privateloader | dd2280c5c4080b45f05a207c58ae72be3b0a7dd9594bad63e7ff81c55f850c8e

Sharing

Copy URL Twitter E-mail

General

Target

dd2280c5c4080b45f05a207c58ae72be3b0a7dd9594bad63e7ff81c55f850c8e
Size

21.1MB
MD5

79e707b3a50a5f340701a240f9da2a00
SHA1

8be09d23e0186e5b6a614f5665462736d0be1d6f
SHA256

dd2280c5c4080b45f05a207c58ae72be3b0a7dd9594bad63e7ff81c55f850c8e
SHA512

dbb46b29ad5a29745b05c2f1f0ddf826d54964aa452a3b465b261a3feaf05665a7b2aca4f1ce43089491598a8d7a4902ac956f61fef062aab933855640ceafff
SSDEEP

393216:AYxk4/UXAgh6ocWSJEqK2JimFbp0F0e86lSDRinrT:5n4mRiv

Score

10^/10

privateloader

Malware Config

Signatures

Privateloader family
privateloader

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd2280c5c4080b45f05a207c58ae72be3b0a7dd9594bad63e7ff81c55f850c8e

Files

dd2280c5c4080b45f05a207c58ae72be3b0a7dd9594bad63e7ff81c55f850c8e
.exe windows:5 windows x64 arch:x64

749ea060ac70de19fb42b0ead509b0f3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\buildslave\unity\build\build\WindowsStandaloneSupport\Variations\win64_nondevelopment_mono\player_win_x64.pdb

Imports

hid

HidP_GetButtonCaps
HidP_GetCaps
HidD_GetProductString
HidP_MaxDataListLength
HidP_GetData
HidD_FreePreparsedData
HidD_GetPreparsedData
HidP_GetValueCaps
HidD_GetHidGuid

kernel32

FormatMessageA
SystemTimeToFileTime
GetLocalTime
GetTimeZoneInformation
LocalFree
TerminateThread
GetSystemTimeAsFileTime
GetModuleFileNameW
InitializeCriticalSection
ResetEvent
ReadFile
SetFilePointerEx
WriteFile
SetFilePointer
SetEndOfFile
GetFileAttributesExW
CreateFileW
SetFileAttributesW
GetFileAttributesW
CopyFileW
MoveFileExW
FindClose
FindNextFileW
FindFirstFileW
FindFirstFileExW
ReplaceFileW
GetTempFileNameW
LoadLibraryExW
CreateEventW
GlobalUnlock
GlobalLock
GlobalAlloc
GetModuleHandleA
RemoveDirectoryW
DeleteFileW
SetFileTime
GetSystemTime
GetDiskFreeSpaceExA
lstrcpynA
lstrcpyA
lstrcpynW
GetCommandLineW
CancelIo
GetOverlappedResult
ExpandEnvironmentStringsW
SetLastError
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
GetThreadContext
SuspendThread
RtlCaptureContext
OutputDebugStringA
GetEnvironmentVariableA
GetFileAttributesA
GetModuleFileNameA
GetVersionExA
GetCurrentDirectoryA
VerifyVersionInfoW
VerSetConditionMask
GetVersionExW
GlobalMemoryStatusEx
GetUserDefaultUILanguage
GetComputerNameW
GetTempPathW
LocalAlloc
SetUnhandledExceptionFilter
GetCurrentDirectoryW
OpenEventW
DebugBreak
GetFileSize
FileTimeToDosDateTime
FileTimeToLocalFileTime
lstrlenA
GetFileTime
VirtualQuery
GlobalMemoryStatus
GetFullPathNameW
HeapAlloc
HeapFree
RtlUnwindEx
HeapReAlloc
RtlPcToFileHeader
DecodePointer
EncodePointer
HeapQueryInformation
CreateFileMappingA
DuplicateHandle
CreateMutexA
SetConsoleCtrlHandler
ExitThread
GetCommandLineA
GetStartupInfoW
GetStdHandle
HeapSetInformation
GetVersion
HeapCreate
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
GetLocaleInfoW
UnhandledExceptionFilter
TerminateProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
GetFileType
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
CreateFileA
CompareStringW
SetEnvironmentVariableA
GetProcessHeap
SwitchToThread
SetThreadAffinityMask
GetProcessAffinityMask
InitializeSListHead
InterlockedPushEntrySList
InterlockedPopEntrySList
InterlockedFlushSList
GetThreadPriority
OpenEventA
SetWaitableTimer
CreateWaitableTimerA
GetSystemDirectoryA
GetDriveTypeW
PeekNamedPipe
GetFileInformationByHandle
FindFirstFileExA
GetDriveTypeA
FileTimeToSystemTime
SetConsoleMode
ReadConsoleInputA
GetFullPathNameA
GetTimeFormatA
GetDateFormatA
CreateSemaphoreW
FlushInstructionCache
CreateMutexW
SignalObjectAndWait
GetThreadLocale
VerifyVersionInfoA
ExpandEnvironmentStringsA
FlushConsoleInputBuffer
GetModuleHandleW
GetCurrentThreadId
SetThreadPriority
CreateThread
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
MapViewOfFile
HeapSize
UnmapViewOfFile
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
ReleaseMutex
WaitForSingleObject
GetWindowsDirectoryW
IsDebuggerPresent
GetCurrentThread
GetCurrentProcess
ExitProcess
GetCurrentProcessId
RaiseException
SleepEx
QueryPerformanceFrequency
QueryPerformanceCounter
SetHandleInformation
FormatMessageW
SetDllDirectoryW
LoadLibraryW
GetLastError
CreateDirectoryW
LoadLibraryA
GetProcAddress
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
CreateEventA
SetEvent
ReleaseSemaphore
WaitForSingleObjectEx
Sleep
CloseHandle
CreateSemaphoreA
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
GetSystemInfo
VirtualAlloc
VirtualFree
VirtualProtect
SetErrorMode

