Aground By Freddy fazbear[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

Aground By Freddy fazbear.rar
Size

22.1MB
MD5

fa13ffce3a9581c77e063e6a3c377252
SHA1

348ee7985eb86c99f9ba9b0ae6d27f1b7b4a6f7f
SHA256

117b8f98a3abaa56db7658655c038f240858bf33d2f43203c885da2398d75b00
SHA512

f5efa1416d9192305263cb9ebdd181e33329234454c7e267501b228545e1ebf81767cafa237ddca8df92f06d9ed068a9a8612f59c2ce7184aa44d5c677f226ac
SSDEEP

393216:/EpMt8RJP5DuvakqNV9O9FM+Zmk3dSUwKIH3FdLsKYXY9ClYRcxEPGI:/Ep1V9EFMMtSIIH3FdLsKYXY9CmcoGI

Score

3^/10

Malware Config

Signatures

Unsigned PE 6 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Aground/Aground.exe
unpack001/Aground/lime.ndll
unpack001/Aground/regexp.dll
unpack001/Aground/std.dll
unpack001/Aground/systools.ndll
unpack001/Aground/zlib.dll

Files

Aground By Freddy fazbear.rar
.rar
Aground/Aground.exe
.exe windows:5 windows x86 arch:x86

74590b1e2b8a051a479085caa51ecea3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetModuleFileNameW
WriteConsoleW
QueryPerformanceCounter
SystemTimeToFileTime
GetSystemTime
InterlockedCompareExchange
InterlockedIncrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateThread
CreateEventA
CloseHandle
SetEvent
WaitForSingleObject
ResetEvent
GetCurrentThreadId
TlsSetValue
TlsAlloc
LoadLibraryW
GetProcAddress
LoadLibraryA
GetCommandLineA
InterlockedDecrement
DecodePointer
EncodePointer
RtlUnwind
RaiseException
HeapAlloc
GetLastError
HeapFree
GetModuleHandleW
ExitProcess
GetSystemTimeAsFileTime
HeapReAlloc
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileExA
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetCurrentProcessId
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
WriteFile
GetStdHandle
TlsGetValue
TlsFree
SetLastError
SetHandleCount
SetFilePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
MultiByteToWideChar
ReadFile
HeapCreate
Sleep
HeapSize
WideCharToMultiByte
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetFullPathNameA
GetFileInformationByHandle
PeekNamedPipe
CreateFileA
GetCurrentDirectoryW
LCMapStringW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetStringTypeW
CompareStringW
SetEnvironmentVariableA
GetDriveTypeW
SetEndOfFile
GetProcessHeap
CreateFileW

