Asphalt9_Steam_x64_rtl[.]exe

Resubmissions

10/05/2024, 22:20

240510-189qxach8y 3

Sharing

Copy URL Twitter E-mail

General

Target

Asphalt9_Steam_x64_rtl.exe
Size

98.2MB
MD5

e8aaa3f078e335203a46c28556ecd3a0
SHA1

5343d06145adc5a79eac62bb39831112de05d3a1
SHA256

29860250c772b24995bc3d4be6a921cf41812c520d2f683cf27bb55fd1d7f1f1
SHA512

a87f42ed33f72ab6bd98f6e78871872d35d860031fc7cfe453f8229ce3a9910ee774938f1c53d5a3f05880ff83dfc0e89f1537f185db7d2610a73a2c33f30d3d
SSDEEP

786432:pyBQz2wH3gUBBKS7jpUlT7aUzrvd8ayjedAtEMsUC2WK+jok3nfdOZG:4HUBCaaV8A9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Asphalt9_Steam_x64_rtl.exe

Files

Asphalt9_Steam_x64_rtl.exe
.exe windows:6 windows x64 arch:x64

4e61f966914792df22be3a6f0cfa5f3a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Gitlab\builds\M8YAucKc\0\Asphalt9_version\release\Asphalt9_Steam_x64_rtl.pdb

Imports

steam_api64

SteamInternal_FindOrCreateUserInterface
SteamAPI_Init
SteamInternal_CreateInterface
SteamAPI_RegisterCallResult
SteamAPI_UnregisterCallResult
SteamAPI_RegisterCallback
SteamAPI_UnregisterCallback
SteamAPI_RunCallbacks
SteamInternal_ContextInit
SteamAPI_GetHSteamUser
SteamAPI_Shutdown
SteamAPI_RestartAppIfNecessary

ws2_32

getaddrinfo
htons
htonl
getsockname
ioctlsocket
WSAGetLastError
bind
__WSAFDIsSet
recv
send
select
closesocket
freeaddrinfo
connect
socket
accept
listen
ntohl
ntohs
recvfrom
sendto
setsockopt
gethostname
shutdown
WSASend
WSASetLastError
getpeername
getsockopt
WSAAddressToStringW
WSASocketW
WSARecv
WSAIoctl
WSAStringToAddressW
getnameinfo
gethostbyname
WSACleanup
WSAStartup
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAResetEvent
WSASetEvent
WSAWaitForMultipleEvents
WSAPoll