user32

MessageBoxW
IsWindowVisible
ScreenToClient
WindowFromPoint
GetCursorPos
GetCaretBlinkTime
EnumDisplaySettingsA
SetClipboardData
EmptyClipboard
OpenClipboard
GetClipboardData
IsClipboardFormatAvailable
CreateIconIndirect
ReleaseDC
GetDC
GetSystemMetrics
SetCursor
wvsprintfA
UpdateWindow
CloseClipboard
MonitorFromWindow
ValidateRect
SetTimer
PeekMessageA
RegisterClassExW
DialogBoxParamW
EndDialog
LoadIconA
SendDlgItemMessageW
SetDlgItemTextA
SetDlgItemTextW
MessageBoxA
CopyRect
OffsetRect
GetAncestor
UnregisterClassW
SetCursorPos
AdjustWindowRectEx
GetWindowPlacement
SetWindowLongA
ChangeDisplaySettingsA
GetDlgItem
SetWindowLongPtrA
CreateDialogParamA
GetWindowLongPtrA
SetWindowPos
GetWindowRect
GetParent
GetThreadDesktop
GetUserObjectInformationA
EnumWindows
RegisterWindowMessageA
SendMessageA
SendMessageTimeoutA
ShowWindow
GetMessageA
KillTimer
LoadImageW
DialogBoxParamA
CheckDlgButton
CreateDialogParamW
PeekMessageW
DispatchMessageW
IsDialogMessageW
MsgWaitForMultipleObjects
EnableWindow
CopyImage
IsDlgButtonChecked
SetWindowTextW
GetWindowLongPtrW
ClipCursor
LoadCursorA
DestroyCursor
DestroyIcon
SetCapture
ReleaseCapture
UnregisterDeviceNotification
DispatchMessageA
TranslateMessage
PtInRect
GetClientRect
GetWindowLongA
GetProcessWindowStation
IsIconic
GetUserObjectInformationW
GetMessageExtraInfo
RegisterDeviceNotificationW
SystemParametersInfoW
ClientToScreen
DefWindowProcW
DestroyWindow
CreateWindowExW
GetAsyncKeyState
GetKeyState
wsprintfA
RegisterRawInputDevices
GetRawInputData
GetRawInputDeviceInfoW
GetRawInputDeviceList
SetForegroundWindow
ShowCursor
GetFocus
SetFocus
EnumDisplayDevicesA
EnumDisplayMonitors
GetMonitorInfoA
RegisterClassW
PostQuitMessage
GetDesktopWindow
SetWindowLongPtrW

