EntryPointFunc
Overview
overview
3Static
static
3Frischluft...ez.dll
windows7-x64
1Frischluft...ez.dll
windows10-2004-x64
1Frischluft...ur.dll
windows7-x64
1Frischluft...ur.dll
windows10-2004-x64
1Frischluft...ld.dll
windows7-x64
1Frischluft...ld.dll
windows10-2004-x64
1Frischluft...re.dll
windows7-x64
1Frischluft...re.dll
windows10-2004-x64
1Frischluft...ow.dll
windows7-x64
1Frischluft...ow.dll
windows10-2004-x64
1Frischluft...ht.dll
windows7-x64
1Frischluft...ht.dll
windows10-2004-x64
1Frischluft...ne.dll
windows7-x64
1Frischluft...ne.dll
windows10-2004-x64
1Frischluft...us.dll
windows7-x64
1Frischluft...us.dll
windows10-2004-x64
1Frischluft...ur.dll
windows7-x64
1Frischluft...ur.dll
windows10-2004-x64
1Frischluft...cs.dll
windows7-x64
1Frischluft...cs.dll
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Frischluft/! Go In Here/amiga_rulez.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Frischluft/! Go In Here/amiga_rulez.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
Frischluft/! Go In Here/box_blur.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Frischluft/! Go In Here/box_blur.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral5
Sample
Frischluft/! Go In Here/depth_of_field.dll
Resource
win7-20240215-en
Behavioral task
behavioral6
Sample
Frischluft/! Go In Here/depth_of_field.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral7
Sample
Frischluft/! Go In Here/glas_sphere.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Frischluft/! Go In Here/glas_sphere.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral9
Sample
Frischluft/! Go In Here/glow.dll
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
Frischluft/! Go In Here/glow.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
Frischluft/! Go In Here/highlight.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
Frischluft/! Go In Here/highlight.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral13
Sample
Frischluft/! Go In Here/mosaic_plane.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
Frischluft/! Go In Here/mosaic_plane.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral15
Sample
Frischluft/! Go In Here/out_of_focus.dll
Resource
win7-20240215-en
Behavioral task
behavioral16
Sample
Frischluft/! Go In Here/out_of_focus.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral17
Sample
Frischluft/! Go In Here/radial_blur.dll
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
Frischluft/! Go In Here/radial_blur.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
Frischluft/! Go In Here/volumetrics.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
Frischluft/! Go In Here/volumetrics.dll
Resource
win10v2004-20240412-en
General
-
Target
Frischluft.zip
-
Size
2.6MB
-
MD5
be1aba9ad81201a508f74a31a8d75f89
-
SHA1
95aa63ba1f61f052fb71801ab4d8379329c995fc
-
SHA256
440eacb695325daaced0586acb25eed0e6e5348e238bf15f6f90f67570a75daa
-
SHA512
44a29ae26d51928afd410705e0f5b028e43280022526399e1ca809792b67fae6c9cdc055a6a82e84c072f1b2c477d46ffea57176cbf65dfc20f611e4e709fd37
-
SSDEEP
49152:fVrrnoWRvUELwowiK4DprluMA1jeWs5GOsLlQiMFAMLU11u2QE:fVgYuf49r0MA1xLUudC2R
Malware Config
Signatures
-
Unsigned PE 10 IoCs
Checks for missing Authenticode signature.
