224b540c0e316e374dc4b9b8243d28395a1a4da0ec69daf99a14b5bc65c92a725698fd033d464dea4831637f3fb98fcad3e63cea0f5f
MD5 SHA1 SHA512

NSIS installer

installer

SAMP/SAMPCOL.img

SHA256 aa6dabfb4b38e3b79949bbb3aa4f90c7e4fd3909feed37335b2d656e73089490
MD5 eb690e98b644fa584be6917d48ee6cbc
SHA1 cf5ec69bc0725c3b6b55c5934bfecac971060572
SHA512 e3a2892e2aede8dbc60ef0c76f9be854c54f5984bc3600ba050ce2f1c81be22e4e17817b83cc396e5ce2d004b074ef9343a9b85f30bb28dfc434def0a7c1fd01
SSDEEP 49152:FHL7Uy8oZ3bRaNg8GvPYH0EYLz+rxGg333hfLi:RMyNZLRay8GvPYH0EYLz+rxJdm
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

SAMP/blanktex.txd

SHA256 724eff1b323771153a172abb35fcf7fbfaa88af7bab906b51181a94e08ef2e67
MD5 00dc42d499f5ca6059e4683fd761f032
SHA1 901fd1c737e95f09c096826eb547849ca1873b85
SHA512 4186adf87d23275ef4dde005371b554ce8e1c6141f160033b549e48190e7e3c96d014ef5ed62a88298cad458c6799d0a0baf35b3a32dc34acade7eb3fa5b4772
SSDEEP 24:HSvqpPaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAc:HwW
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

SAMP/custom.img

SHA256 20de16a9abe3b2bf6f9fa415d855230a9c5487433b3c77037c2ee84d5f35df38
MD5 8fc7f2ec79402a952d5b896b710b3a41
SHA1 8c2dd82d07d41977946eb12225e017d08ff19d81
SHA512 803b6b2bc09782794cc2ba2929eefbc7a6304d7917f2fe8aabdf30882a05d6c8ef47fd0369782d6a0167f51e6371d372372362e8c10b73c274101b636b2a0aec
SSDEEP 96:Dp3y/CrKs/+qwbp3y/CrKs/+qf/M5k5Yk5x5x5x5x5x5e5b5w5k5q:t3y/CrPY3y/CrPf/qCYCfffffIV2Cq
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

SAMP/samaps.txd

SHA256 d7a10e2d6497865377f61061abc13c5b7d1c81f8471410c80191640e04948285
MD5 e0fdfd9fbe272baa9284e275fb426610
SHA1 d64ba932095df01aec31255147078d8820f500df
SHA512 81f1c09b649776c935559d420214e9543c1e7a9690a79de43a06df03af6dd54151755e010ea9d06a33058ab5743b30a27816d35f6729657439c6251ee19f1122
SSDEEP 12288:RVghsoZfX3GnUKMiFnGWOKPzP0Intv+LecSVNjIaS4MzB8wdqhPmbxE1fJ:7UZuiikWOKRtGLecqIntB8wFsR
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

SAMPUninstall.exe

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 d00f8bf2eaa1994b0064d7b14fc987b0aab9b3c440a4177257ee2d3217fe6d3b
MD5 bffa504cd63305418858b150faa8f408
SHA1 86886fd2378aa33935cf684f056454859713aed4
SHA512 6b8958a4ccffce02ba8e4390f66121a02116e2b2ef9c4baa2eea62b8acfe380d0c0dd5e773f83b7062467a34019612d3f8a531e1a4ffcefb769de964cbf02019
SSDEEP 1536:HLXB65939tY6HBg4sXJOgdLeAyN/dIM6su:HLk395hYXJOceAlMM
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12491

