xv2patcher_4[.]23[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

xv2patcher_4.23.rar
Size

974KB
MD5

073b500b0ba04ed8764002b385f8b8f9
SHA1

c726ce537588005538fadfa845111099299c30e3
SHA256

2f295be1887e3bc4726b765766d9e4cac98028e930fbbb4ca3bc3631ada7f490
SHA512

2908e8a2905b207fc77e9cbd2c85f11651da8cfe69f54d75376544a3b3bc9ec5ba2c8d2f32077fe0bc6be1606dacc4e43f3473f7fe28837abb709cf599271a50
SSDEEP

24576:DvGOkHHz1g6+UDYcTWpQ5z8uUH97xeJifU/PcpZp:DvGOITajc5AZ94AKP4Zp

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/-- alternative dll --/dinput8.dll
unpack001/bin/xinput1_3.dll

Files

xv2patcher_4.23.rar
.rar
-- alternative dll --/ROSES ARE RED, VIOLETS ARE BLUE AND THIS TXT IS FOR YOU!.txt
-- alternative dll --/dinput8.dll
.dll regsvr32 windows:4 windows x64 arch:x64

039992f89d374b82594553135a037fef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

kernel32

AddVectoredExceptionHandler
CloseHandle
CreateMutexA
CreateProcessA
CreateThread
CreateToolhelp32Snapshot
DeleteCriticalSection
EnterCriticalSection
FindClose
FindFirstFileExA
FindNextFileA
FlushInstructionCache
FormatMessageA
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetExitCodeProcess
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleW
GetProcAddress
GetStartupInfoW
GetSystemDirectoryA
GetSystemInfo
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathA
GetThreadContext
GetThreadId
GetTickCount
GlobalAlloc
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
InitializeConditionVariable
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalFree
MultiByteToWideChar
OpenThread
OutputDebugStringA
RaiseException
ReleaseMutex
ResumeThread
RtlCaptureContext
RtlCaptureStackBackTrace
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetLastError
SetThreadContext
Sleep
SleepConditionVariableCS
SuspendThread
Thread32First
Thread32Next
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_assert
_errno
_exit
_filelengthi64
_fileno
_initterm
_lock
_mkdir
_rmdir
_read
_stat64
_stricmp
_strlwr
_strtoi64
_strtoui64
_time64
_unlock
_wfopen
_wgetenv
_wmkdir
_wstat64
abort
atof
atoi
calloc
exit
fclose
ferror
fflush
fgetpos
fopen
fputc
fputs
fread
free
fsetpos
fseek
ftell
fwrite
getc
getenv
isalnum
isalpha
isspace
iswctype
isxdigit
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
rand
realloc
remove
rename
setlocale
srand
strchr
strcmp
strcoll
strcpy
strerror
strftime
strlen
strncmp
strstr
strtol
strtoul
strxfrm
system
tolower
towlower
towupper
ungetc
vfprintf
wcscoll
wcsftime
wcslen
wcsxfrm