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueA

ole32

CoUninitialize
CoInitialize
CoCreateGuid
CoTaskMemAlloc
CoTaskMemFree
CoSetProxyBlanket
StringFromGUID2
PropVariantClear
CoCreateInstance

shlwapi

PathCanonicalizeW
PathFileExistsW
SHDeleteKeyW

advapi32

CryptReleaseContext
RegisterEventSourceW
ReportEventW
DeregisterEventSource
CryptImportKey
CryptVerifySignatureA
CryptDestroyKey
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
RegCreateKeyW
OpenProcessToken
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptAcquireContextA
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
GetUserNameA
GetSidSubAuthority
GetTokenInformation

gdi32

DeleteObject
CreateBitmap
CreateDIBSection
SetPixelFormat
ChoosePixelFormat
GetDeviceCaps
GetObjectA
SwapBuffers

shell32

CommandLineToArgvW
SHGetFolderPathW
ShellExecuteW
SHFileOperationW

opengl32

wglGetCurrentContext
wglCreateContext
wglMakeCurrent
wglDeleteContext
wglGetProcAddress
wglGetCurrentDC

winmm

timeBeginPeriod
waveInGetNumDevs
timeEndPeriod
waveOutGetDevCapsA
waveOutGetDevCapsW
waveOutClose
waveOutOpen
waveOutUnprepareHeader
waveOutWrite
waveOutReset
waveInAddBuffer
timeGetTime
waveOutGetNumDevs
waveInPrepareHeader
waveInUnprepareHeader
waveInGetDevCapsA
waveInGetDevCapsW
waveInStart
waveInOpen
waveInClose
waveInReset
waveOutPrepareHeader
waveOutGetPosition

ws2_32

accept
ntohs
gethostname
socket
WSAGetLastError
connect
WSAAsyncGetHostByName
WSAStartup
inet_ntoa
closesocket
WSACleanup
htonl
bind
htons
inet_addr
WSACancelAsyncRequest
getsockopt
WSAEventSelect
WSACloseEvent
WSACreateEvent
WSAWaitForMultipleEvents
WSAResetEvent
WSAEnumNetworkEvents
WSASetEvent
getpeername
getprotobyname
recv
gethostbyname
ntohl
shutdown
getnameinfo
getaddrinfo
WSAIoctl
recvfrom
sendto
send
select
__WSAFDIsSet
freeaddrinfo
WSASocketA
WSASetLastError
setsockopt
ioctlsocket
getsockname
listen

oleaut32

VariantClear
SysAllocString
SysFreeString
VariantChangeType
VariantInit

imm32

ImmReleaseContext
ImmSetOpenStatus
ImmGetCompositionStringW
ImmGetConversionStatus
ImmAssociateContextEx
ImmAssociateContext
ImmGetContext
ImmSetCompositionStringW