Exports

Exports

hx_cffi

Sections

.text
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 242KB - Virtual size: 270KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 174KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 567KB - Virtual size: 567KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Aground/data/areas.xml
.xml
Aground/data/areas/mountain.xml
.xml
Aground/data/areas/start.xml
.xml
Aground/data/bg.png
.png
Aground/data/crafting.xml
.xml
Aground/data/dig.xml
.xml
Aground/data/ellipse.png
.png
Aground/data/enemies.xml
.xml
Aground/data/farm.xml
.xml
Aground/data/fonts/damage.fnt
Aground/data/fonts/damage.png
.png
Aground/data/fonts/font.fnt
Aground/data/fonts/font.png
.png
Aground/data/fonts/uni.fnt
Aground/data/fonts/uni.png
.png
Aground/data/game_over.png
.png
Aground/data/items.xml
.xml
Aground/data/keys.png
.png
Aground/data/lang/de_DE.xml
Aground/data/lang/en_US.xml
.xml
Aground/data/lang/es.xml
.xml
Aground/data/lang/fr.xml
Aground/data/lang/it_IT.xml
.xml
Aground/data/lang/keyboards/default.xml
.xml
Aground/data/lang/languages.xml
.xml
Aground/data/lang/pt_BR.xml
.xml
Aground/data/lang/ru_RU.xml
.xml
Aground/data/npc/alchemist.xml
.xml
Aground/data/npc/builder.xml
.xml
Aground/data/npc/farmer.xml
.xml
Aground/data/npc/miner.xml
.xml
Aground/data/npc/trader.xml
.xml
Aground/data/objects.xml
.xml
Aground/data/quests.xml
.xml
Aground/data/scenes/hut/alchemist.png
.png
Aground/data/scenes/hut/builder.png
.png
Aground/data/scenes/hut/farmer.png
.png
Aground/data/scenes/hut/fire.png
.png
Aground/data/scenes/hut/hut.png
.png
Aground/data/scenes/hut/miner.png
.png
Aground/data/scenes/hut/scene.xml
.xml
Aground/data/scenes/hut/trader.png
.png
Aground/data/sounds.xml
.xml
Aground/data/structures.xml
.xml
Aground/data/tile/achievement_flash.png
.png
Aground/data/tile/achievements.png
.png
Aground/data/tile/adult_dragon.png
.png
Aground/data/tile/adult_dragon.xml
Aground/data/tile/alchemist.png
.png
Aground/data/tile/anims.xml
.xml
Aground/data/tile/arrows.png
.png
Aground/data/tile/boar.png
.png
Aground/data/tile/boat.png
.png
Aground/data/tile/bush.png
.png
Aground/data/tile/cage.png
.png
Aground/data/tile/chicken.png
.png
Aground/data/tile/clouds.png
.png
Aground/data/tile/conifer1.png
.png
Aground/data/tile/conifer2.png
.png
Aground/data/tile/conifer3.png
.png
Aground/data/tile/cotton.png
.png
Aground/data/tile/cow.png
.png
Aground/data/tile/crack.png
.png
Aground/data/tile/death.png
.png
Aground/data/tile/dock.png
.png
Aground/data/tile/dock_front.png
.png
Aground/data/tile/dockhouse.png
.png
Aground/data/tile/dragon.png
.png
Aground/data/tile/farm.png
.png
Aground/data/tile/farm_halloween.png
.png
Aground/data/tile/fire.png
.png
Aground/data/tile/fire_bird.png
.png
Aground/data/tile/fire_boar.png
.png
Aground/data/tile/fireball_small.png
.png
Aground/data/tile/fishing.png
.png
Aground/data/tile/fishing_line.png
.png
Aground/data/tile/food_market.png
.png
Aground/data/tile/freeze.png
.png
Aground/data/tile/ghost.png
.png
Aground/data/tile/golem.png
.png
Aground/data/tile/hut.png
.png
Aground/data/tile/icy_wind.png
.png
Aground/data/tile/items.png
.png
Aground/data/tile/kitchen.png
.png
Aground/data/tile/kitchen2.png
.png
Aground/data/tile/lab.png
.png
Aground/data/tile/mineral_market.png
.png
Aground/data/tile/mountain_snow.png
.png
Aground/data/tile/npc.png
.png
Aground/data/tile/orchard.png
.png
Aground/data/tile/pen.png
.png
Aground/data/tile/player.png
.png
Aground/data/tile/pumpkin.png
.png
Aground/data/tile/rat.png
.png
Aground/data/tile/red_bush.png
.png
Aground/data/tile/redbreast.png
.png
Aground/data/tile/seagull.png
.png
Aground/data/tile/smelter.png
.png
Aground/data/tile/snowball.png
.png
Aground/data/tile/storehouse.png
.png
Aground/data/tile/sugar.png
.png
Aground/data/tile/sun.png
.png
Aground/data/tile/tiles.png
.png
Aground/data/tile/tiles.xml
.xml
Aground/data/tile/tree1.png
.png
Aground/data/tile/tree2.png
.png
Aground/data/tile/tree3.png
.png
Aground/data/tile/ui.png
.png
Aground/data/tile/water.png
.png
Aground/data/tile/waves.png
.png
Aground/data/tile/weaps_market.png
.png
Aground/data/tile/weps.png
.png
Aground/data/tile/wheat.png
.png
Aground/data/tile/workshop.png
.png
Aground/data/tile/wyrm.png
.png
Aground/data/tile/yeti.png
.png
Aground/data/title.png
.png
Aground/data/title_full.jpg
.jpg
Aground/data/trees.xml
.xml
Aground/data/ui/achievement_bg.png
.png
Aground/data/ui/ancient_scroll.png
.png
Aground/data/ui/ancient_window.png
.png
Aground/data/ui/bar.png
.png
Aground/data/ui/bar_fuel.png
.png
Aground/data/ui/buttons.png
.png
Aground/data/ui/equip.png
.png
Aground/data/ui/gradient.png
.png
Aground/data/ui/inventory.png
.png
Aground/data/ui/quest.png
.png
Aground/data/ui/questlog.png
.png
Aground/data/ui/speech.png
.png
Aground/data/ui/sticky.png
.png
Aground/data/volumes.xml
.xml
Aground/icon.ico
Aground/lime.ndll
.dll windows:5 windows x86 arch:x86

fe84f207851131be3462ebd1345f5a2f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

GetDeviceCaps
GetTextMetricsW
CreateFontIndirectW
CreateDCW
DescribePixelFormat
SetPixelFormat
ChoosePixelFormat
SwapBuffers
GetPixelFormat
CombineRgn
CreateRectRgn
SetDeviceGammaRamp
GetDeviceGammaRamp
BitBlt
DeleteDC
DeleteObject
CreateCompatibleBitmap
GetDIBits
CreateCompatibleDC
CreateDIBSection
CreateBitmap
SelectObject

user32

SetWindowRgn
GetDoubleClickTime
SetCursorPos
CreateIconIndirect
DestroyIcon
LoadCursorW
FlashWindowEx
SetWindowLongA
GetWindowLongA
SetClassLongA
LoadIconA
PostThreadMessageA
GetMessageA
GetForegroundWindow
GetDesktopWindow
GetRawInputDeviceInfoA
GetRawInputDeviceList
DefWindowProcW
UnregisterClassW
DestroyWindow
UnregisterDeviceNotification
RegisterDeviceNotificationW
CreateWindowExW
RegisterClassExW
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
CloseClipboard
GetClipboardSequenceNumber
RegisterRawInputDevices
ChangeDisplaySettingsExW
EnumDisplayDevicesW
EnumDisplaySettingsW
EnumDisplayMonitors
SystemParametersInfoW
SetWindowPos
DialogBoxIndirectParamW
SystemParametersInfoA
GetDC
SetClipboardData
EmptyClipboard
OpenClipboard
GetClipboardData
IsClipboardFormatAvailable
GetAsyncKeyState
IsIconic
GetMessageExtraInfo
GetFocus
SetWindowLongW
WindowFromPoint
GetRawInputData
ValidateRect
GetUpdateRect
SetCursor
ClientToScreen
IsRectEmpty
GetClientRect
AdjustWindowRectEx
GetMenu
GetWindowLongW
GetWindowRect
ClipCursor
GetKeyState
ScreenToClient
GetCursorPos
CallWindowProcW
GetPropW
RegisterClassW
LoadImageW
GetClassInfoW
MapVirtualKeyW
GetKeyboardLayout
EndDialog
ReleaseDC
SetPropW
GetWindowTextW
GetWindowTextLengthW
SetWindowTextW
SendMessageW
CreateIconFromResource
ShowWindow
RemovePropW
TrackMouseEvent
DrawTextW

