rkapps-fsrealistic-pro-v2-2-1[.]rar

Sharing

Copy URL

Twitter E-mail

General

Target

rkapps-fsrealistic-pro-v2-2-1.rar
Size

677.5MB
MD5

b0a3e4b830e60afe76403e8bb697cf0e
SHA1

f95f3252acfb7e80b4354f3eae27e8a39b82c41c
SHA256

f5d3000ad7881ab9d72aa8a9a88328b3b68da7f87e9ea6e041fd9cc170bddd95
SHA512

ff4107b2771079b1dc25993c8f2ae6c0c32e1bc8a31d18300e4fce2ca146fc8728357b0c34556cfc4b89f1460407c8f25b8030ce2c868bed79fbe90365aff315
SSDEEP

12582912:6Oi/128Sm59fSh4pWfeFKsrgomknHEvdw9ZH/mPfDFQL7znCJ4X:6D48NW4poecomkkvdw9ZfCfpW7M4X

Score

3^/10

pdf link

Malware Config

Signatures

One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
pdf link

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/FSRealistic/FSRealistic.exe
unpack001/FSRealistic/OpenAL32.dll

Files

rkapps-fsrealistic-pro-v2-2-1.rar
.rar
FSRealistic/Data/Images/airframe_wind.jpg
.jpg
FSRealistic/Data/Images/airport_ambient.jpg
.jpg
FSRealistic/Data/Images/auto_speed_brake.jpg
.jpg
FSRealistic/Data/Images/blade_slapping.jpg
.jpg
FSRealistic/Data/Images/brakes.jpg
.jpg
FSRealistic/Data/Images/breathing.jpg
.jpg
FSRealistic/Data/Images/cabin_ambiance.jpg
.jpg
FSRealistic/Data/Images/clear_air_turbulence.jpg
.jpg
FSRealistic/Data/Images/clear_prop.jpg
.jpg
FSRealistic/Data/Images/cloud.png
.png
FSRealistic/Data/Images/cockpit_ambient.jpg
.jpg
FSRealistic/Data/Images/crashing.jpg
.jpg
FSRealistic/Data/Images/download.png
.png
FSRealistic/Data/Images/engine_startup.jpg
.jpg
FSRealistic/Data/Images/engine_vibrations.jpg
.jpg
FSRealistic/Data/Images/exit.png
.png
FSRealistic/Data/Images/first_person.jpg
.jpg
FSRealistic/Data/Images/flaps_drag.jpg
.jpg
FSRealistic/Data/Images/flaps_lever.jpg
.jpg
FSRealistic/Data/Images/flaps_stress.jpg
.jpg
FSRealistic/Data/Images/floats_splash.jpg
.jpg
FSRealistic/Data/Images/font.png
.png
FSRealistic/Data/Images/g_forces.jpg
.jpg
FSRealistic/Data/Images/gear_drag.jpg
.jpg
FSRealistic/Data/Images/grass_strip.jpg
.jpg
FSRealistic/Data/Images/ground_effect.jpg
.jpg
FSRealistic/Data/Images/ground_roll.jpg
.jpg
FSRealistic/Data/Images/ground_shakings.jpg
.jpg
FSRealistic/Data/Images/head_anticipation.jpg
.jpg
FSRealistic/Data/Images/icon_big.png
.png
FSRealistic/Data/Images/landing_claps.jpg
.jpg
FSRealistic/Data/Images/logo.png
.png
FSRealistic/Data/Images/mechanical_turbulence.jpg
.jpg
FSRealistic/Data/Images/minimize.png
.png
FSRealistic/Data/Images/over_g.jpg
.jpg
FSRealistic/Data/Images/overspeed.jpg
.jpg
FSRealistic/Data/Images/propwash.jpg
.jpg
FSRealistic/Data/Images/reverse_thrust.jpg
.jpg
FSRealistic/Data/Images/scary_ride.jpg
.jpg
FSRealistic/Data/Images/sneezing.jpg
.jpg
FSRealistic/Data/Images/speed_brake_drag.jpg
.jpg
FSRealistic/Data/Images/stall_buffet.jpg
.jpg
FSRealistic/Data/Images/star.png
.png
FSRealistic/Data/Images/stick_shaker.jpg
.jpg
FSRealistic/Data/Images/surface_turbulence.jpg
.jpg
FSRealistic/Data/Images/toilet_flush.jpg
.jpg
FSRealistic/Data/Images/touchdown_front.jpg
.jpg
FSRealistic/Data/Images/touchdown_main.jpg
.jpg
FSRealistic/Data/Images/turbulence_shakings.jpg
.jpg
FSRealistic/Data/Images/vr.jpg
.jpg
FSRealistic/Data/Images/water_ambient.jpg
.jpg
FSRealistic/Data/Images/wheel_well.jpg
.jpg
FSRealistic/Data/Images/wind_ambient.jpg