shell32

SHFileOperationA

user32

MessageBoxA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Exports

Exports

AISpecialPatched
AS3SendFlagSetup
AS3SendFlag_Hook
AS3SendIntSetup
AS3SendInt_Hook
AS3SendStringSetup
AS3SendString_Hook
AddResistancePointsPatched
AnyDualSkillPatch
ApplyBcsHairColorPatchTransform
ApplyBcsHairColorPatchUntransform
ApplyCacMatsPatched
ApplyCacMats_Setup
ApplyConditionalRemoveHairAccessories
AurBpeCase2
AurBpeFlag1Patch
AurToBpePatch
BattleTimer
Behaviour10FuncPatched
Behaviour10Setup
Behaviour13
ChangePartsetPatched
CharaSetup
ChaselCtorHooked
ChaselMainPatch
CpkGetFileInfo_Patched
CpkGetFileInfo_Setup
CusAuraMapPatch
CusAuraPatchBH11
CusAuraPatchBH64
CusAuraPatchInt2
CusAuraPatchInt3
CusAuraPatchTeleport
DirectInput8Create
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
DprintfPatched
DprintfPatched2
DummyMobUntransformForMobControl
ExternalAS3CallbackPatched
Function138
Function73
GetEventCastComFromIndexPatched
GetItemInfoPatched
GetMobControlPatched
GetStageLimit
GetStageNamePatched
GetStatueTypePatched
HookMovieLoad
HookedMainSystem_Ctor
HookedMainSystem_Dtor
IncreaseChaselMemory
IncreaseChaselSlotsArray
IncreaseChaselSlotsArray2
IncreaseCoreMainSystemMemory
IsCellMaxReplacement
IsDebuggingStages
IsDemoEventHappeningPatched
IsFreezerEventEndingPatched
IsOzaruReplacement
LoadToc
LoadToc_Setup
MobDtorPatched
ModifyArrayOffset4
ModifyGDrawSetting2A
OnBH10UntransformCallLocated
OnBattleCreateCharPatched
OnBattleInterfaceSingletonLocated
OnCoreMainSystemLocated_Stages
OnDialogueIsPlayerLocated
OnE74Located
OnGameDataSingleton_Located
OnGameLanguageLocated
OnGameLanguageLocated_Item
OnGetSelectedBeforeObject_Located
OnHasStageBeenSelectedBefore_Located
OnLocatePortraitEnemyForEmbSwitchTable
OnLocateToggleBattleUIPatch
OnLocateToggleBattleUIPatch2
OnModHlqPatchLocated
OnPatchLobbyScriptIsOpenedEventLocated
OnPatchOpenQuestCallbackLocated
OnPopupPauseBattleRALocated
OnQmlIdToEventCastLocated
OnQuestFunctionLocated
OnQuestManagerSingletonLocated
OnSetIsFsEventHappeningLocated
OnStringCopyLocated
OnUnknownItemAddressLocated
OverrideFarClipT1
OverrideFarClipT2
PatchGameVersionString
PatchReceiveTypeCharaSelected
PatchReceiveTypeUnlockVar
PatchStageDef1BFnmcOff8
PatchStageDef1BFnmsOff8
PatchStageDef1BottomOff8
PatchStageDef1CHR
PatchStageDef1CHROff10
PatchStageDef1CHROff8
PatchStageDef1Main
PatchStageDef1Off8
PatchStageDef1Off8_1
PatchStageDef1Off8_2
PatchStageDef1Off8_Absolute
PatchStageDef1Top
PatchStageDef2Main
PatchStageDef2MainGBB
PatchStageDef2Top
PatchStageDef2TopGBB
PatchStageF6
PatchStageMusicMain
PatchStageSoundsMain
PatchStageSsidToIdx
PatchStageSsidToIdxMain
PatchUntransform
PopupPauseCtorHooked
PreBakeSetup
QedCondHooked
ResultPortraits2Patched
ResultPortraits2Setup
SetBodyShape_Patched
SetBodyShape_Setup
SetupAIExtend
SetupAISpecial
SetupAddResistancePoints
SetupAlliesPatched
SetupAutoGenPortraitDumper
SetupBattleCoreMainSystem_singleton
SetupChangeBody
SetupChangePartset
SetupChaselCtor
SetupCheckUnlockFunction
SetupExternalAS3Callback
SetupFsEventOffline
SetupFunction138
SetupFunction73
SetupGetEventCastComFromIndex
SetupGetItemInfo
SetupGetMobControl
SetupGetResistancePoints
SetupGetStageName
SetupGetStatueType
SetupIncreaseChaselSlotsArray
SetupIncreaseChaselSlotsArray2
SetupIsDemoEventHappening
SetupIsFreezerEventEnding
SetupLogMovieFiles
SetupMainSystem_Ctor
SetupMainSystem_Dtor
SetupMobDtor
SetupMobUntransformForMobControl
SetupPatchGameVersionString
SetupPopupPauseCtor
SetupQedCond
SetupSetFarClipT1
SetupSetFarClipT2
SetupSetupAllies
SetupSkillCommand
SetupStageEve
SetupStringAppend
SetupUntransform
SetupUsesMobControl
ShowTheRedRing
SkillCommandPatched
StageEveReimplemented
StageGtClearExtraReimplemented
StageGtClearReimplemented
StageGtDefaultReimplemented
StageGtFindGateByNameReimplemented
StageGtFindGateReimplemented
StageGtGetExtraByNameReimplemented
StageGtGetExtraByTargetReimplemented
StageGtGetGateReimplemented
StageGtGetTargetReimplemented
StageGtSetExtraByNameReimplemented
StageGtSetExtraByTargetReimplemented
StageGtSetReimplemented
StageGtSetUnk10ByTargetReimplemented
TtcFilesAlias
UnlockCharaMods
UseAutobattlePortrait
UsesMobControlPatched
VCControl_Ctor_Patched
XV1CpkExists