kernel32

GetConsoleCP
HeapSize
IsValidCodePage
GetACP
GetCPInfo
HeapDestroy
HeapCreate
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
SetHandleCount
GetCommandLineA
SetConsoleCtrlHandler
GetConsoleMode
GetModuleFileNameW
CreateFileA
GetTimeZoneInformation
FindFirstFileExA
GetDriveTypeA
FindClose
GetFileInformationByHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
GetSystemTimeAsFileTime
SetStdHandle
EncodePointer
RaiseException
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
DecodePointer
FlushFileBuffers
GetFullPathNameA
GetCurrentDirectoryW
LCMapStringW
SetEndOfFile
GetProcessHeap
GetStringTypeW
VirtualQuery
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
GetDriveTypeW
GetOEMCP
MulDiv
GetVersionExA
CompareStringA
GlobalAlloc
GlobalLock
GlobalUnlock
GetCurrentThreadId
TryEnterCriticalSection
GetProcAddress
GetModuleHandleA
FreeLibrary
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
CreateFileW
QueryPerformanceFrequency
QueryPerformanceCounter
WaitForSingleObject
SetLastError
SleepEx
GetLastError
VerifyVersionInfoA
VerSetConditionMask
ExpandEnvironmentStringsA
Sleep
FormatMessageA
ReadFile
PeekNamedPipe
WaitForMultipleObjects
GetFileType
GetStdHandle
LoadLibraryA
GetTickCount
CreateEventA
SetEvent
ResetEvent
CreateSemaphoreA
ReleaseSemaphore
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
InterlockedCompareExchange
DebugBreak
IsDebuggerPresent
InterlockedIncrement
InterlockedDecrement
GetModuleHandleExW
ExitThread
CreateThread
GetExitCodeThread
SwitchToThread
TlsGetValue
TlsSetValue
SetThreadPriority
GetCurrentThread
TlsAlloc
TlsFree
WaitForSingleObjectEx
ExitProcess
WriteConsoleW
lstrlenW
OutputDebugStringW
AttachConsole
GetSystemInfo
GlobalMemoryStatusEx
SetErrorMode
GetFileSizeEx
SetFilePointerEx
WriteFile
SetFilePointer
SetEnvironmentVariableA
GetEnvironmentVariableA
CreateSemaphoreW
FormatMessageW
LoadLibraryW
GetCurrentProcess
CreateDirectoryW
lstrcatW
GetModuleHandleW
GetSystemPowerStatus
InitializeCriticalSectionAndSpinCount
CompareStringW

advapi32

CryptCreateHash
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
CryptHashData
CryptAcquireContextA

winmm

timeGetTime
waveOutGetDevCapsA
waveOutGetNumDevs
waveInGetDevCapsA
waveInGetNumDevs
waveOutWrite
waveInAddBuffer
waveOutClose
timeEndPeriod
timeBeginPeriod
waveOutGetErrorTextW
waveInGetDevCapsW
waveOutPrepareHeader
waveOutUnprepareHeader
waveInClose
waveInUnprepareHeader
waveInPrepareHeader
waveInOpen
waveInReset
waveInStart
waveInStop
waveOutGetDevCapsW
waveOutOpen

imm32

ImmReleaseContext
ImmGetContext
ImmGetIMEFileNameA
ImmSetCompositionStringW
ImmNotifyIME
ImmGetCompositionStringW
ImmGetCandidateListW
ImmAssociateContext
ImmSetCompositionWindow

ole32

CoCreateInstance
CoUninitialize
CoInitializeEx
StringFromCLSID
CoInitialize
PropVariantClear
CoTaskMemFree

oleaut32

SysFreeString

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

ws2_32

WSAGetLastError
WSAIoctl
setsockopt
getsockname
ntohs
bind
htons
getsockopt
recv
closesocket
socket
connect
WSASetLastError
freeaddrinfo
getaddrinfo
gethostname
WSACleanup
WSAStartup
accept
listen
ioctlsocket
__WSAFDIsSet
select
sendto
recvfrom
htonl
ntohl
getpeername
send

wldap32

ord41
ord22
ord211
ord143
ord60
ord50
ord26
ord30
ord27
ord32
ord35
ord79
ord200
ord33
ord301
ord46

shell32

SHParseDisplayName
SHGetSpecialFolderPathA
SHGetFolderPathW
SHCreateShellItem
DragQueryFileW
DragAcceptFiles
ord155
DragFinish
SHGetFolderPathA