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/InstallOptions.dll

IMPHASH b1cd0d78f652ce5fc63f0879371af012
SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
MD5 325b008aec81e5aaa57096f05d4212b5
SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetCurrentDirectoryA GetCurrentDirectoryA MultiByteToWideChar GetPrivateProfileIntA GlobalLock GetModuleHandleA lstrcmpiA GetPrivateProfileStringA lstrcatA lstrcpynA WritePrivateProfileStringA lstrlenA lstrcpyA GlobalFree GlobalUnlock GlobalAlloc

user32

MapWindowPoints GetDlgCtrlID CloseClipboard GetClipboardData OpenClipboard PtInRect SetWindowRgn LoadIconA LoadImageA SetWindowLongA CreateWindowExA MapDialogRect SetWindowPos GetWindowRect CreateDialogParamA ShowWindow EnableMenuItem GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA LoadCursorA SetCursor DrawTextA GetWindowLongA DrawFocusRect CallWindowProcA PostMessageA MessageBoxA CharNextA wsprintfA GetWindowTextA SetWindowTextA SendMessageA GetClientRect

gdi32

SetTextColor CreateCompatibleDC GetObjectA GetDIBits CreateRectRgn CombineRgn DeleteObject SelectObject

shell32

SHBrowseForFolderA SHGetDesktopFolder SHGetPathFromIDListA ShellExecuteA

comdlg32

GetOpenFileNameA GetSaveFileNameA CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bass.dll

SHA256 3f04620d6627abe5c3b4747faf26603ab7a006c81b2021ab4689bdd7033bb4cd
MD5 8f5b9b73d33e8c99202b5058cb6dce51
SHA1 102699b1dc7e03c9041115f5e3b178f1dab1a27a
SHA512 89d830d1ed0c55882d1cc77d1a87b193cbffd8b96010d727fad6cd2668ee94c7acfb565ddb1be5b55c8caf9791947b62e8d87fa4896d98124ca2caae0053c9df
SSDEEP 1536:fq5gk9BPaPT8yWZv6UXq+BpSAaSv5vfwKaGorBWHiauTXJSJ:fq5r9BCPT8yZfKahrsiauTZo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

344118

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

BASS_Apply3D BASS_ChannelBytes2Seconds BASS_ChannelFlags BASS_ChannelGet3DAttributes BASS_ChannelGet3DPosition BASS_ChannelGetAttribute BASS_ChannelGetData BASS_ChannelGetDevice BASS_ChannelGetInfo BASS_ChannelGetLength BASS_ChannelGetLevel BASS_ChannelGetPosition BASS_ChannelGetTags BASS_ChannelIsActive BASS_ChannelIsSliding BASS_ChannelLock BASS_ChannelPause BASS_ChannelPlay BASS_ChannelRemoveDSP BASS_ChannelRemoveFX BASS_ChannelRemoveLink BASS_ChannelRemoveSync BASS_ChannelSeconds2Bytes BASS_ChannelSet3DAttributes BASS_ChannelSet3DPosition BASS_ChannelSetAttribute BASS_ChannelSetDSP BASS_ChannelSetDevice BASS_ChannelSetFX BASS_ChannelSetLink BASS_ChannelSetPosition BASS_ChannelSetSync BASS_ChannelSlideAttribute BASS_ChannelStop BASS_ChannelUpdate BASS_ErrorGetCode BASS_FXGetParameters BASS_FXReset BASS_FXSetParameters BASS_Free BASS_Get3DFactors BASS_Get3DPosition BASS_GetCPU BASS_GetConfig BASS_GetConfigPtr BASS_GetDSoundObject BASS_GetDevice BASS_GetDeviceInfo BASS_GetEAXParameters BASS_GetInfo BASS_GetVersion BASS_GetVolume BASS_Init BASS_MusicFree BASS_MusicLoad BASS_Pause BASS_PluginFree BASS_PluginGetInfo BASS_PluginLoad BASS_RecordFree BASS_RecordGetDevice BASS_RecordGetDeviceInfo BASS_RecordGetInfo BASS_RecordGetInput BASS_RecordGetInputName BASS_RecordInit BASS_RecordSetDevice BASS_RecordSetInput BASS_RecordStart BASS_SampleCreate BASS_SampleFree BASS_SampleGetChannel BASS_SampleGetChannels BASS_SampleGetData BASS_SampleGetInfo BASS_SampleLoad BASS_SampleSetData BASS_SampleSetInfo BASS_SampleStop BASS_Set3DFactors BASS_Set3DPosition BASS_SetConfig BASS_SetConfigPtr BASS_SetDevice BASS_SetEAXParameters BASS_SetVolume BASS_Start BASS_Stop BASS_StreamCreate BASS_StreamCreateFile BASS_StreamCreateFileUser BASS_StreamCreateURL BASS_StreamFree BASS_StreamGetFilePosition BASS_StreamPutData BASS_StreamPutFileData BASS_Update _