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 460KB - Virtual size: 459KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 288KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
XV2PATCHER/Epatches/aiextend.xml
.xml
XV2PATCHER/Epatches/aura_limit_remove.xml
.xml
XV2PATCHER/Epatches/autogenportrait_dumper.xml
.xml
XV2PATCHER/Epatches/bacbcm_protection.xml
.xml
XV2PATCHER/Epatches/battle_timer.xml
.xml
XV2PATCHER/Epatches/debug.xml
.xml
XV2PATCHER/Epatches/freezer_event_offline.xml
.xml
XV2PATCHER/Epatches/iggy.xml
.xml
XV2PATCHER/Epatches/jungle.xml
.xml
XV2PATCHER/Epatches/loose_files.xml
.xml
XV2PATCHER/Epatches/misc.xml
.xml
XV2PATCHER/Epatches/mob_control.xml
XV2PATCHER/Epatches/new_chara.xml
.xml
XV2PATCHER/Epatches/new_chara.xml.bak
.xml
XV2PATCHER/Epatches/new_stages.xml
.xml
XV2PATCHER/Epatches/prebaked_patches.xml
.xml
XV2PATCHER/Epatches/psc_destroy_limit.xml
.xml
XV2PATCHER/Epatches/pseudocacs.xml
.xml
XV2PATCHER/Epatches/quests.xml
.xml
XV2PATCHER/Epatches/ui.xml
.xml
XV2PATCHER/Epatches/unlock_chara.xml
.xml
XV2PATCHER/Epatches/unlock_stages.xml
.xml
XV2PATCHER/xv2patcher.ini
[Optional] XV2Patcher UI Extensions/data/ui/iggy/POPUP_PAUSE.iggy
[Optional] XV2Patcher UI Extensions/readme.txt
bin/xinput1_3.dll
.dll windows:4 windows x64 arch:x64

666b26c583f405236aa7047c57438929

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

kernel32

AddVectoredExceptionHandler
CloseHandle
CreateMutexA
CreateProcessA
CreateThread
CreateToolhelp32Snapshot
DeleteCriticalSection
EnterCriticalSection
FindClose
FindFirstFileExA
FindNextFileA
FlushInstructionCache
FormatMessageA
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetExitCodeProcess
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleW
GetProcAddress
GetStartupInfoW
GetSystemDirectoryA
GetSystemInfo
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathA
GetThreadContext
GetThreadId
GetTickCount
GlobalAlloc
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
InitializeConditionVariable
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalFree
MultiByteToWideChar
OpenThread
OutputDebugStringA
RaiseException
ReleaseMutex
ResumeThread
RtlCaptureContext
RtlCaptureStackBackTrace
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetLastError
SetThreadContext
Sleep
SleepConditionVariableCS
SuspendThread
Thread32First
Thread32Next
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_assert
_errno
_exit
_filelengthi64
_fileno
_initterm
_lock
_mkdir
_rmdir
_read
_stat64
_stricmp
_strlwr
_strtoi64
_strtoui64
_time64
_unlock
_wfopen
_wgetenv
_wmkdir
_wstat64
abort
atof
atoi
calloc
exit
fclose
ferror
fflush
fgetpos
fopen
fputc
fputs
fread
free
fsetpos
fseek
ftell
fwrite
getc
getenv
isalnum
isalpha
isspace
iswctype
isxdigit
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
rand
realloc
remove
rename
setlocale
srand
strchr
strcmp
strcoll
strcpy
strerror
strftime
strlen
strncmp
strncpy
strstr
strtol
strtoul
strxfrm
system
tolower
towlower
towupper
ungetc
vfprintf
wcscoll
wcsftime
wcslen
wcsxfrm