Exports

Exports

SDL_AddEventWatch
SDL_AddHintCallback
SDL_AddTimer
SDL_AllocFormat
SDL_AllocPalette
SDL_AllocRW
SDL_AtomicAdd
SDL_AtomicCAS
SDL_AtomicCASPtr
SDL_AtomicGet
SDL_AtomicGetPtr
SDL_AtomicLock
SDL_AtomicSet
SDL_AtomicSetPtr
SDL_AtomicTryLock
SDL_AtomicUnlock
SDL_AudioInit
SDL_AudioQuit
SDL_BuildAudioCVT
SDL_CalculateGammaRamp
SDL_CaptureMouse
SDL_ClearError
SDL_ClearHints
SDL_ClearQueuedAudio
SDL_CloseAudio
SDL_CloseAudioDevice
SDL_CondBroadcast
SDL_CondSignal
SDL_CondWait
SDL_CondWaitTimeout
SDL_ConvertAudio
SDL_ConvertPixels
SDL_ConvertSurface
SDL_ConvertSurfaceFormat
SDL_CreateColorCursor
SDL_CreateCond
SDL_CreateCursor
SDL_CreateMutex
SDL_CreateRGBSurface
SDL_CreateRGBSurfaceFrom
SDL_CreateRenderer
SDL_CreateSemaphore
SDL_CreateShapedWindow
SDL_CreateSoftwareRenderer
SDL_CreateSystemCursor
SDL_CreateTexture
SDL_CreateTextureFromSurface
SDL_CreateThread
SDL_CreateWindow
SDL_CreateWindowAndRenderer
SDL_CreateWindowFrom
SDL_DXGIGetOutputInfo
SDL_DYNAPI_entry
SDL_DelEventWatch
SDL_DelHintCallback
SDL_Delay
SDL_DestroyCond
SDL_DestroyMutex
SDL_DestroyRenderer
SDL_DestroySemaphore
SDL_DestroyTexture
SDL_DestroyWindow
SDL_DetachThread
SDL_Direct3D9GetAdapterIndex
SDL_DisableScreenSaver
SDL_EnableScreenSaver
SDL_EnclosePoints
SDL_Error
SDL_EventState
SDL_FillRect
SDL_FillRects
SDL_FilterEvents
SDL_FlushEvent
SDL_FlushEvents
SDL_FreeCursor
SDL_FreeFormat
SDL_FreePalette
SDL_FreeRW
SDL_FreeSurface
SDL_FreeWAV
SDL_GL_BindTexture
SDL_GL_CreateContext
SDL_GL_DeleteContext
SDL_GL_ExtensionSupported
SDL_GL_GetAttribute
SDL_GL_GetCurrentContext
SDL_GL_GetCurrentWindow
SDL_GL_GetDrawableSize
SDL_GL_GetProcAddress
SDL_GL_GetSwapInterval
SDL_GL_LoadLibrary
SDL_GL_MakeCurrent
SDL_GL_ResetAttributes
SDL_GL_SetAttribute
SDL_GL_SetSwapInterval
SDL_GL_SwapWindow
SDL_GL_UnbindTexture
SDL_GL_UnloadLibrary
SDL_GameControllerAddMapping
SDL_GameControllerAddMappingsFromRW
SDL_GameControllerClose
SDL_GameControllerEventState
SDL_GameControllerFromInstanceID
SDL_GameControllerGetAttached
SDL_GameControllerGetAxis
SDL_GameControllerGetAxisFromString
SDL_GameControllerGetBindForAxis
SDL_GameControllerGetBindForButton
SDL_GameControllerGetButton
SDL_GameControllerGetButtonFromString
SDL_GameControllerGetJoystick
SDL_GameControllerGetStringForAxis
SDL_GameControllerGetStringForButton
SDL_GameControllerMapping
SDL_GameControllerMappingForGUID
SDL_GameControllerName
SDL_GameControllerNameForIndex
SDL_GameControllerOpen
SDL_GameControllerUpdate
SDL_GetAssertionHandler
SDL_GetAssertionReport
SDL_GetAudioDeviceName
SDL_GetAudioDeviceStatus
SDL_GetAudioDriver
SDL_GetAudioStatus
SDL_GetBasePath
SDL_GetCPUCacheLineSize
SDL_GetCPUCount
SDL_GetClipRect
SDL_GetClipboardText
SDL_GetClosestDisplayMode
SDL_GetColorKey
SDL_GetCurrentAudioDriver
SDL_GetCurrentDisplayMode
SDL_GetCurrentVideoDriver
SDL_GetCursor
SDL_GetDefaultAssertionHandler
SDL_GetDefaultCursor
SDL_GetDesktopDisplayMode
SDL_GetDisplayBounds
SDL_GetDisplayDPI
SDL_GetDisplayMode
SDL_GetDisplayName
SDL_GetError
SDL_GetEventFilter
SDL_GetGlobalMouseState
SDL_GetGrabbedWindow
SDL_GetHint
SDL_GetKeyFromName
SDL_GetKeyFromScancode
SDL_GetKeyName
SDL_GetKeyboardFocus
SDL_GetKeyboardState
SDL_GetModState
SDL_GetMouseFocus