gtaweap3.ttf

SHA256 086dc4351bf1056d80a73168440ffe4261831bde992e5134902b9bae017dcbe9
MD5 59cbae9fd42a9a4eea90af7f81e5e734
SHA1 1fffd7004263d6bc2efc055281a083905f042a18
SHA512 9fe00d53b786e2e89d57f17fe76c9fc695660b6a784c7684b61a9435a9e699718e7e3ff7c2390e56bb51d4ee9d9592d4e534d1f450ffe4ce99ce4af6c9382253
SSDEEP 768:5H+ZzprTc9NJNTlMl8RH1kYzpJCfUbern92+AsmYS8WqtfD/jgfn2LSTxBqswgEo:5H+7C03L/UmSlBRArt8hQs
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

mouse.png

SHA256 2bbcaf4629f9077bcdf847f912cbe76d20c4428d710bcf76211ead1dccbd08f1
MD5 337ddcbe53be7dd8032fb8f6fe1b607b
SHA1 9d5ac6f6c4710738699d437938524641d3fcfa93
SHA512 40691856934ca4f033900d7282e260e6c534e3308d5e8d9b865653eed1605674e7e2783c861be794f1ea8e057bce1d25b22722b8403ec0302ae68fccdf54dca0
MD5 SHA1 SHA512

NSIS installer

installer

rcon.exe

IMPHASH a33688df8c13c8e8dbfd5cbea749b165
SHA256 19f0d6d844f6f14856e3ea88853202b6310edc4726eb0c803710b67f641e596f
MD5 3f4821cda1de6d7d10654e5537b4df6e
SHA1 ac682119ac4dc51d8db82fd4a6a0e1f108b74a94
SHA512 0f7f5da6d38a7ad920959363d6edcba3ec9b8645b7ccade0c4590817fbbd7a0415ba492a164c56845a57df643e4d58d83f6f537cc74d55161001704b017a9f7c
SSDEEP 384:ZYblkmoSCITDXSBkCmleSWLJETJBsE9yzd9LzSjvEgKEyokl7V:Obpo8DXv34JE9W0s9LejvRKRoe7
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

6077

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

samp-license.txt

SHA256 52dcd5b95bf24e3cb4b979a773e92dc586531c5a001196e81da7ff2996f81125
MD5 133e459c191bb81626fea8b403674196
SHA1 7d312967f5bfe9a2a97ece01ce4b2ed842b87245
SHA512 e58dd80623bfb1097afe06ee20fb2221488afe533b411c7581d4743205ed27d01942429bd72d4ed4c4a1b046b2f9d389afdb6fb5cbc28375eb8df7695db7f913
MD5 SHA1 SHA512

NSIS installer

installer

samp.dll

IMPHASH 7a3750efd87d6c53d84d819664c4c527
SHA256 b72b5dbe725f81864ca3f78bc7063bda56cc05fc7188af822fa7a754432553a2
MD5 5ba5f0be7af99dfd03fb39e88a970a2b
SHA1 cfee81e92701580ff63e62dbb38d4035a05cfbab
SHA512 a7459e33509f33eb21268d4bd70604953cb5b71555ef217286f848794e71980e0b5541c87d1d935d999fddd79e83e99893d97e9a90b8b570c5daa8fde34288a2
SSDEEP 24576:hZgAAx6bqT+6QbhmCkh+LPQ5M+5BxX1s/elplhAEZOQ+uMPGP:JjuaP9PQ5MarKWJhsz6P
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