shell32

SHFileOperationA

user32

MessageBoxA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Exports

Exports

AISpecialPatched
AS3SendFlagSetup
AS3SendFlag_Hook
AS3SendIntSetup
AS3SendInt_Hook
AS3SendStringSetup
AS3SendString_Hook
AddResistancePointsPatched
AnyDualSkillPatch
ApplyBcsHairColorPatchTransform
ApplyBcsHairColorPatchUntransform
ApplyCacMatsPatched
ApplyCacMats_Setup
ApplyConditionalRemoveHairAccessories
AurBpeCase2
AurBpeFlag1Patch
AurToBpePatch
BattleTimer
Behaviour10FuncPatched
Behaviour10Setup
Behaviour13
ChangePartsetPatched
CharaSetup
ChaselCtorHooked
ChaselMainPatch
CpkGetFileInfo_Patched
CpkGetFileInfo_Setup
CusAuraMapPatch
CusAuraPatchBH11
CusAuraPatchBH64
CusAuraPatchInt2
CusAuraPatchInt3
CusAuraPatchTeleport
DllMain
DprintfPatched
DprintfPatched2
DummyMobUntransformForMobControl
ExternalAS3CallbackPatched
Function138
Function73
GetEventCastComFromIndexPatched
GetItemInfoPatched
GetMobControlPatched
GetStageLimit
GetStageNamePatched
GetStatueTypePatched
HookMovieLoad
HookedMainSystem_Ctor
HookedMainSystem_Dtor
IncreaseChaselMemory
IncreaseChaselSlotsArray
IncreaseChaselSlotsArray2
IncreaseCoreMainSystemMemory
IsCellMaxReplacement
IsDebuggingStages
IsDemoEventHappeningPatched
IsFreezerEventEndingPatched
IsOzaruReplacement
LoadToc
LoadToc_Setup
MobDtorPatched
ModifyArrayOffset4
ModifyGDrawSetting2A
OnBH10UntransformCallLocated
OnBattleCreateCharPatched
OnBattleInterfaceSingletonLocated
OnCoreMainSystemLocated_Stages
OnDialogueIsPlayerLocated
OnE74Located
OnGameDataSingleton_Located
OnGameLanguageLocated
OnGameLanguageLocated_Item
OnGetSelectedBeforeObject_Located
OnHasStageBeenSelectedBefore_Located
OnLocatePortraitEnemyForEmbSwitchTable
OnLocateToggleBattleUIPatch
OnLocateToggleBattleUIPatch2
OnModHlqPatchLocated
OnPatchLobbyScriptIsOpenedEventLocated
OnPatchOpenQuestCallbackLocated
OnPopupPauseBattleRALocated
OnQmlIdToEventCastLocated
OnQuestFunctionLocated
OnQuestManagerSingletonLocated
OnSetIsFsEventHappeningLocated
OnStringCopyLocated
OnUnknownItemAddressLocated
OverrideFarClipT1
OverrideFarClipT2
PatchGameVersionString
PatchReceiveTypeCharaSelected
PatchReceiveTypeUnlockVar
PatchStageDef1BFnmcOff8
PatchStageDef1BFnmsOff8
PatchStageDef1BottomOff8
PatchStageDef1CHR
PatchStageDef1CHROff10
PatchStageDef1CHROff8
PatchStageDef1Main
PatchStageDef1Off8
PatchStageDef1Off8_1
PatchStageDef1Off8_2
PatchStageDef1Off8_Absolute
PatchStageDef1Top
PatchStageDef2Main
PatchStageDef2MainGBB
PatchStageDef2Top
PatchStageDef2TopGBB
PatchStageF6
PatchStageMusicMain
PatchStageSoundsMain
PatchStageSsidToIdx
PatchStageSsidToIdxMain
PatchUntransform
PopupPauseCtorHooked
PreBakeSetup
QedCondHooked
ResultPortraits2Patched
ResultPortraits2Setup
SetBodyShape_Patched
SetBodyShape_Setup
SetupAIExtend
SetupAISpecial
SetupAddResistancePoints
SetupAlliesPatched
SetupAutoGenPortraitDumper
SetupBattleCoreMainSystem_singleton
SetupChangeBody
SetupChangePartset
SetupChaselCtor
SetupCheckUnlockFunction
SetupExternalAS3Callback
SetupFsEventOffline
SetupFunction138
SetupFunction73
SetupGetEventCastComFromIndex
SetupGetItemInfo
SetupGetMobControl
SetupGetResistancePoints
SetupGetStageName
SetupGetStatueType
SetupIncreaseChaselSlotsArray
SetupIncreaseChaselSlotsArray2
SetupIsDemoEventHappening
SetupIsFreezerEventEnding
SetupLogMovieFiles
SetupMainSystem_Ctor
SetupMainSystem_Dtor
SetupMobDtor
SetupMobUntransformForMobControl
SetupPatchGameVersionString
SetupPopupPauseCtor
SetupQedCond
SetupSetFarClipT1
SetupSetFarClipT2
SetupSetupAllies
SetupSkillCommand
SetupStageEve
SetupStringAppend
SetupUntransform
SetupUsesMobControl
ShowTheRedRing
SkillCommandPatched
StageEveReimplemented
StageGtClearExtraReimplemented
StageGtClearReimplemented
StageGtDefaultReimplemented
StageGtFindGateByNameReimplemented
StageGtFindGateReimplemented
StageGtGetExtraByNameReimplemented
StageGtGetExtraByTargetReimplemented
StageGtGetGateReimplemented
StageGtGetTargetReimplemented
StageGtSetExtraByNameReimplemented
StageGtSetExtraByTargetReimplemented
StageGtSetReimplemented
StageGtSetUnk10ByTargetReimplemented
TtcFilesAlias
UnlockCharaMods
UseAutobattlePortrait
UsesMobControlPatched
VCControl_Ctor_Patched
XInputCancelGuideButtonWait
XInputEnable
XInputGetBatteryInformation
XInputGetCapabilities
XInputGetDSoundAudioDeviceGuids
XInputGetKeystroke
XInputGetState
XInputGetStateEx
XInputPowerOffController
XInputSetState
XInputWaitForGuideButton
XV1CpkExists