SDL_GetMouseState
SDL_GetNumAudioDevices
SDL_GetNumAudioDrivers
SDL_GetNumDisplayModes
SDL_GetNumRenderDrivers
SDL_GetNumTouchDevices
SDL_GetNumTouchFingers
SDL_GetNumVideoDisplays
SDL_GetNumVideoDrivers
SDL_GetPerformanceCounter
SDL_GetPerformanceFrequency
SDL_GetPixelFormatName
SDL_GetPlatform
SDL_GetPowerInfo
SDL_GetPrefPath
SDL_GetQueuedAudioSize
SDL_GetRGB
SDL_GetRGBA
SDL_GetRelativeMouseMode
SDL_GetRelativeMouseState
SDL_GetRenderDrawBlendMode
SDL_GetRenderDrawColor
SDL_GetRenderDriverInfo
SDL_GetRenderTarget
SDL_GetRenderer
SDL_GetRendererInfo
SDL_GetRendererOutputSize
SDL_GetRevision
SDL_GetRevisionNumber
SDL_GetScancodeFromKey
SDL_GetScancodeFromName
SDL_GetScancodeName
SDL_GetShapedWindowMode
SDL_GetSurfaceAlphaMod
SDL_GetSurfaceBlendMode
SDL_GetSurfaceColorMod
SDL_GetSystemRAM
SDL_GetTextureAlphaMod
SDL_GetTextureBlendMode
SDL_GetTextureColorMod
SDL_GetThreadID
SDL_GetThreadName
SDL_GetTicks
SDL_GetTouchDevice
SDL_GetTouchFinger
SDL_GetVersion
SDL_GetVideoDriver
SDL_GetWindowBrightness
SDL_GetWindowData
SDL_GetWindowDisplayIndex
SDL_GetWindowDisplayMode
SDL_GetWindowFlags
SDL_GetWindowFromID
SDL_GetWindowGammaRamp
SDL_GetWindowGrab
SDL_GetWindowID
SDL_GetWindowMaximumSize
SDL_GetWindowMinimumSize
SDL_GetWindowPixelFormat
SDL_GetWindowPosition
SDL_GetWindowSize
SDL_GetWindowSurface
SDL_GetWindowTitle
SDL_GetWindowWMInfo
SDL_HapticClose
SDL_HapticDestroyEffect
SDL_HapticEffectSupported
SDL_HapticGetEffectStatus
SDL_HapticIndex
SDL_HapticName
SDL_HapticNewEffect
SDL_HapticNumAxes
SDL_HapticNumEffects
SDL_HapticNumEffectsPlaying
SDL_HapticOpen
SDL_HapticOpenFromJoystick
SDL_HapticOpenFromMouse
SDL_HapticOpened
SDL_HapticPause
SDL_HapticQuery
SDL_HapticRumbleInit
SDL_HapticRumblePlay
SDL_HapticRumbleStop
SDL_HapticRumbleSupported
SDL_HapticRunEffect
SDL_HapticSetAutocenter
SDL_HapticSetGain
SDL_HapticStopAll
SDL_HapticStopEffect
SDL_HapticUnpause
SDL_HapticUpdateEffect
SDL_Has3DNow
SDL_HasAVX
SDL_HasAVX2
SDL_HasAltiVec
SDL_HasClipboardText
SDL_HasEvent
SDL_HasEvents
SDL_HasIntersection
SDL_HasMMX
SDL_HasRDTSC
SDL_HasSSE
SDL_HasSSE2
SDL_HasSSE3
SDL_HasSSE41
SDL_HasSSE42
SDL_HasScreenKeyboardSupport
SDL_HideWindow
SDL_Init
SDL_InitSubSystem
SDL_IntersectRect
SDL_IntersectRectAndLine
SDL_IsGameController
SDL_IsScreenKeyboardShown
SDL_IsScreenSaverEnabled
SDL_IsShapedWindow
SDL_IsTextInputActive
SDL_JoystickClose
SDL_JoystickCurrentPowerLevel
SDL_JoystickEventState
SDL_JoystickFromInstanceID
SDL_JoystickGetAttached
SDL_JoystickGetAxis
SDL_JoystickGetBall
SDL_JoystickGetButton
SDL_JoystickGetDeviceGUID
SDL_JoystickGetGUID
SDL_JoystickGetGUIDFromString
SDL_JoystickGetGUIDString
SDL_JoystickGetHat
SDL_JoystickInstanceID
SDL_JoystickIsHaptic
SDL_JoystickName
SDL_JoystickNameForIndex
SDL_JoystickNumAxes
SDL_JoystickNumBalls
SDL_JoystickNumButtons
SDL_JoystickNumHats
SDL_JoystickOpen
SDL_JoystickUpdate
SDL_LoadBMP_RW
SDL_LoadDollarTemplates
SDL_LoadFunction
SDL_LoadObject
SDL_LoadWAV_RW
SDL_LockAudio
SDL_LockAudioDevice
SDL_LockMutex
SDL_LockSurface
SDL_LockTexture
SDL_Log
SDL_LogCritical
SDL_LogDebug
SDL_LogError
SDL_LogGetOutputFunction
SDL_LogGetPriority
SDL_LogInfo
SDL_LogMessage
SDL_LogMessageV
SDL_LogResetPriorities
SDL_LogSetAllPriority