834704

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\sampcvs037R4\sampcvs\main\saco\Release\samp.pdb

d3dx9_25

D3DXLoadSurfaceFromFileA D3DXQuaternionNormalize D3DXQuaternionSlerp D3DXMatrixLookAtRH D3DXCreateEffectFromResourceA D3DXCreateEffectFromFileA D3DXCreateFontIndirectA D3DXCreateVolumeTextureFromResourceExA D3DXCreateVolumeTextureFromFileExA D3DXCreateCubeTextureFromResourceExA D3DXCreateCubeTextureFromFileExA D3DXCreateTextureFromResourceExA D3DXMatrixRotationYawPitchRoll D3DXVec3TransformNormal D3DXMatrixRotationX D3DXQuaternionRotationMatrix D3DXVec3TransformCoord D3DXVec3Normalize D3DXMatrixPerspectiveFovLH D3DXMatrixLookAtLH D3DXMatrixTranslation D3DXMatrixRotationQuaternion D3DXQuaternionMultiply D3DXFileCreate D3DXLoadMeshFromXof D3DXLoadMeshFromXA D3DXGetImageInfoFromFileA D3DXCreateCubeTextureFromFileA D3DXCreateVolumeTextureFromFileA D3DXCreateTextureFromFileA D3DXGetDeclLength D3DXComputeNormals D3DXMatrixScaling D3DXCheckVersion D3DXSaveSurfaceToFileA D3DXMatrixInverse D3DXMatrixMultiply D3DXCreateLine D3DXCreateTextureFromFileInMemory D3DXCreateTextureFromFileExA D3DXLoadSurfaceFromSurface D3DXVec3Project D3DXCreateFontA D3DXCreateSprite D3DXCreateTexture D3DXCreateRenderToSurface

user32

CheckDlgButton LoadIconA GetCaretBlinkTime GetKeyboardLayoutList GetFocus PostMessageW GetKeyState SetRectEmpty PeekMessageW GetMessageW SendMessageW GetKeyboardLayout keybd_event GetClipboardData OpenClipboard EmptyClipboard SetClipboardData CloseClipboard InflateRect PeekMessageA TranslateAcceleratorA TranslateMessage DispatchMessageA DestroyAcceleratorTable GetWindowTextA RegisterClassA SetRect CreateWindowExA DestroyMenu UnregisterClassA PostQuitMessage DefWindowProcW SetWindowLongW IsDlgButtonChecked GetMenu SetWindowPlacement AdjustWindowRect IsZoomed SetWindowPos DialogBoxIndirectParamA EnumDisplaySettingsA CallNextHookEx SendMessageA GetIconInfo GetDC ReleaseDC OffsetRect IntersectRect IsIconic GetWindowPlacement GetWindowRect MessageBoxA wsprintfA GetAsyncKeyState GetClientRect DestroyWindow ShowWindow ShowCursor SetCursor LoadCursorA SetFocus SetForegroundWindow EndDialog SetDlgItemTextA EnableWindow GetDlgItem DialogBoxParamA SetMenu GetDesktopWindow CallWindowProcA SetWindowLongA GetWindowLongA IsWindowUnicode SetWindowTextA SetClassLongA GetClassLongA GetForegroundWindow SystemParametersInfoA PtInRect GetCursorPos SetCursorPos ClientToScreen IsWindowVisible GetSystemMetrics SetCapture ClipCursor ReleaseCapture ScreenToClient