dnsapi

DnsFree
DnsQuery_A

iphlpapi

GetIpAddrTable

winhttp

WinHttpGetIEProxyConfigForCurrentUser

Exports

Exports

??0Allocator@shdfnd@physx@@QEAA@PEBD@Z
??0ErrorHandler@shdfnd@physx@@QEAA@XZ
??0FPUGuard@shdfnd@physx@@QEAA@XZ
??0Foundation@shdfnd@physx@@AEAA@AEAVPxErrorCallback@2@AEAVPxAllocatorCallback@2@@Z
??0MutexImpl@shdfnd@physx@@QEAA@XZ
??0PAUtils@shdfnd@physx@@QEAA@XZ
??0PxFoundation@physx@@QEAA@AEBV01@@Z
??0PxFoundation@physx@@QEAA@XZ
??0ReadWriteLock@shdfnd@physx@@QEAA@XZ
??0SListImpl@shdfnd@physx@@QEAA@XZ
??0SyncImpl@shdfnd@physx@@QEAA@XZ
??0TempAllocator@shdfnd@physx@@QEAA@PEBD@Z
??0ThreadImpl@shdfnd@physx@@QEAA@P6APEAXPEAX@Z0@Z
??0ThreadImpl@shdfnd@physx@@QEAA@XZ
??0Time@shdfnd@physx@@QEAA@XZ
??1ErrorHandler@shdfnd@physx@@QEAA@XZ
??1FPUGuard@shdfnd@physx@@QEAA@XZ
??1Foundation@shdfnd@physx@@EEAA@XZ
??1MutexImpl@shdfnd@physx@@QEAA@XZ
??1PAUtils@shdfnd@physx@@QEAA@XZ
??1PxFoundation@physx@@MEAA@XZ
??1ReadWriteLock@shdfnd@physx@@QEAA@XZ
??1SListImpl@shdfnd@physx@@QEAA@XZ
??1SyncImpl@shdfnd@physx@@QEAA@XZ
??1ThreadImpl@shdfnd@physx@@QEAA@XZ
??4Allocator@shdfnd@physx@@QEAAAEAV012@AEBV012@@Z
??4ErrorHandler@shdfnd@physx@@QEAAAEAV012@AEBV012@@Z
??4FPUGuard@shdfnd@physx@@QEAAAEAV012@AEBV012@@Z
??4MutexImpl@shdfnd@physx@@QEAAAEAV012@AEBV012@@Z
??4PAUtils@shdfnd@physx@@QEAAAEAV012@AEBV012@@Z
??4PxFoundation@physx@@QEAAAEAV01@AEBV01@@Z
??4SListImpl@shdfnd@physx@@QEAAAEAU012@AEBU012@@Z
??4SyncImpl@shdfnd@physx@@QEAAAEAV012@AEBV012@@Z
??4TempAllocator@shdfnd@physx@@QEAAAEAV012@AEBV012@@Z
??4ThreadImpl@shdfnd@physx@@QEAAAEAV012@AEBV012@@Z
??4Time@shdfnd@physx@@QEAAAEAV012@AEBV012@@Z
??_7Foundation@shdfnd@physx@@6B@
??_7PxFoundation@physx@@6B@
??_FAllocator@shdfnd@physx@@QEAAXXZ
??_FTempAllocator@shdfnd@physx@@QEAAXXZ
?MAX_LISTENER_COUNT@ErrorHandler@shdfnd@physx@@2IB
?PxDiagonalize@physx@@YA?AVPxVec3@1@AEBVPxMat33@1@AEAVPxQuat@1@@Z
?PxShortestRotation@physx@@YA?AVPxQuat@1@AEBVPxVec3@1@0@Z
?PxTransformFromPlaneEquation@physx@@YA?AVPxTransform@1@AEBVPxPlane@1@@Z
?PxTransformFromSegment@physx@@YA?AVPxTransform@1@AEBVPxVec3@1@0PEAM@Z
?TlsAlloc@shdfnd@physx@@YAIXZ
?TlsFree@shdfnd@physx@@YAXI@Z
?TlsGet@shdfnd@physx@@YAPEAXI@Z
?TlsSet@shdfnd@physx@@YAIIPEAX@Z
?allocate@Allocator@shdfnd@physx@@QEAAPEAX_KPEBDH@Z
?allocate@TempAllocator@shdfnd@physx@@QEAAPEAX_KPEBDH@Z
?atomicAdd@shdfnd@physx@@YAHPECHH@Z
?atomicCompareExchange@shdfnd@physx@@YAHPECHHH@Z
?atomicCompareExchangePointer@shdfnd@physx@@YAPEAXPEAPECXPEAX1@Z
?atomicDecrement@shdfnd@physx@@YAHPECH@Z
?atomicExchange@shdfnd@physx@@YAHPECHH@Z
?atomicIncrement@shdfnd@physx@@YAHPECH@Z
?atomicMax@shdfnd@physx@@YAHPECHH@Z
?computeQuatFromNormal@shdfnd@physx@@YA?AVPxQuat@2@AEBVPxVec3@2@@Z