.jpg
FSRealistic/Data/Images/windshield_rain.jpg
.jpg
FSRealistic/Data/Images/windshield_wind.jpg
.jpg
FSRealistic/Data/Maps/effects.json
FSRealistic/Data/Maps/exe.xml
.xml
FSRealistic/Data/Maps/sounds.json
FSRealistic/Data/Sounds/airport_ga_1.wav
FSRealistic/Data/Sounds/airport_ga_2.wav
FSRealistic/Data/Sounds/airport_ga_3.wav
FSRealistic/Data/Sounds/airport_intl_1.wav
FSRealistic/Data/Sounds/airport_intl_2.wav
FSRealistic/Data/Sounds/airport_intl_3.wav
FSRealistic/Data/Sounds/airport_intl_4.wav
FSRealistic/Data/Sounds/airport_intl_5.wav
FSRealistic/Data/Sounds/airport_intl_6.wav
FSRealistic/Data/Sounds/airport_intl_7.wav
FSRealistic/Data/Sounds/bad_landing_1.wav
FSRealistic/Data/Sounds/bad_landing_10.wav
FSRealistic/Data/Sounds/bad_landing_11.wav
FSRealistic/Data/Sounds/bad_landing_12.wav
FSRealistic/Data/Sounds/bad_landing_13.wav
FSRealistic/Data/Sounds/bad_landing_14.wav
FSRealistic/Data/Sounds/bad_landing_15.wav
FSRealistic/Data/Sounds/bad_landing_16.wav
FSRealistic/Data/Sounds/bad_landing_17.wav
FSRealistic/Data/Sounds/bad_landing_18.wav
FSRealistic/Data/Sounds/bad_landing_19.wav
FSRealistic/Data/Sounds/bad_landing_2.wav
FSRealistic/Data/Sounds/bad_landing_3.wav
FSRealistic/Data/Sounds/bad_landing_4.wav
FSRealistic/Data/Sounds/bad_landing_5.wav
FSRealistic/Data/Sounds/bad_landing_6.wav
FSRealistic/Data/Sounds/bad_landing_7.wav
FSRealistic/Data/Sounds/bad_landing_8.wav
FSRealistic/Data/Sounds/bad_landing_9.wav
FSRealistic/Data/Sounds/bee_1.wav
FSRealistic/Data/Sounds/bee_2.wav
FSRealistic/Data/Sounds/bee_3.wav
FSRealistic/Data/Sounds/big_cabin_ambiance_4.wav
FSRealistic/Data/Sounds/big_cabin_ambiance_5.wav
FSRealistic/Data/Sounds/blade_slapping_10.wav
FSRealistic/Data/Sounds/blade_slapping_11.wav
FSRealistic/Data/Sounds/blade_slapping_12.wav
FSRealistic/Data/Sounds/blade_slapping_13.wav
FSRealistic/Data/Sounds/blade_slapping_4.wav
FSRealistic/Data/Sounds/blade_slapping_5.wav
FSRealistic/Data/Sounds/blade_slapping_7.wav
FSRealistic/Data/Sounds/blade_slapping_8.wav
FSRealistic/Data/Sounds/blade_slapping_9.wav
.ps1
FSRealistic/Data/Sounds/brake_1.wav
FSRealistic/Data/Sounds/brake_2.wav
FSRealistic/Data/Sounds/brake_3.wav
FSRealistic/Data/Sounds/breathing_1.wav
FSRealistic/Data/Sounds/breathing_2.wav
FSRealistic/Data/Sounds/breathing_3.wav
FSRealistic/Data/Sounds/breathing_4.wav
FSRealistic/Data/Sounds/breathing_5.wav
FSRealistic/Data/Sounds/calm_cockpit_1.wav
FSRealistic/Data/Sounds/calm_cockpit_2.wav
FSRealistic/Data/Sounds/calm_cockpit_3.wav
FSRealistic/Data/Sounds/claps_1.wav
FSRealistic/Data/Sounds/claps_2.wav
FSRealistic/Data/Sounds/claps_3.wav
FSRealistic/Data/Sounds/claps_4.wav
FSRealistic/Data/Sounds/claps_5.wav
FSRealistic/Data/Sounds/claps_6.wav
FSRealistic/Data/Sounds/clear_prop_1.wav
FSRealistic/Data/Sounds/clear_prop_2.wav
FSRealistic/Data/Sounds/clear_prop_3.wav
FSRealistic/Data/Sounds/clear_prop_4.wav
FSRealistic/Data/Sounds/clear_prop_5.wav
FSRealistic/Data/Sounds/clear_prop_6.wav
FSRealistic/Data/Sounds/clear_prop_female_1.wav
FSRealistic/Data/Sounds/clear_prop_female_2.wav
FSRealistic/Data/Sounds/clear_prop_female_3.wav
FSRealistic/Data/Sounds/clear_prop_female_4.wav
FSRealistic/Data/Sounds/clear_prop_female_5.wav