resource unpack001/Frischluft/! Go In Here/amiga_rulez.aex unpack001/Frischluft/! Go In Here/box_blur.aex unpack001/Frischluft/! Go In Here/depth_of_field.aex unpack001/Frischluft/! Go In Here/glas_sphere.aex unpack001/Frischluft/! Go In Here/glow.aex unpack001/Frischluft/! Go In Here/highlight.aex unpack001/Frischluft/! Go In Here/mosaic_plane.aex unpack001/Frischluft/! Go In Here/out_of_focus.aex unpack001/Frischluft/! Go In Here/radial_blur.aex unpack001/Frischluft/! Go In Here/volumetrics.aex
Files
-
Frischluft.zip.zip
-
Frischluft/! Go In Here/Flair_ae.key
-
Frischluft/! Go In Here/Lenscare_ae.key
-
Frischluft/! Go In Here/amiga_rulez.aex.dll windows:5 windows x64 arch:x64
2dddd19a73c156167d1f9cc6bfeb501e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
advapi32
RegCreateKeyA
RegCloseKey
RegQueryValueExA
kernel32
GetSystemInfo
AllocConsole
SetConsoleScreenBufferSize
InitializeCriticalSection
FreeConsole
LeaveCriticalSection
SetConsoleTitleA
GetStdHandle
EnterCriticalSection
WriteConsoleA
DeleteCriticalSection
WaitForSingleObject
SetEvent
CreateEventA
GetLastError
ResetEvent
GetCurrentThreadId
CloseHandle
CreateThread
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleFileNameA
WideCharToMultiByte
EncodePointer
DecodePointer
Sleep
MultiByteToWideChar
HeapFree
GetSystemTimeAsFileTime
FlsSetValue
GetCommandLineA
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
HeapAlloc
LCMapStringW
GetCPInfo
WriteFile
GetModuleFileNameW
GetLocaleInfoW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
TerminateProcess
GetCurrentProcess
SetHandleCount
GetFileType
GetStartupInfoW
FlsGetValue
FlsFree
SetLastError
FlsAlloc
HeapSize
GetProcAddress
GetModuleHandleW
ExitProcess
ReadFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetCurrentProcessId
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
HeapReAlloc
LoadLibraryW
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileA
CompareStringW
SetEnvironmentVariableA
CreateFileW
SetEndOfFile
GetProcessHeap
Exports
Exports
Sections
.text Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 245KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 416B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Frischluft/! Go In Here/box_blur.aex.dll windows:5 windows x64 arch:x64
2dddd19a73c156167d1f9cc6bfeb501e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
advapi32
RegCreateKeyA
RegCloseKey
RegQueryValueExA
kernel32
GetSystemInfo
AllocConsole
SetConsoleScreenBufferSize
InitializeCriticalSection
FreeConsole
LeaveCriticalSection
SetConsoleTitleA
GetStdHandle
EnterCriticalSection
WriteConsoleA
DeleteCriticalSection
WaitForSingleObject
SetEvent
CreateEventA
GetLastError
ResetEvent
GetCurrentThreadId
CloseHandle
CreateThread
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleFileNameA
WideCharToMultiByte
EncodePointer
DecodePointer
Sleep
MultiByteToWideChar
HeapFree
GetSystemTimeAsFileTime
FlsSetValue
GetCommandLineA
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
HeapAlloc
LCMapStringW
GetCPInfo
WriteFile
GetModuleFileNameW
GetLocaleInfoW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
TerminateProcess
GetCurrentProcess
SetHandleCount
GetFileType
GetStartupInfoW
FlsGetValue
FlsFree
SetLastError
FlsAlloc
HeapSize
GetProcAddress
GetModuleHandleW
ExitProcess
ReadFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetCurrentProcessId
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
HeapReAlloc
LoadLibraryW
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileA
CompareStringW
SetEnvironmentVariableA
CreateFileW
SetEndOfFile
GetProcessHeap
Exports
Exports
EntryPointFunc
Sections
.text Size: 258KB - Virtual size: 257KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 245KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 408B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Frischluft/! Go In Here/depth_of_field.aex.dll windows:5 windows x64 arch:x64
f0305de68180be8b7eb2a25db65da6a7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
advapi32
RegCreateKeyA
RegCloseKey
RegQueryValueExA
kernel32
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetSystemInfo
WaitForMultipleObjects
DeleteCriticalSection