SDL_LogSetOutputFunction
SDL_LogSetPriority
SDL_LogVerbose
SDL_LogWarn
SDL_LowerBlit
SDL_LowerBlitScaled
SDL_MapRGB
SDL_MapRGBA
SDL_MasksToPixelFormatEnum
SDL_MaximizeWindow
SDL_MinimizeWindow
SDL_MixAudio
SDL_MixAudioFormat
SDL_MouseIsHaptic
SDL_NumHaptics
SDL_NumJoysticks
SDL_OpenAudio
SDL_OpenAudioDevice
SDL_PauseAudio
SDL_PauseAudioDevice
SDL_PeepEvents
SDL_PixelFormatEnumToMasks
SDL_PollEvent
SDL_PumpEvents
SDL_PushEvent
SDL_QueryTexture
SDL_QueueAudio
SDL_Quit
SDL_QuitSubSystem
SDL_RWFromConstMem
SDL_RWFromFP
SDL_RWFromFile
SDL_RWFromMem
SDL_RaiseWindow
SDL_ReadBE16
SDL_ReadBE32
SDL_ReadBE64
SDL_ReadLE16
SDL_ReadLE32
SDL_ReadLE64
SDL_ReadU8
SDL_RecordGesture
SDL_RegisterApp
SDL_RegisterEvents
SDL_RemoveTimer
SDL_RenderClear
SDL_RenderCopy
SDL_RenderCopyEx
SDL_RenderDrawLine
SDL_RenderDrawLines
SDL_RenderDrawPoint
SDL_RenderDrawPoints
SDL_RenderDrawRect
SDL_RenderDrawRects
SDL_RenderFillRect
SDL_RenderFillRects
SDL_RenderGetClipRect
SDL_RenderGetD3D9Device
SDL_RenderGetLogicalSize
SDL_RenderGetScale
SDL_RenderGetViewport
SDL_RenderIsClipEnabled
SDL_RenderPresent
SDL_RenderReadPixels
SDL_RenderSetClipRect
SDL_RenderSetLogicalSize
SDL_RenderSetScale
SDL_RenderSetViewport
SDL_RenderTargetSupported
SDL_ReportAssertion
SDL_ResetAssertionReport
SDL_RestoreWindow
SDL_SaveAllDollarTemplates
SDL_SaveBMP_RW
SDL_SaveDollarTemplate
SDL_SemPost
SDL_SemTryWait
SDL_SemValue
SDL_SemWait
SDL_SemWaitTimeout
SDL_SetAssertionHandler
SDL_SetClipRect
SDL_SetClipboardText
SDL_SetColorKey
SDL_SetCursor
SDL_SetError
SDL_SetEventFilter
SDL_SetHint
SDL_SetHintWithPriority
SDL_SetMainReady
SDL_SetModState
SDL_SetPaletteColors
SDL_SetPixelFormatPalette
SDL_SetRelativeMouseMode
SDL_SetRenderDrawBlendMode
SDL_SetRenderDrawColor
SDL_SetRenderTarget
SDL_SetSurfaceAlphaMod
SDL_SetSurfaceBlendMode
SDL_SetSurfaceColorMod
SDL_SetSurfacePalette
SDL_SetSurfaceRLE
SDL_SetTextInputRect
SDL_SetTextureAlphaMod
SDL_SetTextureBlendMode
SDL_SetTextureColorMod
SDL_SetThreadPriority
SDL_SetWindowBordered
SDL_SetWindowBrightness
SDL_SetWindowData
SDL_SetWindowDisplayMode
SDL_SetWindowFullscreen
SDL_SetWindowGammaRamp
SDL_SetWindowGrab
SDL_SetWindowHitTest
SDL_SetWindowIcon
SDL_SetWindowMaximumSize
SDL_SetWindowMinimumSize
SDL_SetWindowPosition
SDL_SetWindowShape
SDL_SetWindowSize
SDL_SetWindowTitle
SDL_SetWindowsMessageHook
SDL_ShowCursor
SDL_ShowMessageBox
SDL_ShowSimpleMessageBox
SDL_ShowWindow
SDL_SoftStretch
SDL_StartTextInput
SDL_StopTextInput
SDL_TLSCreate
SDL_TLSGet
SDL_TLSSet
SDL_ThreadID
SDL_TryLockMutex
SDL_UnionRect
SDL_UnloadObject
SDL_UnlockAudio
SDL_UnlockAudioDevice
SDL_UnlockMutex
SDL_UnlockSurface
SDL_UnlockTexture
SDL_UnregisterApp
SDL_UpdateTexture
SDL_UpdateWindowSurface
SDL_UpdateWindowSurfaceRects
SDL_UpdateYUVTexture
SDL_UpperBlit
SDL_UpperBlitScaled
SDL_VideoInit
SDL_VideoQuit
SDL_WaitEvent
SDL_WaitEventTimeout
SDL_WaitThread
SDL_WarpMouseGlobal
SDL_WarpMouseInWindow
SDL_WasInit
SDL_WriteBE16
SDL_WriteBE32
SDL_WriteBE64
SDL_WriteLE16
SDL_WriteLE32
SDL_WriteLE64
SDL_WriteU8
SDL_abs
SDL_acos
SDL_asin
SDL_atan
SDL_atan2
SDL_atof
SDL_atoi
SDL_calloc
SDL_ceil
SDL_copysign
SDL_cos
SDL_cosf
SDL_fabs
SDL_floor
SDL_free
SDL_getenv
SDL_iconv
SDL_iconv_close
SDL_iconv_open
SDL_iconv_string