FSRealistic/Data/Sounds/clear_prop_female_6.wav
FSRealistic/Data/Sounds/cockpit_4.wav
FSRealistic/Data/Sounds/cockpit_5.wav
FSRealistic/Data/Sounds/cockpit_6.wav
FSRealistic/Data/Sounds/cockpit_7.wav
FSRealistic/Data/Sounds/connected.wav
FSRealistic/Data/Sounds/engine_movements_4.wav
FSRealistic/Data/Sounds/engine_movements_5.wav
FSRealistic/Data/Sounds/engine_movements_6.wav
FSRealistic/Data/Sounds/engine_movements_7.wav
FSRealistic/Data/Sounds/engine_movements_8.wav
FSRealistic/Data/Sounds/few_scared_people_1.wav
FSRealistic/Data/Sounds/few_scared_people_2.wav
FSRealistic/Data/Sounds/few_scared_people_3.wav
FSRealistic/Data/Sounds/few_scared_people_4.wav
FSRealistic/Data/Sounds/few_scared_people_5.wav
FSRealistic/Data/Sounds/first_person_in.wav
FSRealistic/Data/Sounds/flaps_1.wav
FSRealistic/Data/Sounds/flaps_2.wav
FSRealistic/Data/Sounds/flaps_3.wav
FSRealistic/Data/Sounds/flaps_4.wav
FSRealistic/Data/Sounds/flashlight_toggle.wav
FSRealistic/Data/Sounds/good_landing_1.wav
FSRealistic/Data/Sounds/good_landing_10.wav
FSRealistic/Data/Sounds/good_landing_11.wav
FSRealistic/Data/Sounds/good_landing_12.wav
FSRealistic/Data/Sounds/good_landing_13.wav
FSRealistic/Data/Sounds/good_landing_18.wav
FSRealistic/Data/Sounds/good_landing_19.wav
FSRealistic/Data/Sounds/good_landing_2.wav
FSRealistic/Data/Sounds/good_landing_20.wav
FSRealistic/Data/Sounds/good_landing_21.wav
FSRealistic/Data/Sounds/good_landing_3.wav
FSRealistic/Data/Sounds/good_landing_4.wav
FSRealistic/Data/Sounds/good_landing_5.wav
FSRealistic/Data/Sounds/good_landing_6.wav
FSRealistic/Data/Sounds/good_landing_7.wav
FSRealistic/Data/Sounds/good_landing_8.wav
FSRealistic/Data/Sounds/good_landing_9.wav
FSRealistic/Data/Sounds/ground_roll_fast_1.wav
FSRealistic/Data/Sounds/ground_roll_fast_2.wav
FSRealistic/Data/Sounds/ground_roll_fast_3.wav
FSRealistic/Data/Sounds/ground_roll_fast_4.wav
FSRealistic/Data/Sounds/ground_roll_fast_5.wav
FSRealistic/Data/Sounds/ground_roll_fast_6.wav
FSRealistic/Data/Sounds/ground_roll_fast_7.wav
FSRealistic/Data/Sounds/ground_roll_slow_1.wav
FSRealistic/Data/Sounds/ground_roll_slow_2.wav
FSRealistic/Data/Sounds/ground_roll_slow_3.wav
FSRealistic/Data/Sounds/ground_roll_slow_4.wav
FSRealistic/Data/Sounds/ground_roll_slow_5.wav
FSRealistic/Data/Sounds/many_scared_people_1.wav
FSRealistic/Data/Sounds/many_scared_people_2.wav
FSRealistic/Data/Sounds/many_scared_people_3.wav
FSRealistic/Data/Sounds/many_scared_people_4.wav
FSRealistic/Data/Sounds/outside_wind_1.wav
FSRealistic/Data/Sounds/outside_wind_2.wav
FSRealistic/Data/Sounds/outside_wind_3.wav
FSRealistic/Data/Sounds/outside_wind_4.wav
FSRealistic/Data/Sounds/outside_wind_5.wav
FSRealistic/Data/Sounds/outside_wind_6.wav
FSRealistic/Data/Sounds/reverse_thrust_1.wav
FSRealistic/Data/Sounds/reverse_thrust_2.wav
FSRealistic/Data/Sounds/reverse_thrust_3.wav
FSRealistic/Data/Sounds/reverse_thrust_4.wav
FSRealistic/Data/Sounds/rumble_1.wav
FSRealistic/Data/Sounds/rumble_10.wav
FSRealistic/Data/Sounds/rumble_2.wav
FSRealistic/Data/Sounds/rumble_3.wav
FSRealistic/Data/Sounds/rumble_4.wav
FSRealistic/Data/Sounds/rumble_5.wav
FSRealistic/Data/Sounds/rumble_6.wav
FSRealistic/Data/Sounds/rumble_7.wav
FSRealistic/Data/Sounds/rumble_8.wav