CloseHandle
CreateThread
AllocConsole
SetConsoleScreenBufferSize
FreeConsole
SetConsoleTitleA
GetStdHandle
WriteConsoleA
GetModuleFileNameA
WideCharToMultiByte
Sleep
MultiByteToWideChar
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetSystemTimeAsFileTime
GetCurrentThreadId
FlsSetValue
GetCommandLineA
RaiseException
RtlPcToFileHeader
RtlUnwindEx
LCMapStringA
LCMapStringW
GetCPInfo
HeapAlloc
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
HeapSize
GetModuleHandleW
GetProcAddress
ExitProcess
HeapSetInformation
HeapCreate
HeapDestroy
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetHandleCount
GetFileType
GetStartupInfoA
ReadFile
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
HeapReAlloc
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileA
GetLocaleInfoW
SetEndOfFile
GetProcessHeap
Exports
Exports
EntryPointFunc
Sections
.text Size: 486KB - Virtual size: 486KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 245KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 416B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Frischluft/! Go In Here/glas_sphere.aex.dll windows:5 windows x64 arch:x64
2dddd19a73c156167d1f9cc6bfeb501e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
advapi32
RegCreateKeyA
RegCloseKey
RegQueryValueExA
kernel32
GetSystemInfo
AllocConsole
SetConsoleScreenBufferSize
InitializeCriticalSection
FreeConsole
LeaveCriticalSection
SetConsoleTitleA
GetStdHandle
EnterCriticalSection
WriteConsoleA
DeleteCriticalSection
WaitForSingleObject
SetEvent
CreateEventA
GetLastError
ResetEvent
GetCurrentThreadId
CloseHandle
CreateThread
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleFileNameA
WideCharToMultiByte
EncodePointer
DecodePointer
Sleep
MultiByteToWideChar
HeapFree
GetSystemTimeAsFileTime
FlsSetValue
GetCommandLineA
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
HeapAlloc
LCMapStringW
GetCPInfo
WriteFile
GetModuleFileNameW
GetLocaleInfoW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
TerminateProcess
GetCurrentProcess
SetHandleCount
GetFileType
GetStartupInfoW
FlsGetValue
FlsFree
SetLastError
FlsAlloc
HeapSize
GetProcAddress
GetModuleHandleW
ExitProcess
ReadFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetCurrentProcessId
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
HeapReAlloc
LoadLibraryW
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileA
CompareStringW
SetEnvironmentVariableA
CreateFileW
SetEndOfFile
GetProcessHeap
Exports
Exports
EntryPointFunc
Sections
.text Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 245KB - Virtual size: 261KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 408B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Frischluft/! Go In Here/glow.aex.dll windows:5 windows x64 arch:x64
2dddd19a73c156167d1f9cc6bfeb501e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
advapi32
RegCreateKeyA
RegCloseKey
RegQueryValueExA
kernel32
GetSystemInfo
AllocConsole
SetConsoleScreenBufferSize
InitializeCriticalSection
FreeConsole
LeaveCriticalSection
SetConsoleTitleA
GetStdHandle
EnterCriticalSection
WriteConsoleA
DeleteCriticalSection
WaitForSingleObject
SetEvent
CreateEventA
GetLastError
ResetEvent
GetCurrentThreadId
CloseHandle
CreateThread
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleFileNameA
WideCharToMultiByte
EncodePointer
DecodePointer
Sleep
MultiByteToWideChar
HeapFree
GetSystemTimeAsFileTime
FlsSetValue
GetCommandLineA
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
HeapAlloc
LCMapStringW
GetCPInfo
WriteFile
GetModuleFileNameW
GetLocaleInfoW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
TerminateProcess
GetCurrentProcess
SetHandleCount
GetFileType
GetStartupInfoW
FlsGetValue
FlsFree
SetLastError
FlsAlloc
HeapSize
GetProcAddress
GetModuleHandleW
ExitProcess
ReadFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetCurrentProcessId
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
HeapReAlloc
LoadLibraryW
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileA
CompareStringW
SetEnvironmentVariableA
CreateFileW
SetEndOfFile
GetProcessHeap
Exports
Exports
EntryPointFunc
Sections