comctl32

ord17

advapi32

RegSetValueExA RegOpenKeyExA RegQueryValueExA RegCloseKey

kernel32

WriteFile VirtualQuery InterlockedExchange IsBadWritePtr HeapCreate HeapDestroy FatalAppExitA TlsGetValue TlsSetValue TlsFree GetCurrentThread TlsAlloc GetDriveTypeA GetSystemTimeAsFileTime GetDateFormatA GetTimeFormatA GetCurrentThreadId FileTimeToLocalFileTime FileTimeToSystemTime CreateThread ResumeThread TerminateProcess RaiseException HeapReAlloc RtlUnwind FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW IsBadCodePtr GetACP GetOEMCP GetCPInfo GetStringTypeA GetStringTypeW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale IsValidCodePage SetStdHandle FlushFileBuffers CreateFileA ReadFile SetHandleCount GetStdHandle GetFileType SetCurrentDirectoryA GetStartupInfoA SetFilePointer HeapSize LCMapStringA LCMapStringW GetSystemInfo SetUnhandledExceptionFilter SetProcessAffinityMask GetCurrentDirectoryA ExitThread VirtualFree VirtualAlloc GlobalMemoryStatusEx VirtualProtect ExitProcess lstrcmpA lstrcmpiA GetVersionExW IsDBCSLeadByteEx GetLocaleInfoW CompareStringA GetProcessHeap HeapAlloc HeapFree GlobalAlloc GlobalLock GlobalUnlock GlobalFree lstrlenW GetLastError GetSystemDirectoryA GetCommandLineA GetVersionExA lstrcpynA GetModuleFileNameA LoadLibraryA FreeLibrary WideCharToMultiByte GetFullPathNameA GetFileAttributesA lstrcpyA lstrlenA OutputDebugStringA lstrcatA MultiByteToWideChar GetModuleHandleA GetProcAddress FlushInstructionCache SetEvent SetLastError GetCurrentProcess GetTimeZoneInformation UnhandledExceptionFilter SetConsoleCtrlHandler SetEndOfFile CompareStringW SetEnvironmentVariableA IsBadReadPtr GetTickCount CreateDirectoryA DeleteFileA FindClose FindNextFileA FindFirstFileA MoveFileA Sleep QueryPerformanceCounter QueryPerformanceFrequency CloseHandle InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection Module32Next Module32First CreateToolhelp32Snapshot GetCurrentProcessId

gdi32

GetDCOrgEx GetClipBox DeleteDC DeleteObject GetDIBits SelectObject GetObjectA GetStockObject AddFontResourceA CreateCompatibleDC

wsock32

htonl listen select __WSAFDIsSet accept getsockname gethostname sendto WSAGetLastError recvfrom ntohs setsockopt inet_ntoa bind ioctlsocket inet_addr gethostbyname htons socket connect recv send closesocket WSACleanup WSAStartup

winmm

timeGetTime timeBeginPeriod

psapi

GetProcessMemoryInfo

bass

BASS_SetEAXParameters BASS_SetConfig BASS_SetConfigPtr BASS_Init BASS_Free BASS_StreamFree BASS_ChannelGetTags BASS_StreamGetFilePosition BASS_ChannelSetSync BASS_ChannelPlay BASS_StreamCreateURL BASS_ChannelStop BASS_Apply3D BASS_ChannelSet3DPosition BASS_ChannelSet3DAttributes BASS_Set3DPosition BASS_Set3DFactors

shell32

ExtractIconA

samp.exe

SHA256 910227f4b451e3ecd1e0c8565fb2951e1f34164c2f441c6f384ee343b414a1b4
MD5 724188afa06472872e393c9318027f04
SHA1 2f1794654f9753e1496c1177fc841e807e465f25
SHA512 51cc952fb847bca30fb817c406d23383cb13f7e8eecc74d7d22f7f43dd88e6ff25b9fe5cee4f471dbf839c539e20f279316e57d209ce894f0002849a81daa8e1
SSDEEP 6144:gljoxXwq08PvxVYBaKWPMA/gP22EXoWqOZDS8xU7+4hI4HmbBO3J4TL2:gl8S8RIWapAoWqOZDSV7JI4GbBO5Y6
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

1180272

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

out.upx

SHA256 621a987205317055f389b8257f890cff28b03d1b16cff487df3655f00a9b7b93
MD5 6a4b9cd0bd216244fe5dc8f2f6f39cc1
SHA1 0ae02de59cf3225f058b90f302e39fa600eeaf49
SHA512 4ef8d31a7d63b8583c6daf781b6dcf766503acbd02bd90f16fb6d751c33e2f6e518b7ab4ebb7849281e60305c4f31229e53d78ebc5ec2711364fd5641dd86874
SSDEEP 24576:WQH9Z99S7mj1djW+oTITUG1DM48ek6Fbmtjv50:WQHHpBU+UITf4f
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