kernel32

FormatMessageW
SetLastError
GetStdHandle
GetFileType
CloseHandle
RaiseException
SetUnhandledExceptionFilter
SetEvent
WaitForSingleObject
SleepEx
CreateEventW
Sleep
GetCurrentProcess
TerminateProcess
CreateThread
CreateProcessW
OpenProcess
GetVersion
CreateDirectoryW
CreateFileW
DeleteFileW
GetFileAttributesW
LockFileEx
SetEndOfFile
UnlockFileEx
FindClose
GetProcAddress
LoadLibraryW
GetModuleHandleW
DuplicateHandle
GetSystemInfo
SetNamedPipeHandleState
TransactNamedPipe
CreateNamedPipeW
WaitNamedPipeW
GetFileSizeEx
ReadFile
SetFilePointerEx
WriteFile
GetLocalTime
FindNextFileW
GetFileTime
RemoveDirectoryW
MoveFileExW
GetSystemTimeAsFileTime
MultiByteToWideChar
WideCharToMultiByte
RtlCaptureContext
TerminateThread
SuspendThread
GetCurrentProcessId
FreeLibrary
QueryPerformanceCounter
QueryPerformanceFrequency
ReleaseMutex
CreateMutexA
GetFileAttributesExA
GetModuleHandleA
GetProcessAffinityMask
SetProcessAffinityMask
MoveFileExA
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
InitializeCriticalSectionEx
SwitchToThread
GetCurrentThread
SetThreadPriority
TlsGetValue
TlsSetValue
SetThreadAffinityMask
GetLogicalProcessorInformation
LoadLibraryA
GetCurrentProcessorNumber
GetFileSize
GetOverlappedResult
InitializeConditionVariable
WakeConditionVariable
SleepConditionVariableCS
OutputDebugStringW
ReleaseSRWLockShared
FindFirstFileExW
GetCurrentThreadId
RtlCaptureStackBackTrace
GetFileAttributesExW
AcquireSRWLockShared
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeSRWLock
OutputDebugStringA
GlobalUnlock
GlobalLock
GetSystemDirectoryA
ConvertThreadToFiber
ConvertFiberToThread
CreateFiber
DeleteFiber
SwitchToFiber
GetModuleHandleExW
FindFirstFileW
SystemTimeToFileTime
InitOnceExecuteOnce
InitializeSListHead
IsProcessorFeaturePresent
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
ResetEvent
GetLocaleInfoEx
GetNativeSystemInfo
Process32Next
Process32First
CreateToolhelp32Snapshot
DeleteFileA
SetWaitableTimer
CreateIoCompletionPort
InitializeCriticalSectionAndSpinCount
VerifyVersionInfoA
VerSetConditionMask
FormatMessageA
QueueUserAPC
TlsFree
WaitForMultipleObjects
LocalFree
TlsAlloc
GetLastError
CreateWaitableTimerA
GetTickCount
IsDebuggerPresent
GetModuleFileNameW
PostQueuedCompletionStatus
InitializeCriticalSection
GetGeoInfoA
GetLocaleInfoA
GetUserGeoID
GetComputerNameW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileInformationByHandleEx
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GlobalMemoryStatusEx
GetComputerNameA
SetFilePointer
HeapAlloc
GetProcessHeap
HeapFree
CreateEventA
CreateFileA
K32GetModuleFileNameExW
GetEnvironmentVariableW
GetCurrentDirectoryW
GetDiskFreeSpaceA
ResumeThread
SetFileTime
GetModuleFileNameA
CreateEventExA
CreateFile2
FindFirstFileExA
FindNextFileA
WaitForSingleObjectEx
GetSystemTime
GetEnvironmentVariableA
FindFirstFileA
CreateSymbolicLinkW
CreateHardLinkW
GetQueuedCompletionStatus

user32

PeekMessageA
TranslateMessage
DispatchMessageA
GetWindowLongPtrA
GetMessageTime
GetWindowThreadProcessId
GetTouchInputInfo
ScreenToClient
CloseTouchInputHandle
ShowCursor
SetProcessDPIAware
EnumDisplayMonitors
GetMonitorInfoA
SetProcessDpiAwarenessContext
GetRawInputDeviceList
GetKeyboardLayout
SetWindowTextW
PostMessageA
EnumDisplayDevicesA
GetForegroundWindow
GetWindowTextLengthW
GetWindowTextW
MessageBoxW
GetClipboardData
GetUserObjectInformationW
SetFocus
SetCapture
GetProcessWindowStation
SetCursorPos
SetWindowLongA
GetWindowLongA
GetKeyState
DeferWindowPos
DestroyWindow
BeginDeferWindowPos
MapVirtualKeyA
LoadIconA
RegisterClassA
AdjustWindowRectEx
SetForegroundWindow
GetWindowRect
MonitorFromWindow
EnumDisplaySettingsA
RegisterTouchWindow
UnregisterTouchWindow
UnregisterClassA
GetWindowTextA
EnumThreadWindows
GetMonitorInfoW
GetDisplayConfigBufferSizes
QueryDisplayConfig
DisplayConfigGetDeviceInfo
SetTimer
GetAsyncKeyState
KillTimer
BeginPaint
DrawTextA
EndPaint
TrackMouseEvent
UnregisterDeviceNotification
UnhookWindowsHookEx
SetWindowsHookExA
RegisterDeviceNotificationA
CallNextHookEx
LoadImageA
LoadCursorA
SetWindowPos
ShowWindow
DefWindowProcA
CreateWindowExA
BringWindowToTop
RegisterClassExA
EnableWindow
SendMessageA
IsWindow
CallWindowProcA
SetWindowLongPtrA
GetSystemMetrics
CloseClipboard
OpenClipboard
MessageBoxA
ReleaseDC
GetDC
GetClientRect
GetActiveWindow
EndDeferWindowPos

advapi32

CredFree
RegQueryInfoKeyA
BuildSecurityDescriptorW
RegEnumValueA
RegQueryValueExA
CredWriteA
CredReadA
CredDeleteA
SystemFunction036
RegGetValueA
DeregisterEventSource
BuildExplicitAccessWithNameW
ConvertStringSecurityDescriptorToSecurityDescriptorW
ReportEventW
RegisterEventSourceW
RegOpenKeyExA
RegCloseKey
RegOpenKeyA