FSRealistic/Data/Sounds/rumble_9.wav
FSRealistic/Data/Sounds/scream_1.wav
FSRealistic/Data/Sounds/scream_10.wav
FSRealistic/Data/Sounds/scream_2.wav
FSRealistic/Data/Sounds/scream_3.wav
FSRealistic/Data/Sounds/scream_4.wav
FSRealistic/Data/Sounds/scream_5.wav
FSRealistic/Data/Sounds/scream_6.wav
FSRealistic/Data/Sounds/scream_7.wav
FSRealistic/Data/Sounds/scream_8.wav
FSRealistic/Data/Sounds/scream_9.wav
FSRealistic/Data/Sounds/shakings_1.wav
FSRealistic/Data/Sounds/shakings_10.wav
FSRealistic/Data/Sounds/shakings_11.wav
FSRealistic/Data/Sounds/shakings_12.wav
FSRealistic/Data/Sounds/shakings_13.wav
FSRealistic/Data/Sounds/shakings_2.wav
FSRealistic/Data/Sounds/shakings_3.wav
FSRealistic/Data/Sounds/shakings_4.wav
FSRealistic/Data/Sounds/shakings_5.wav
FSRealistic/Data/Sounds/shakings_6.wav
FSRealistic/Data/Sounds/shakings_7.wav
FSRealistic/Data/Sounds/small_cabin_ambiance_1.wav
FSRealistic/Data/Sounds/small_cabin_ambiance_2.wav
FSRealistic/Data/Sounds/small_cabin_ambiance_3.wav
FSRealistic/Data/Sounds/small_cabin_ambiance_4.wav
FSRealistic/Data/Sounds/small_cabin_ambiance_5.wav
FSRealistic/Data/Sounds/sneeze_4.wav
FSRealistic/Data/Sounds/speed_brake_auto_deploy.wav
FSRealistic/Data/Sounds/steps_concrete_1.wav
FSRealistic/Data/Sounds/steps_grass_1.wav
FSRealistic/Data/Sounds/steps_gravel_1.wav
FSRealistic/Data/Sounds/steps_water_1.wav
FSRealistic/Data/Sounds/stick_shaker_1.wav
FSRealistic/Data/Sounds/stick_shaker_2.wav
FSRealistic/Data/Sounds/stick_shaker_3.wav
FSRealistic/Data/Sounds/toilet_flush_1.wav
FSRealistic/Data/Sounds/toilet_flush_2.wav
FSRealistic/Data/Sounds/toilet_flush_3.wav
FSRealistic/Data/Sounds/touchdown_1.wav
FSRealistic/Data/Sounds/touchdown_10.wav
FSRealistic/Data/Sounds/touchdown_11.wav
FSRealistic/Data/Sounds/touchdown_12.wav
FSRealistic/Data/Sounds/touchdown_13.wav
FSRealistic/Data/Sounds/touchdown_2.wav
FSRealistic/Data/Sounds/touchdown_3.wav
FSRealistic/Data/Sounds/touchdown_8.wav
FSRealistic/Data/Sounds/touchdown_9.wav
FSRealistic/Data/Sounds/touchdown_grass_1.wav
FSRealistic/Data/Sounds/touchdown_grass_2.wav
FSRealistic/Data/Sounds/touchdown_grass_3.wav
FSRealistic/Data/Sounds/touchdown_grass_4.wav
FSRealistic/Data/Sounds/touchdown_water_1.wav
FSRealistic/Data/Sounds/touchdown_water_2.wav
FSRealistic/Data/Sounds/touchdown_water_3.wav
FSRealistic/Data/Sounds/touchdown_water_4.wav
FSRealistic/Data/Sounds/touchdown_water_5.wav
FSRealistic/Data/Sounds/touchdown_water_6.wav
FSRealistic/Data/Sounds/touchdown_water_7.wav
FSRealistic/Data/Sounds/wheel_well_5.wav
FSRealistic/Data/Sounds/wheel_well_6.wav
FSRealistic/Data/Sounds/wheel_well_7.wav
FSRealistic/Data/Sounds/wind_1.wav
FSRealistic/Data/Sounds/wind_2.wav
FSRealistic/Data/Sounds/wind_3.wav
FSRealistic/Data/Sounds/wind_4.wav
FSRealistic/Data/Sounds/wind_5.wav
FSRealistic/Data/Sounds/wind_6.wav
FSRealistic/Data/Sounds/wind_7.wav
FSRealistic/Docs/EULA.pdf
.pdf
FSRealistic/Docs/Manual.pdf
.pdf
- https://fsrealistic.wixsite.com/website/forum/general/guide-how-to-fix-fsr-not-auto-starting
- https://rkappsus.wixsite.com/rkapps/forum
- https://www.facebook.com/rkApps.shop
- https://www.rkapps.shop
- https://www.rkapps.shop/blogs/news/updates
FSRealistic/FSRealistic.exe
.exe windows:6 windows x64 arch:x64