961496

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

935KB

Virtual Size

935KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

63B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

63KB

Virtual Size

62KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

93KB

Virtual Size

93KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

samp.saa

SHA256 596895c61a70f558a9ad6b9b44cb5c9ac4b374e95ee2266ac9c88585898f8ae7
MD5 833af65bc94eea6f8503900ef597ad51
SHA1 5361378143beee5086935f6eaac5af2004c623a5
SHA512 c0edeefc7162a9a6b937eb51f363c62a2577c6b16714109e069ceafafff1eeaa6345e348575b19b696bba42db5340eb7d5fef19021c6376788d779ba88f2a64b
SSDEEP 49152:9bWdoOG1UO+iR+bl3aZKadSLclLHqT1gYR+ilVAtGMdEjlXZPK6TQ1TKMi+:9+9YUO9+bl3a9wLmw1g4P7AtL8JnEZd
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

samp_debug.exe

IMPHASH 1f46687026797bfcd822668bade80099
SHA256 f64d11680442cea5940614177b5ecff866e1e45c07a95cd5564327a94e8101d3
MD5 2c00c60a5511c3a41a70296fd1879067
SHA1 5a307b11eedf77749de2601318be6c2fff1fde12
SHA512 30cdca5e5b9ae89e9ac6d12a361fce3b050e947cf0615ce80e214405bfe82aced2addac759640c39e9772d78f5287532eba9a467418ccb94487e11e41dd611da
SSDEEP 1536:KjKmF6kc7OTzS1s2WlZ8hUg54XgH5BXidKdz4koPxCmIp7Vi13kZa:C6k7shWlZ8hUw55gCRoPx1IVi13I
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

9836

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RtlUnwind GetStartupInfoA GetCommandLineA ExitProcess TerminateProcess HeapFree HeapAlloc RaiseException HeapReAlloc HeapSize GetACP UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate VirtualFree VirtualAlloc IsBadWritePtr SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr SetStdHandle GetProfileStringA FlushFileBuffers SetFilePointer WriteFile GetCurrentProcess SetErrorMode GetOEMCP GetCPInfo SizeofResource GetProcessVersion GetLastError WritePrivateProfileStringA GlobalFlags lstrcpynA TlsGetValue LocalReAlloc TlsSetValue EnterCriticalSection GlobalReAlloc LeaveCriticalSection TlsFree GlobalHandle DeleteCriticalSection TlsAlloc InitializeCriticalSection LocalAlloc MulDiv SetLastError LocalFree MultiByteToWideChar WideCharToMultiByte lstrlenA InterlockedIncrement InterlockedDecrement LoadLibraryA FreeLibrary GetVersion lstrcatA GlobalGetAtomNameA GetModuleFileNameA GlobalAddAtomA GlobalFindAtomA lstrcpyA GlobalUnlock GlobalFree LockResource FindResourceA LoadResource GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA lstrcmpiA GetCurrentThread GetCurrentThreadId SuspendThread GetThreadContext FlushInstructionCache SetThreadContext CreateProcessA ResumeThread GetModuleHandleA GetProcAddress VirtualProtectEx WriteProcessMemory CloseHandle GetEnvironmentStrings

user32

ScreenToClient AdjustWindowRectEx SetFocus GetSysColor MapWindowPoints SendDlgItemMessageA UpdateWindow IsDialogMessageA SetWindowTextA ShowWindow ClientToScreen GetDC ReleaseDC GetWindowDC BeginPaint EndPaint TabbedTextOutA DrawTextA GrayStringA LoadCursorA GetClassNameA PtInRect GetSysColorBrush LoadStringA DestroyMenu InvalidateRect GetTopWindow GetCapture WinHelpA wsprintfA RegisterClassA GetMenu GetMenuItemCount GetSubMenu GetMenuItemID GetWindowTextLengthA GetWindowTextA GetDlgCtrlID CreateWindowExA GetClassLongA SetPropA UnhookWindowsHookEx GetPropA CallWindowProcA RemovePropA DefWindowProcA GetMessageTime GetMessagePos SetForegroundWindow GetWindow SetWindowLongA SetWindowPos RegisterWindowMessageA OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect EndDialog SetActiveWindow IsWindow CreateDialogIndirectParamA DestroyWindow GetDlgItem GetMenuCheckMarkDimensions LoadBitmapA GetMenuState ModifyMenuA SetMenuItemBitmaps CheckMenuItem EnableMenuItem GetFocus GetNextDlgTabItem GetMessageA TranslateMessage DispatchMessageA GetActiveWindow GetKeyState CallNextHookEx ValidateRect IsWindowVisible PeekMessageA GetCursorPos SetWindowsHookExA MessageBoxA LoadIconA SendMessageA DrawIcon UnregisterClassA HideCaret GetParent GetLastActivePopup IsWindowEnabled GetWindowLongA SetCursor PostQuitMessage PostMessageA EnableWindow CopyRect GetClassInfoA IsIconic GetSystemMetrics GetClientRect IsWindowUnicode CharNextA InflateRect DefDlgProcA DrawFocusRect ExcludeUpdateRgn ShowCaret GetForegroundWindow