msvcp140

?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
_Cnd_timedwait
?_Throw_Cpp_error@std@@YAXH@Z
_Mtx_current_owns
_Thrd_sleep
?_Xbad_alloc@std@@YAXXZ
?_Winerror_map@std@@YAHH@Z
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
??_7_Facet_base@std@@6B@
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
??_7facet@locale@std@@6B@
??0facet@locale@std@@IEAA@_K@Z
?id@?$collate@D@std@@2V0locale@2@A
_Strxfrm
_Strcoll
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@AEAD@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?putback@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
_Mtx_trylock
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Ios_base_dtor@ios_base@std@@CAXPEAV12@@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??_7ios_base@std@@6B@
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@F@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_J@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAM@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAF@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_K@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z
?classic@locale@std@@SAAEBV12@XZ
_Thrd_id
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?toupper@?$ctype@D@std@@QEBADD@Z
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?in_avail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JXZ
?sgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEAD_J@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
_Cnd_register_at_thread_exit
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
_Cnd_unregister_at_thread_exit
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
_Thrd_join
_Cnd_do_broadcast_at_thread_exit
_Thrd_detach
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
??_7codecvt_base@std@@6B@
_Tolower
??_7ctype_base@std@@6B@
_Toupper
?_Init@ios_base@std@@IEAAXXZ
??1ios_base@std@@UEAA@XZ
?clear@ios_base@std@@QEAAXH_N@Z
??1ctype_base@std@@UEAA@XZ
??0ctype_base@std@@QEAA@_K@Z
?do_encoding@codecvt_base@std@@MEBAHXZ
?do_max_length@codecvt_base@std@@MEBAHXZ
?_Getctype@_Locinfo@std@@QEBA?AU_Ctypevec@@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
?readsome@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_JPEAD_J@Z
?swap@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXAEAV12@@Z
?swap@?$basic_iostream@DU?$char_traits@D@std@@@std@@IEAAXAEAV12@@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
_Mtx_init_in_situ
_Cnd_init_in_situ
_Cnd_signal
?_Syserror_map@std@@YAPEBDH@Z
_Cnd_destroy_in_situ
_Cnd_broadcast
_Cnd_wait
_Thrd_yield
_Mtx_destroy_in_situ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
_Mtx_lock
_Query_perf_frequency
_Query_perf_counter
_Xtime_get_ticks
??Bid@locale@std@@QEAA_KXZ
?id@?$ctype@D@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Random_device@std@@YAIXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@PEAV32@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z

dbghelp

SymCleanup
SymInitialize
SymFromAddr
SymGetLineFromAddr64
SymSetOptions

powrprof

CallNtPowerInformation

imagehlp

MapFileAndCheckSumA

vcruntime140

memset
memchr
memcmp
strrchr
__C_specific_handler
memmove
__std_terminate
_purecall
__current_exception_context
__std_exception_copy
__std_exception_destroy
memcpy
strchr
__std_type_info_compare
strstr
_CxxThrowException
__intrinsic_setjmp
wcsstr
longjmp
__current_exception

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_initialize_onexit_table
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
__p___argv
__p___argc
_exit
_invalid_parameter_noinfo_noreturn
_crt_atexit
abort
_errno
signal
terminate
exit
strerror
_beginthreadex
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
_invoke_watson
_beginthread
_seh_filter_exe
_set_app_type
raise
strerror_s
__sys_nerr
_getpid
fesetround

api-ms-win-crt-time-l1-1-0

_localtime64
_ctime64
_mktime64
_gmtime64
_mkgmtime64
_ftime64_s
_gmtime64_s
_difftime64
_ftime64
clock
asctime
_time64
strftime

api-ms-win-crt-utility-l1-1-0

bsearch
qsort
srand
rand

api-ms-win-crt-math-l1-1-0

expf
floor
floorf
cosh
logf
sin
sinf
acosf
atan2f
log10
modf
round
log2
frexp
exp2f
__setusermatherr
fmodf
log2f
cosf
ldexp
powf
_dclass
atanf
log10f
lroundf
modff
roundf
atan
cos
sinh
asin
sqrtf
acos
fabs
fmod
tan
log
atan2
asinf
exp
tanh
sqrt
pow
tanf

api-ms-win-crt-heap-l1-1-0

_msize
_aligned_free
_aligned_malloc
malloc
_set_new_mode
_callnewh
calloc
realloc
free

api-ms-win-crt-convert-l1-1-0

strtoul
atof
_strtod_l
strtod
wcstombs
strtoll
strtoull
wcstol
strtol
atoi
strtof