0ed1e68b932bd609f78ef715ac55dae9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\Repos\FSRealistic\FSRealistic\FSRealistic.pdb

Imports

openal32

alSourcef
alSourcei
alGenBuffers
alSourcefv
alSourceStop
alSourcePlay
alGenSources
alDeleteBuffers
alDeleteSources
alcCloseDevice
alcCreateContext
alcOpenDevice
alGetEnumValue
alcGetString
alcMakeContextCurrent
alGetError
alBufferData

opengl32

glGetError
glClearColor
glClear
glPopMatrix
glGetIntegerv
glPushAttrib
glOrtho
glPixelStorei
glPushMatrix
glDisable
glDrawElements
glTexEnvi
glColorPointer
glTexImage2D
glGetTexEnviv
glTexCoordPointer
glDeleteTextures
glTexParameteri
glLoadIdentity
glBlendFunc
glMatrixMode
glDisableClientState
glScissor
glEnable
glVertexPointer
glGenTextures
glBindTexture
glViewport
glPopAttrib
glEnableClientState
glPolygonMode

shlwapi

PathCombineA

kernel32

RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
InitializeSListHead
TerminateProcess
LocalFree
FormatMessageA
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
GetModuleHandleW
CancelIo
WriteFile
ReadFile
BindIoCompletionCallback
WaitNamedPipeA
RtlLookupFunctionEntry
GetPrivateProfileSectionA
GetPrivateProfileStringA
lstrcmpiA
GetModuleHandleExA
GetModuleHandleA
GetCurrentProcessId
OutputDebugStringW
GetLocaleInfoEx
MultiByteToWideChar
GlobalAlloc
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
OutputDebugStringA
LoadLibraryA
GetProcAddress
FreeLibrary
GetComputerNameA
GetCurrentProcess
InitializeCriticalSectionEx
CreateMutexA
GetCurrentThreadId
GetLastError
GetFileAttributesA
CloseHandle
DeleteCriticalSection
FindFirstFileExW
GetFullPathNameW
FindNextFileW
FindClose
DeleteFileA
WaitForSingleObject
CreateEventA
GetModuleFileNameA
QueryPerformanceCounter
QueryPerformanceFrequency
Sleep
GetCurrentDirectoryA
CreateFileA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent