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Aground/manifest
Aground/regexp.dll
.dll windows:6 windows x86 arch:x86

fb6e03777c2dba58da15bf1c3c21389c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
GetModuleHandleA
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
GetLastError
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
GetCommandLineA
GetCurrentThreadId
DeleteCriticalSection
IsDebuggerPresent
IsProcessorFeaturePresent
GetStdHandle
GetFileType
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
WriteFile
GetModuleFileNameW
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetProcessHeap
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapReAlloc
RtlUnwind
OutputDebugStringW
HeapSize
LCMapStringW
GetStringTypeW
CloseHandle
SetStdHandle
SetFilePointerEx
WriteConsoleW
CreateFileW

Exports

Exports

__neko_entry_point
hx_set_loader
regexp_match__4
regexp_matched__2
regexp_matched_pos__2
regexp_new__1
regexp_new_options__2
regexp_replace__3
regexp_replace_all__3
regexp_replace_fun__3

Sections

.text
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Aground/sound/achievement.ogg
Aground/sound/axe.ogg
Aground/sound/axe_tree.ogg
Aground/sound/blocked.ogg
Aground/sound/boar_death.ogg
Aground/sound/bow.ogg
Aground/sound/build.ogg
Aground/sound/buy.ogg
Aground/sound/cancel.ogg
Aground/sound/death.ogg
Aground/sound/dragon_atk.ogg
Aground/sound/dragon_death.ogg
Aground/sound/dragon_hit1.ogg
Aground/sound/dragon_hit2.ogg
Aground/sound/dragon_hit3.ogg
Aground/sound/drop.ogg
Aground/sound/eat.ogg
Aground/sound/enemy.ogg
Aground/sound/fire.ogg
Aground/sound/game_over.ogg
Aground/sound/hit.ogg
Aground/sound/item.ogg
Aground/sound/levelup.ogg
Aground/sound/low_hp.ogg
Aground/sound/miss.ogg
Aground/sound/move.ogg
Aground/sound/no_boundaries.ogg
Aground/sound/pick.ogg
Aground/sound/rain.ogg
Aground/sound/rat_death.ogg
Aground/sound/rock_door.ogg
Aground/sound/select.ogg
Aground/sound/smelter.ogg
Aground/sound/sword.ogg
Aground/sound/talking1.ogg
Aground/sound/talking2.ogg
Aground/sound/thunder.ogg
Aground/sound/title.ogg
Aground/sound/tree_felled.ogg
Aground/sound/workshop.ogg
Aground/sound/wyrm_death.ogg
Aground/std.dll
.dll windows:6 windows x86 arch:x86

9e9ead288a4b7f2cee17ae973d9bd3fa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

WSAGetLastError
WSAStartup
gethostname
gethostbyname
gethostbyaddr
socket
shutdown
setsockopt
sendto
send
select
recvfrom
recv
ntohs
listen
inet_ntoa
inet_addr
htons
getsockname
getpeername
ioctlsocket
connect
closesocket
bind
accept
__WSAFDIsSet

shlwapi

PathGetDriveNumberW

kernel32

HeapFree
ReadConsoleInputA
SetEndOfFile
SetEnvironmentVariableW
CreateFileW
WriteConsoleW
SetStdHandle
SetEnvironmentVariableA
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
HeapReAlloc
HeapSize
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetModuleFileNameA
GetFileType
SetCurrentDirectoryW
GetCurrentDirectoryW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
GetFileAttributesExW
GetFullPathNameW
Sleep
GetProcessTimes
GetCurrentProcess
GetCurrentProcessId
GetSystemTime
GetModuleFileNameW
MoveFileExW
SystemTimeToFileTime
ReadFile
WriteFile
CloseHandle
DuplicateHandle
CreatePipe
WaitForSingleObject
GetExitCodeProcess
CreateProcessW
GetTickCount
FreeLibrary
GetModuleHandleA
GetProcAddress
EncodePointer
DecodePointer
GetLastError
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
CreateDirectoryW
RemoveDirectoryW
SetConsoleMode
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetStdHandle
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetProcessHeap
RaiseException
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx

Exports

Exports

__neko_entry_point
base_decode__2
base_encode__2
double_bytes__2
double_of_bytes__2
file_close__1
file_contents__1
file_delete__1
file_eof__1
file_exists__1
file_flush__1
file_full_path__1
file_name__1
file_open__2
file_read__4
file_read_char__1
file_seek__3
file_stderr__0
file_stdin__0
file_stdout__0
file_tell__1
file_write__4
file_write_char__2
float_bytes__2
float_of_bytes__2
get_cwd__0
get_env__1
host_local__0
host_resolve__1
host_reverse__1
host_to_string__1
hx_set_loader
parse_xml__2
process_close__1
process_exit__1
process_pid__1
process_run__2
process_stderr_read__4
process_stdin_close__1
process_stdin_write__4
process_stdout_read__4
put_env__2
random_float__1
random_int__2
random_new__0
random_set_seed__2
set_cwd__1
set_time_locale__1
socket_accept__1
socket_bind__3
socket_close__1
socket_connect__3
socket_fast_select__4
socket_host__1
socket_init__0
socket_listen__2
socket_new__1
socket_peer__1
socket_poll__3
socket_poll_alloc__1
socket_poll_events__2
socket_poll_prepare__3
socket_read__1
socket_recv__4
socket_recv_char__1
socket_recv_from__5
socket_select__4
socket_send__4
socket_send_char__2
socket_send_to__5
socket_set_blocking__2
socket_set_fast_send__2
socket_set_timeout__2
socket_shutdown__3
socket_write__2
sprintf__2
string_split__2
sys_command__1
sys_cpu_time__0
sys_create_dir__2
sys_env__0
sys_exe_path__0
sys_exists__1
sys_exit__1
sys_file_type__1
sys_get_pid__0
sys_getch__1
sys_is64__0
sys_read_dir__1
sys_remove_dir__1
sys_rename__2
sys_sleep__1
sys_stat__1
sys_string__0
sys_time__0
url_decode__1
url_encode__1

Sections

.text
Size: 129KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Aground/systools.ndll
.dll windows:6 windows x86 arch:x86