.text Size: 334KB - Virtual size: 333KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 248KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
data Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Frischluft/! Go In Here/highlight.aex.dll windows:5 windows x64 arch:x64
2dddd19a73c156167d1f9cc6bfeb501e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
advapi32
RegCreateKeyA
RegCloseKey
RegQueryValueExA
kernel32
GetSystemInfo
AllocConsole
SetConsoleScreenBufferSize
InitializeCriticalSection
FreeConsole
LeaveCriticalSection
SetConsoleTitleA
GetStdHandle
EnterCriticalSection
WriteConsoleA
DeleteCriticalSection
WaitForSingleObject
SetEvent
CreateEventA
GetLastError
ResetEvent
GetCurrentThreadId
CloseHandle
CreateThread
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleFileNameA
WideCharToMultiByte
EncodePointer
DecodePointer
Sleep
MultiByteToWideChar
HeapFree
GetSystemTimeAsFileTime
FlsSetValue
GetCommandLineA
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
HeapAlloc
LCMapStringW
GetCPInfo
WriteFile
GetModuleFileNameW
GetLocaleInfoW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
TerminateProcess
GetCurrentProcess
SetHandleCount
GetFileType
GetStartupInfoW
FlsGetValue
FlsFree
SetLastError
FlsAlloc
HeapSize
GetProcAddress
GetModuleHandleW
ExitProcess
ReadFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetCurrentProcessId
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
HeapReAlloc
LoadLibraryW
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileA
CompareStringW
SetEnvironmentVariableA
CreateFileW
SetEndOfFile
GetProcessHeap
Exports
Exports
EntryPointFunc
Sections
.text Size: 261KB - Virtual size: 261KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 248KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
data Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 408B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Frischluft/! Go In Here/mosaic_plane.aex.dll windows:5 windows x64 arch:x64
2dddd19a73c156167d1f9cc6bfeb501e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
advapi32
RegCreateKeyA
RegCloseKey
RegQueryValueExA
kernel32
GetSystemInfo
AllocConsole
SetConsoleScreenBufferSize
InitializeCriticalSection
FreeConsole
LeaveCriticalSection
SetConsoleTitleA
GetStdHandle
EnterCriticalSection
WriteConsoleA
DeleteCriticalSection
WaitForSingleObject
SetEvent
CreateEventA
GetLastError
ResetEvent
GetCurrentThreadId
CloseHandle
CreateThread
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleFileNameA
WideCharToMultiByte
EncodePointer
DecodePointer
Sleep
MultiByteToWideChar
HeapFree
GetSystemTimeAsFileTime
FlsSetValue
GetCommandLineA
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
HeapAlloc
LCMapStringW
GetCPInfo
WriteFile
GetModuleFileNameW
GetLocaleInfoW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
TerminateProcess
GetCurrentProcess
SetHandleCount
GetFileType
GetStartupInfoW
FlsGetValue
FlsFree
SetLastError
FlsAlloc
HeapSize
GetProcAddress
GetModuleHandleW
ExitProcess
ReadFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetCurrentProcessId
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
HeapReAlloc
LoadLibraryW
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileA
CompareStringW
SetEnvironmentVariableA
CreateFileW
SetEndOfFile
GetProcessHeap
Exports
Exports
EntryPointFunc
Sections
.text Size: 233KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 245KB - Virtual size: 261KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 416B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Frischluft/! Go In Here/out_of_focus.aex.dll windows:5 windows x64 arch:x64
a70ee4c7fee6bd6a6f546fa838a63542
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
advapi32
RegCreateKeyA
RegCloseKey
RegQueryValueExA
kernel32
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetSystemInfo
WaitForMultipleObjects
DeleteCriticalSection
CloseHandle
CreateThread
AllocConsole
SetConsoleScreenBufferSize
FreeConsole
SetConsoleTitleA
GetStdHandle
WriteConsoleA
GetModuleFileNameA
Sleep
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetSystemTimeAsFileTime
GetCurrentThreadId
FlsSetValue
GetCommandLineA
RaiseException
RtlPcToFileHeader
RtlUnwindEx