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
fflush
__stdio_common_vfprintf
__stdio_common_vsprintf_p
__stdio_common_vsscanf
__stdio_common_vswprintf_s
_get_stream_buffer_pointers
fgetc
fgetpos
fputc
fsetpos
setvbuf
ungetc
__stdio_common_vsnwprintf_s
fseek
ftell
__stdio_common_vsprintf_s
__stdio_common_vsnprintf_s
puts
_getcwd
__stdio_common_vswprintf
feof
rewind
__stdio_common_vswscanf
fread
fopen
ferror
fclose
_wfopen
_set_fmode
__p__commode
_fseeki64
__stdio_common_vsprintf
setbuf
fwrite
_open
_write
_read
getc
clearerr
_lseeki64
fputs
_setmode
_fileno
fgets
_locking
_close

api-ms-win-crt-string-l1-1-0

isalnum
isspace
strncpy
strcmp
_strnicmp
isdigit
isxdigit
isupper
strtok
strspn
strcspn
_strdup
isalpha
islower
strpbrk
toupper
iscntrl
wcscpy_s
strcpy_s
_stricmp
tolower
strncmp
_wcsicmp
wcscat_s

api-ms-win-crt-filesystem-l1-1-0

_fstat64i32
_unlock_file
_wremove
_stat64i32
_wrmdir
_fstat64
_stat64
_access
_wstat64i32
_unlink
_lock_file
_wstat64
remove

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-locale-l1-1-0

_configthreadlocale
_create_locale

winmm

waveOutReset
waveOutWrite
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutClose
waveInClose
waveOutOpen
waveInReset

crypt32

CertCloseStore
CertFreeCertificateContext
CertEnumCertificatesInStore
CertOpenSystemStoreA

iphlpapi

GetAdaptersInfo

anzu

Anzu_MetricGet
Anzu_MetricSet
Anzu_RegisterTexturePlacementProgressCallback
Anzu_SetGDPRConsent
Anzu_MetricSetS
Anzu_MetricGetS
Anzu_ApplicationActive
Anzu__Texture_RemoveInstance
Anzu_RegisterMessageCallback
Anzu_RegisterTexturePlaybackProgressCallback
Anzu__Texture_PausePlayback
Anzu__Texture_UpdateData
Anzu_ApplicationQuit
Anzu__Texture_ResumePlayback
Anzu__Texture_SetVisibility
Anzu__Texture_CreateInstanceForTexture
Anzu_RegisterTextureInitCallback
Anzu_FreeString
Anzu__Texture_SetVisibilityScore
Anzu_RegisterTextureImpressionCallback
Anzu_SetLogLevel
Anzu_RegisterTextureUpdateCallback
Anzu_Initialize
Anzu_Uninitialize

version

GetFileVersionInfoW
GetFileVersionInfoExW
GetFileVersionInfoSizeExW
GetFileVersionInfoSizeW
VerQueryValueW

shlwapi

PathRemoveFileSpecA
PathCanonicalizeA
PathIsRelativeW
PathFileExistsW

api-ms-win-core-path-l1-1-0

PathCchRemoveFileSpec
PathCchCanonicalizeEx
PathCchAppend

rpcrt4

RpcStringFreeA
UuidCreate
UuidToStringA

dinput8

DirectInput8Create

setupapi

SetupDiEnumDeviceInterfaces
SetupDiEnumDeviceInfo
SetupDiGetDevicePropertyW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA

wlanapi

WlanEnumInterfaces
WlanFreeMemory
WlanOpenHandle

ole32

CoTaskMemFree
CoCreateGuid
PropVariantClear
CoTaskMemAlloc
CoSetProxyBlanket
CLSIDFromString
StringFromGUID2
OleUninitialize
CLSIDFromProgID
OleInitialize
CoCreateInstance
CoUninitialize
CoInitializeEx