94b59e21a2d7d1bb05047f2fb7e707bc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
WaitForSingleObject
CreateProcessA
MapViewOfFile
UnmapViewOfFile
GetShortPathNameA
CreateFileMappingA
BeginUpdateResourceA
UpdateResourceA
EndUpdateResourceA
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetStringTypeW
CloseHandle
LCMapStringW
HeapSize
LoadLibraryW
OutputDebugStringW
RtlUnwind
GetConsoleMode
GetConsoleCP
FlushFileBuffers
WideCharToMultiByte
FreeEnvironmentStringsW
GetFileSize
GetTempPathA
CreateFileA
GlobalUnlock
GlobalLock
GlobalAlloc
GetProcAddress
GetModuleHandleA
FreeLibrary
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
InterlockedDecrement
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetCurrentThreadId
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
Sleep
IsDebuggerPresent
IsProcessorFeaturePresent
GetStdHandle
GetFileType
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
WriteFile
GetModuleFileNameW
LoadLibraryExW
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetProcessHeap
CreateFileW

user32

WaitForInputIdle
LoadImageA
DestroyIcon
GetCursorPos
InsertMenuItemA
TrackPopupMenu
InsertMenuA
CreatePopupMenu
CreateMenu
SetMenu
ChangeDisplaySettingsExA
GetSystemMetrics
GetAsyncKeyState
MessageBoxA
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
DestroyMenu

comdlg32

GetOpenFileNameA
GetSaveFileNameA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
RegSetValueExA

shell32

Shell_NotifyIconA
ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA

Exports

Exports

browser_launch__1
clipboard_clear__0
clipboard_get_text__0
clipboard_set_text__1
dialogs_dialog_box__3
dialogs_folder__2
dialogs_message_box__3
dialogs_open_file__3
dialogs_save_file__4
display_get_screen_size__0
display_is_mode_supported__3
display_set_default_mode__0
display_set_mode__3
fileutils_get_temp_folder__0
misc_get_key_state__1
neko_init__5
registry_delete_key__2
registry_get_value__3
registry_set_value__4
systools_init__0
systray_create_icon__3
systray_destroy_icon__1
systray_menu_callback__0
win_add_menu_divider__2
win_add_menu_item__3
win_add_menu_submenu__4
win_create_process__5
win_destroy_menu__1
win_destroy_tray_icon__1
win_menu_create__0
win_popup_menu_create__0
win_replace_exe_icon__3
win_show_menu__2
win_show_popup_menu__2

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Aground/zlib.dll
.dll windows:6 windows x86 arch:x86

2c9db726df49710fe2c9815a5654c931

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
GetModuleHandleA
GetProcAddress
EncodePointer
DecodePointer
GetLastError
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetStdHandle
WriteFile
GetModuleFileNameW
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetProcessHeap
GetFileType
CloseHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
RtlUnwind
SetFilePointerEx
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
HeapSize
HeapReAlloc
LCMapStringW
GetStringTypeW
SetStdHandle
WriteConsoleW
CreateFileW

Exports

Exports

__neko_entry_point
deflate_bound__2
deflate_buffer__5
deflate_end__1
deflate_init__1
get_adler32__1
hx_set_loader
inflate_buffer__5
inflate_end__1
inflate_init__1
set_flush_mode__2
update_adler32__4
update_crc32__4

Sections

.text
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

74590b1e2b8a051a479085caa51ecea3

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

Exports

Exports

Sections

.text Size: 5.5MB - Virtual size: 5.5MB

.rdata Size: 1.0MB - Virtual size: 1.0MB

.data Size: 242KB - Virtual size: 270KB

.rsrc Size: 174KB - Virtual size: 174KB

.reloc Size: 567KB - Virtual size: 567KB

fe84f207851131be3462ebd1345f5a2f

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

user32

kernel32

advapi32

winmm

imm32

ole32

oleaut32

version

ws2_32

wldap32

shell32

Exports

Exports

Sections

.text Size: 2.5MB - Virtual size: 2.5MB

.rdata Size: 2.1MB - Virtual size: 2.1MB

.data Size: 21KB - Virtual size: 46KB

.reloc Size: 113KB - Virtual size: 113KB

fb6e03777c2dba58da15bf1c3c21389c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 113KB - Virtual size: 112KB

.rdata Size: 81KB - Virtual size: 80KB

.data Size: 5KB - Virtual size: 12KB

.reloc Size: 6KB - Virtual size: 6KB

9e9ead288a4b7f2cee17ae973d9bd3fa

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

shlwapi

kernel32

Exports

Exports

Sections

.text Size: 129KB - Virtual size: 128KB

.rdata Size: 36KB - Virtual size: 36KB

.data Size: 5KB - Virtual size: 13KB

.reloc Size: 9KB - Virtual size: 9KB

94b59e21a2d7d1bb05047f2fb7e707bc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

.text
Size: 5.5MB - Virtual size: 5.5MB

.rdata
Size: 1.0MB - Virtual size: 1.0MB

.data
Size: 242KB - Virtual size: 270KB

.rsrc
Size: 174KB - Virtual size: 174KB

.reloc
Size: 567KB - Virtual size: 567KB

.text
Size: 2.5MB - Virtual size: 2.5MB

.rdata
Size: 2.1MB - Virtual size: 2.1MB

.data
Size: 21KB - Virtual size: 46KB

.reloc
Size: 113KB - Virtual size: 113KB

.text
Size: 113KB - Virtual size: 112KB

.rdata
Size: 81KB - Virtual size: 80KB

.data
Size: 5KB - Virtual size: 12KB

.reloc
Size: 6KB - Virtual size: 6KB

.text
Size: 129KB - Virtual size: 128KB

.rdata
Size: 36KB - Virtual size: 36KB

.data
Size: 5KB - Virtual size: 13KB

.reloc
Size: 9KB - Virtual size: 9KB

.text
Size: 68KB - Virtual size: 67KB

.rdata
Size: 25KB - Virtual size: 25KB

.data
Size: 5KB - Virtual size: 12KB

.reloc
Size: 8KB - Virtual size: 7KB

.text
Size: 78KB - Virtual size: 77KB

.rdata
Size: 40KB - Virtual size: 40KB

.data
Size: 5KB - Virtual size: 12KB

.reloc
Size: 5KB - Virtual size: 5KB