gdi32

GetStockObject SetBkMode SetMapMode SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx IntersectClipRect SelectObject DeleteObject GetDeviceCaps CreateSolidBrush PtVisible RectVisible TextOutA ExtTextOutA Escape RestoreDC SaveDC DeleteDC GetObjectA SetBkColor SetTextColor GetClipBox CreateDIBitmap PatBlt GetTextExtentPointA BitBlt CreateCompatibleDC CreateBitmap

winspool.drv

DocumentPropertiesA ClosePrinter OpenPrinterA

advapi32

RegSetValueExA RegCloseKey RegOpenKeyExA RegCreateKeyExA

comctl32

ord17

sampaux3.ttf

SHA256 3adfe84498e8951e61ece57ad08de21b95d162697517291564ae6ef3a8790c1b
MD5 6a03a32076e76f6c1720cad6c6ea6915
SHA1 d6f0c8b5f29181e4915ed3cb1bb04b55117bab14
SHA512 08336f32ac60f39bc6d44b1447fdba535692077cec8f64d704ad62e043f80b9bb3538b33800be249702ef912c21f5bea0008cbc118516b028ad4f34f4307fb4f
SSDEEP 192:kdh4M/9c6XlpEC0rxcg4vK7xeqWrJ6d1jswvYLDW0:C4H6XoCWSqKJwjswgvW0
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

sampgui.png

SHA256 8bd41399b3ff22b7d497f3f31d39caa67a10e6b91d47bdfbe35e963894c22c4d
MD5 1423c18dfa2064d967b397227960b93d
SHA1 3e1e1c6ffbfb092631fdb955e931da92a13d2589
SHA512 0d7548458ac6ac5f10dd6d142f18d785bf2e59e421609b11c2af151563444a5a0e6afe590617f5870a80d4a6c235a47dd0ce8c87f5ce25082327d86a7157389a
SSDEEP 384:8jcKY7lyTyhLW9W+A1sbz+aoXETKcuO9kdt+4eJFp:8gDlyTSLHyOXncnudtcZ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Sharing

General

Malware Config

Signatures

File Explorer

sa-mp-0.3.7-R5-1-install.exe

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

$PLUGINSDIR/InstallOptions.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

$PLUGINSDIR/ioSpecial.ini

$PLUGINSDIR/modern-wizard.bmp

$SYSDIR/d3dx9_25.dll

PE Signature issue

kernel32

msvcrt

gdi32

advapi32

generic

SAMP/SAMP.ide

SAMP/SAMP.img

SAMP/SAMP.ipl

SAMP/SAMPCOL.img

SAMP/blanktex.txd

SAMP/custom.img

SAMP/samaps.txd

SAMPUninstall.exe

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

$PLUGINSDIR/InstallOptions.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

$PLUGINSDIR/ioSpecial.ini

$PLUGINSDIR/modern-wizard.bmp

bass.dll

generic

gtaweap3.ttf

mouse.png

rcon.exe

kernel32

wsock32

generic

samp-license.txt

samp.dll

d3dx9_25

user32

comctl32

advapi32

kernel32

gdi32

wsock32

winmm

psapi

bass

shell32