user32

EnumWindows
SystemParametersInfoW
RegisterDeviceNotificationW
EnumDisplaySettingsW
EnumDisplaySettingsExW
EnumDisplayDevicesW
ChangeDisplaySettingsExW
GetRawInputDeviceList
GetRawInputDeviceInfoA
DispatchMessageW
LoadImageW
RegisterClassExW
GetPropW
DefWindowProcW
TrackMouseEvent
ReleaseCapture
SetCapture
PtInRect
CopyIcon
WindowFromPoint
SetCursor
LoadCursorW
ScreenToClient
IsZoomed
IsWindowVisible
IsIconic
GetWindowLongW
SetWindowLongW
BringWindowToTop
SetFocus
ShowWindow
GetClipboardData
GetSystemMetrics
GetClassLongPtrW
SendMessageW
DestroyIcon
UnregisterClassW
RemovePropW
DestroyWindow
CreateWindowExW
SetPropW
SetWindowPos
GetMessageTime
PeekMessageW
GetClientRect
ClientToScreen
ClipCursor
AdjustWindowRectEx
GetDC
ReleaseDC
CreateIconIndirect
PostMessageA
SetActiveWindow
SetForegroundWindow
DispatchMessageA
GetWindowRect
SetWindowRgn
VkKeyScanA
GetActiveWindow
GetAsyncKeyState
GetRawInputData
RegisterRawInputDevices
GetForegroundWindow
SetClipboardData
EmptyClipboard
TranslateMessage
OpenClipboard
PeekMessageA
CloseClipboard
GetWindowTextLengthA
FindWindowA
SetCursorPos
GetCursorPos
GetKeyState
GetWindowTextA

gdi32

CreateRoundRectRgn
SetDeviceGammaRamp
CreateDCW
GetDeviceCaps
DeleteDC
SwapBuffers
SetPixelFormat
DescribePixelFormat
CreateDIBSection
CreateBitmap
DeleteObject

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
OpenProcessToken
GetTokenInformation

shell32

DragAcceptFiles
ShellExecuteA
DragFinish
DragQueryFileW
DragQueryPoint
SHGetFolderPathA

ole32

CoInitializeEx
CoCreateInstance

imm32

ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow

msvcp140

_Cnd_do_broadcast_at_thread_exit
?_Throw_Cpp_error@std@@YAXH@Z
_Query_perf_frequency
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
_Thrd_sleep
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
_Query_perf_counter
?_Syserror_map@std@@YAPEBDH@Z
?_Winerror_map@std@@YAHH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?_Xbad_function_call@std@@YAXXZ
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??Bid@locale@std@@QEAA_KXZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?tolower@?$ctype@D@std@@QEBADD@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??Bios_base@std@@QEBA_NXZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD4@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
_Strcoll
?id@?$collate@D@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
_Strxfrm
?ignore@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
_Thrd_join
_Thrd_id
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?good@ios_base@std@@QEBA_NXZ
?_Xbad_alloc@std@@YAXXZ
_Xtime_get_ticks
_Thrd_detach

winmm

PlaySoundA

dwmapi

DwmEnableBlurBehindWindow

ws2_32

WSARecv
WSASend
getaddrinfo
WSAStartup
send
select
connect
recv
setsockopt
getsockopt
freeaddrinfo
ioctlsocket
WSAGetLastError
shutdown
socket
WSACleanup
closesocket