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 460KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 288KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
changelog.txt
readme.txt

Sharing

General

Malware Config

Signatures

Files

039992f89d374b82594553135a037fef

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

shell32

user32

version

Exports

Exports

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.data Size: 9KB - Virtual size: 9KB

.rdata Size: 460KB - Virtual size: 459KB

.pdata Size: 57KB - Virtual size: 57KB

.xdata Size: 88KB - Virtual size: 87KB

.bss Size: - Virtual size: 288KB

.edata Size: 6KB - Virtual size: 5KB

.idata Size: 6KB - Virtual size: 6KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 6KB - Virtual size: 6KB

666b26c583f405236aa7047c57438929

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

shell32

user32

version

Exports

Exports

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.data Size: 9KB - Virtual size: 9KB

.rdata Size: 460KB - Virtual size: 460KB

.pdata Size: 57KB - Virtual size: 57KB

.xdata Size: 88KB - Virtual size: 87KB

.bss Size: - Virtual size: 288KB

.edata Size: 6KB - Virtual size: 6KB

.idata Size: 6KB - Virtual size: 6KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.data
Size: 9KB - Virtual size: 9KB

.rdata
Size: 460KB - Virtual size: 459KB

.pdata
Size: 57KB - Virtual size: 57KB

.xdata
Size: 88KB - Virtual size: 87KB

.bss
Size: - Virtual size: 288KB

.edata
Size: 6KB - Virtual size: 5KB

.idata
Size: 6KB - Virtual size: 6KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 6KB - Virtual size: 6KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.data
Size: 9KB - Virtual size: 9KB

.rdata
Size: 460KB - Virtual size: 460KB

.pdata
Size: 57KB - Virtual size: 57KB

.xdata
Size: 88KB - Virtual size: 87KB

.bss
Size: - Virtual size: 288KB

.edata
Size: 6KB - Virtual size: 6KB

.idata
Size: 6KB - Virtual size: 6KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 6KB - Virtual size: 6KB