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
HeapAlloc
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
HeapSize
GetModuleHandleW
GetProcAddress
ExitProcess
HeapSetInformation
HeapCreate
HeapDestroy
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetHandleCount
GetFileType
GetStartupInfoA
ReadFile
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
HeapReAlloc
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileA
GetLocaleInfoW
SetEndOfFile
GetProcessHeap
Exports
Exports
EntryPointFunc
Sections
.text Size: 361KB - Virtual size: 361KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 251KB - Virtual size: 266KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 416B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Frischluft/! Go In Here/radial_blur.aex.dll windows:5 windows x64 arch:x64
2dddd19a73c156167d1f9cc6bfeb501e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
advapi32
RegCreateKeyA
RegCloseKey
RegQueryValueExA
kernel32
GetSystemInfo
AllocConsole
SetConsoleScreenBufferSize
InitializeCriticalSection
FreeConsole
LeaveCriticalSection
SetConsoleTitleA
GetStdHandle
EnterCriticalSection
WriteConsoleA
DeleteCriticalSection
WaitForSingleObject
SetEvent
CreateEventA
GetLastError
ResetEvent
GetCurrentThreadId
CloseHandle
CreateThread
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleFileNameA
WideCharToMultiByte
EncodePointer
DecodePointer
Sleep
MultiByteToWideChar
HeapFree
GetSystemTimeAsFileTime
FlsSetValue
GetCommandLineA
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
HeapAlloc
LCMapStringW
GetCPInfo
WriteFile
GetModuleFileNameW
GetLocaleInfoW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
TerminateProcess
GetCurrentProcess
SetHandleCount
GetFileType
GetStartupInfoW
FlsGetValue
FlsFree
SetLastError
FlsAlloc
HeapSize
GetProcAddress
GetModuleHandleW
ExitProcess
ReadFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetCurrentProcessId
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
HeapReAlloc
LoadLibraryW
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileA
CompareStringW
SetEnvironmentVariableA
CreateFileW
SetEndOfFile
GetProcessHeap
Exports
Exports
EntryPointFunc
Sections
.text Size: 311KB - Virtual size: 311KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 247KB - Virtual size: 263KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
data Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 408B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Frischluft/! Go In Here/volumetrics.aex.dll windows:5 windows x64 arch:x64
2dddd19a73c156167d1f9cc6bfeb501e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
advapi32
RegCreateKeyA
RegCloseKey
RegQueryValueExA
kernel32
GetSystemInfo
AllocConsole
SetConsoleScreenBufferSize
InitializeCriticalSection
FreeConsole
LeaveCriticalSection
SetConsoleTitleA
GetStdHandle
EnterCriticalSection
WriteConsoleA
DeleteCriticalSection
WaitForSingleObject
SetEvent
CreateEventA
GetLastError
ResetEvent
GetCurrentThreadId
CloseHandle
CreateThread
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleFileNameA
WideCharToMultiByte
EncodePointer
DecodePointer
Sleep
MultiByteToWideChar
HeapFree
GetSystemTimeAsFileTime
FlsSetValue
GetCommandLineA
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
HeapAlloc
LCMapStringW
GetCPInfo
WriteFile
GetModuleFileNameW
GetLocaleInfoW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
TerminateProcess
GetCurrentProcess
SetHandleCount
GetFileType
GetStartupInfoW
FlsGetValue
FlsFree
SetLastError
FlsAlloc
HeapSize
GetProcAddress
GetModuleHandleW
ExitProcess
ReadFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetCurrentProcessId
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
HeapReAlloc
LoadLibraryW
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileA
CompareStringW
SetEnvironmentVariableA
CreateFileW
SetEndOfFile
GetProcessHeap
Exports
Exports
EntryPointFunc
Sections
.text Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 247KB - Virtual size: 263KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
data Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 416B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Frischluft/INSTRUCTIONS.txt