libcef

cef_execute_process
cef_api_hash
cef_string_userfree_utf16_free
cef_enable_highdpi_support
cef_initialize
cef_string_list_alloc
cef_browser_host_create_browser
cef_string_utf16_set
cef_string_utf8_clear
cef_string_utf8_to_utf16
cef_string_utf16_to_utf8
cef_string_utf16_clear
cef_log
cef_uriencode
cef_string_map_free
cef_string_map_alloc
cef_string_multimap_key
cef_string_list_append
cef_base64encode
cef_string_multimap_alloc
cef_string_utf16_cmp
cef_string_multimap_value
cef_string_map_append
cef_string_list_value
cef_string_list_size
cef_string_multimap_free
cef_string_map_size
cef_string_multimap_size
cef_string_map_value
cef_string_multimap_append
cef_string_map_key
cef_string_list_free

gdi32

SetBkMode
ChoosePixelFormat
SetPixelFormat
CreateSolidBrush
SwapBuffers
GetDeviceCaps
CreateFontA
DeleteObject
RoundRect
CreatePen
SelectObject

shell32

SHGetKnownFolderPath
ShellExecuteA

oleaut32

VariantClear
SysAllocString
SysFreeString

api-ms-win-crt-multibyte-l1-1-0

_mbspbrk

d3d11

D3D11CreateDevice

d3d12

ord101
D3D12SerializeRootSignature
ord102
D3D12SerializeVersionedRootSignature

opengl32

glGetIntegerv
glScissor
glStencilFunc
glGetError
glStencilMask
glTexImage2D
glGetString
glGenTextures
glFrontFace
glFlush
glFinish
glEnable
glDrawElements
glDrawArrays
glReadPixels
glPolygonOffset
glDepthMask
glDepthFunc
glDeleteTextures
glCullFace
glColorMask
glClearStencil
glClearColor
glClear
glBindTexture
glTexParameteri
glTexSubImage2D
glViewport
wglCreateContext
wglMakeCurrent
wglDeleteContext
wglGetProcAddress
glReadBuffer
wglGetCurrentContext
wglShareLists
glPixelStorei
glDisable

glu32

gluErrorString

d3dcompiler_47

D3DCompile

comctl32

ord410
ord413
ord17

dxgi

CreateDXGIFactory2
CreateDXGIFactory

dxcompiler

DxcCreateInstance

bcrypt

BCryptGenRandom

xinput9_1_0

XInputGetState
XInputGetCapabilities

hid

HidD_GetPreparsedData
HidD_GetAttributes
HidP_GetCaps
HidD_FreePreparsedData
HidD_GetSerialNumberString
HidD_GetFeature
HidD_GetHidGuid

Exports

Exports

AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
cbrt

Sections

.text
Size: 86.0MB - Virtual size: 86.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8.4MB - Virtual size: 8.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 184KB - Virtual size: 694KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

CPADinfo
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 210KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 534KB - Virtual size: 533KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

4e61f966914792df22be3a6f0cfa5f3a

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

steam_api64

ws2_32

kernel32

user32

advapi32

msvcp140

dbghelp

powrprof

imagehlp

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-locale-l1-1-0

winmm

crypt32

iphlpapi

anzu

version

shlwapi

api-ms-win-core-path-l1-1-0

rpcrt4

dinput8

setupapi

wlanapi

ole32

libcef

gdi32

shell32

oleaut32

api-ms-win-crt-multibyte-l1-1-0

d3d11

d3d12

opengl32

glu32

d3dcompiler_47

comctl32

dxgi

dxcompiler

bcrypt

xinput9_1_0

hid

Exports

Exports

Sections

.text Size: 86.0MB - Virtual size: 86.0MB

.rdata Size: 8.4MB - Virtual size: 8.4MB

.data Size: 184KB - Virtual size: 694KB

.pdata Size: 3.0MB - Virtual size: 3.0MB

CPADinfo Size: 512B - Virtual size: 56B

_RDATA Size: 12KB - Virtual size: 11KB

.rsrc Size: 210KB - Virtual size: 209KB

.reloc Size: 534KB - Virtual size: 533KB

.text
Size: 86.0MB - Virtual size: 86.0MB

.rdata
Size: 8.4MB - Virtual size: 8.4MB

.data
Size: 184KB - Virtual size: 694KB

.pdata
Size: 3.0MB - Virtual size: 3.0MB

CPADinfo
Size: 512B - Virtual size: 56B

_RDATA
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 210KB - Virtual size: 209KB

.reloc
Size: 534KB - Virtual size: 533KB