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memchr
__C_specific_handler
__current_exception_context
__current_exception
memmove
__std_terminate
strstr
__std_exception_destroy
__std_exception_copy
_purecall
strchr
memcpy
memset
_CxxThrowException
memcmp

api-ms-win-crt-stdio-l1-1-0

feof
fgetpos
setvbuf
_fseeki64
__p__commode
ungetc
_ftelli64
__stdio_common_vsnprintf_s
fgetc
ferror
_set_fmode
fputc
__stdio_common_vfprintf
fopen_s
fsetpos
_get_stream_buffer_pointers
fopen
__stdio_common_vsscanf
fread
__stdio_common_vsprintf
fwrite
fseek
fclose
fflush
__acrt_iob_func
ftell
_wfopen

api-ms-win-crt-string-l1-1-0

strcmp
isdigit
_strdup
_strnicmp
isalnum
isalpha
strncmp
isspace
strncpy
tolower
toupper

api-ms-win-crt-utility-l1-1-0

qsort
rand
srand

api-ms-win-crt-heap-l1-1-0

_set_new_mode
calloc
free
realloc
_recalloc
_callnewh
malloc

api-ms-win-crt-runtime-l1-1-0

_c_exit
_invalid_parameter_noinfo_noreturn
_beginthreadex
_register_thread_local_exe_atexit_callback
_wassert
_errno
_set_errno
__p___argv
exit
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
terminate
_get_initial_narrow_environment
_initterm
_initterm_e
_exit
__p___argc

api-ms-win-crt-convert-l1-1-0

strtol
mbstowcs_s
strtoul
strtoll
atof
wcstombs_s
strtod
strtoull
atoi

api-ms-win-crt-conio-l1-1-0

_getch

api-ms-win-crt-time-l1-1-0

clock
_difftime64
_mktime64
strftime
_localtime64
_time64

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-math-l1-1-0

__setusermatherr
log
logf
atan2
fmodf
powf
sqrt
acosf
ceilf
cos
pow
sinf
tan
ldexp
cosf
sqrtf
floor
sin
floorf
fmod
_dsign

api-ms-win-crt-locale-l1-1-0

localeconv
_configthreadlocale

Sections

.text
Size: 934KB - Virtual size: 933KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 202KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
FSRealistic/OpenAL32.dll
.dll windows:5 windows x64 arch:x64

2d7f16264d3feaa9435fc60028d11280

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
IsBadWritePtr
DebugBreak
IsDebuggerPresent
DeleteCriticalSection
InitializeCriticalSection
GetModuleHandleExW
ExitThread
CreateThread
CloseHandle
GetExitCodeThread
WaitForSingleObject
SwitchToThread
TlsGetValue
TlsSetValue
LoadLibraryA
FreeLibrary
SetThreadPriority
GetCurrentThread
TlsAlloc
TlsFree
GetProcAddress
Sleep
GetLastError
WideCharToMultiByte
WaitForSingleObjectEx
ResetEvent
SetEvent
CreateEventA
GetProcessHeap
SetEndOfFile
HeapSize
WriteConsoleW
SetStdHandle
SetEnvironmentVariableA
CompareStringW
CreateFileA
LoadLibraryW
RaiseException
GetStringTypeW
LCMapStringW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
SetFilePointer
ReadFile
MultiByteToWideChar
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetStartupInfoW
HeapFree
HeapReAlloc
HeapAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
RtlUnwindEx
EncodePointer
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
DecodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FlsGetValue
FlsFree
SetLastError
FlsAlloc
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetFileType
CreateFileW

user32

PostThreadMessageA
GetMessageA
GetForegroundWindow

shell32

SHGetSpecialFolderPathA

ole32

CoUninitialize
CoInitialize
CoCreateInstance
StringFromCLSID
CoTaskMemFree
PropVariantClear

winmm

waveInClose
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutOpen
waveOutClose
waveInUnprepareHeader
waveOutWrite
waveInGetNumDevs
waveInGetDevCapsA
waveOutGetNumDevs
waveOutGetDevCapsA
timeGetTime
waveInPrepareHeader
waveInOpen
waveInStart
waveInReset
waveInStop
waveInAddBuffer

Exports

Exports

alAuxiliaryEffectSlotf
alAuxiliaryEffectSlotfv
alAuxiliaryEffectSloti
alAuxiliaryEffectSlotiv
alBuffer3f
alBuffer3i
alBufferData
alBufferSamplesSOFT
alBufferSubDataSOFT
alBufferSubSamplesSOFT
alBufferf
alBufferfv
alBufferi
alBufferiv
alDeferUpdatesSOFT
alDeleteAuxiliaryEffectSlots
alDeleteBuffers
alDeleteEffects
alDeleteFilters
alDeleteSources
alDisable
alDistanceModel
alDopplerFactor
alDopplerVelocity
alEffectf
alEffectfv
alEffecti
alEffectiv
alEnable
alFilterf
alFilterfv
alFilteri
alFilteriv
alGenAuxiliaryEffectSlots
alGenBuffers
alGenEffects
alGenFilters
alGenSources
alGetAuxiliaryEffectSlotf
alGetAuxiliaryEffectSlotfv
alGetAuxiliaryEffectSloti
alGetAuxiliaryEffectSlotiv
alGetBoolean
alGetBooleanv
alGetBuffer3f
alGetBuffer3i
alGetBufferSamplesSOFT
alGetBufferf
alGetBufferfv
alGetBufferi
alGetBufferiv
alGetDouble
alGetDoublev
alGetEffectf
alGetEffectfv
alGetEffecti
alGetEffectiv
alGetEnumValue
alGetError
alGetFilterf
alGetFilterfv
alGetFilteri
alGetFilteriv
alGetFloat
alGetFloatv
alGetInteger
alGetIntegerv
alGetListener3f
alGetListener3i
alGetListenerf
alGetListenerfv
alGetListeneri
alGetListeneriv
alGetProcAddress
alGetSource3f
alGetSource3i
alGetSourcef
alGetSourcefv
alGetSourcei
alGetSourceiv
alGetString
alIsAuxiliaryEffectSlot
alIsBuffer
alIsBufferFormatSupportedSOFT
alIsEffect
alIsEnabled
alIsExtensionPresent
alIsFilter
alIsSource
alListener3f
alListener3i
alListenerf
alListenerfv
alListeneri
alListeneriv
alProcessUpdatesSOFT
alSource3f
alSource3i
alSourcePause
alSourcePausev
alSourcePlay
alSourcePlayv
alSourceQueueBuffers
alSourceRewind
alSourceRewindv
alSourceStop
alSourceStopv
alSourceUnqueueBuffers
alSourcef
alSourcefv
alSourcei
alSourceiv
alSpeedOfSound
alcCaptureCloseDevice
alcCaptureOpenDevice
alcCaptureSamples
alcCaptureStart
alcCaptureStop
alcCloseDevice
alcCreateContext
alcDestroyContext
alcGetContextsDevice
alcGetCurrentContext
alcGetEnumValue
alcGetError
alcGetIntegerv
alcGetProcAddress
alcGetString
alcGetThreadContext
alcIsExtensionPresent
alcIsRenderFormatSupportedSOFT
alcLoopbackOpenDeviceSOFT
alcMakeContextCurrent
alcOpenDevice
alcProcessContext
alcRenderSamplesSOFT
alcSetThreadContext
alcSuspendContext

Sections

.text
Size: 285KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 131KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
FSRealistic/README.txt

Sharing

General

Malware Config

Signatures

Files

0ed1e68b932bd609f78ef715ac55dae9

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

openal32

opengl32

shlwapi

kernel32

user32

gdi32

advapi32

shell32

ole32

imm32

msvcp140

winmm

dwmapi

ws2_32

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-conio-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 934KB - Virtual size: 933KB

.rdata Size: 202KB - Virtual size: 201KB

.data Size: 8KB - Virtual size: 38KB

.pdata Size: 37KB - Virtual size: 37KB

.rsrc Size: 104KB - Virtual size: 103KB

.reloc Size: 2KB - Virtual size: 1KB

2d7f16264d3feaa9435fc60028d11280

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

ole32

winmm

Exports

Exports

Sections

.text Size: 285KB - Virtual size: 284KB

.rdata Size: 131KB - Virtual size: 130KB

.data Size: 8KB - Virtual size: 18KB

.pdata Size: 14KB - Virtual size: 14KB

text Size: 5KB - Virtual size: 4KB

data Size: 7KB - Virtual size: 6KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 934KB - Virtual size: 933KB

.rdata
Size: 202KB - Virtual size: 201KB

.data
Size: 8KB - Virtual size: 38KB

.pdata
Size: 37KB - Virtual size: 37KB

.rsrc
Size: 104KB - Virtual size: 103KB

.reloc
Size: 2KB - Virtual size: 1KB

.text
Size: 285KB - Virtual size: 284KB

.rdata
Size: 131KB - Virtual size: 130KB

.data
Size: 8KB - Virtual size: 18KB

.pdata
Size: 14KB - Virtual size: 14KB

text
Size: 5KB - Virtual size: 4KB

data
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 3KB - Virtual size: 3KB