?createInstance@Foundation@shdfnd@physx@@SAPEAV123@IAEAVPxErrorCallback@3@AEAVPxAllocatorCallback@3@@Z
?deallocate@Allocator@shdfnd@physx@@QEAAXPEAX@Z
?deallocate@TempAllocator@shdfnd@physx@@QEAAXPEAX@Z
?debugEvent@PAUtils@shdfnd@physx@@QEAAXGII@Z
?decRefCount@Foundation@shdfnd@physx@@SAXXZ
?destroyInstance@Foundation@shdfnd@physx@@SAXXZ
?disableFPExceptions@shdfnd@physx@@YAXXZ
?enableFPExceptions@shdfnd@physx@@YAXXZ
?error@Foundation@shdfnd@physx@@QEAAXW4Enum@PxErrorCode@3@PEBDH1ZZ
?errorImpl@Foundation@shdfnd@physx@@QEAAXW4Enum@PxErrorCode@3@PEBDH1PEAD@Z
?flush@SListImpl@shdfnd@physx@@QEAAPEAVSListEntry@23@XZ
?getAllocator@Foundation@shdfnd@physx@@UEBAAEAVPxBroadcastingAllocator@3@XZ
?getAllocator@shdfnd@physx@@YAAEAVPxAllocatorCallback@2@XZ
?getAllocatorCallback@Foundation@shdfnd@physx@@UEBAAEAVPxAllocatorCallback@3@XZ
?getBootCounterFrequency@Time@shdfnd@physx@@SAAEBUCounterFrequencyToTensOfNanos@23@XZ
?getCallbackCount@ErrorHandler@shdfnd@physx@@QEBAIXZ
?getCheckedAllocator@Foundation@shdfnd@physx@@QEAAAEAVPxAllocatorCallback@3@XZ
?getCounterFrequency@Time@shdfnd@physx@@SA?AUCounterFrequencyToTensOfNanos@23@XZ
?getCurrentCounterValue@Time@shdfnd@physx@@SA_KXZ
?getCurrentTimeInTensOfNanoSeconds@Time@shdfnd@physx@@SA_KXZ
?getDefaultStackSize@ThreadImpl@shdfnd@physx@@SAIXZ
?getElapsedSeconds@Time@shdfnd@physx@@QEAANXZ
?getErrorCallback@ErrorHandler@shdfnd@physx@@QEBAPEAVPxErrorCallback@3@H@Z
?getErrorCallback@Foundation@shdfnd@physx@@UEBAAEAVPxErrorCallback@3@XZ
?getErrorHandler@Foundation@shdfnd@physx@@QEAAAEAVErrorHandler@23@XZ
?getErrorLevel@Foundation@shdfnd@physx@@UEBA?AW4Enum@PxErrorCode@3@XZ
?getErrorMutex@Foundation@shdfnd@physx@@QEAAAEAV?$MutexT@V?$ReflectionAllocator@VMutexImpl@shdfnd@physx@@@shdfnd@physx@@@23@XZ
?getId@ThreadImpl@shdfnd@physx@@SA_KXZ
?getInstance@Foundation@shdfnd@physx@@SAAEAV123@XZ
?getLastTime@Time@shdfnd@physx@@QEBANXZ
?getMaxCallbackNum@ErrorHandler@shdfnd@physx@@QEBAIXZ
?getNamedAllocMap@Foundation@shdfnd@physx@@QEAAAEAV?$HashMap@PEBVNamedAllocator@shdfnd@physx@@PEBDU?$Hash@PEBVNamedAllocator@shdfnd@physx@@@23@VNonTrackingAllocator@23@@23@XZ
?getNamedAllocMutex@Foundation@shdfnd@physx@@QEAAAEAV?$MutexT@V?$ReflectionAllocator@VMutexImpl@shdfnd@physx@@@shdfnd@physx@@@23@XZ
?getNbPhysicalCores@ThreadImpl@shdfnd@physx@@SAIXZ
?getPAUtils@Foundation@shdfnd@physx@@QEAAAEAVPAUtils@23@XZ
?getPriority@ThreadImpl@shdfnd@physx@@SA?AW4Enum@ThreadPriority@23@_K@Z
?getReportAllocationNames@Foundation@shdfnd@physx@@UEBA_NXZ
?getSize@MutexImpl@shdfnd@physx@@SAAEBIXZ
?getSize@SListImpl@shdfnd@physx@@SAAEBIXZ
?getSize@SyncImpl@shdfnd@physx@@SAAEBIXZ
?getSize@ThreadImpl@shdfnd@physx@@SAAEBIXZ
?getTempAllocFreeTable@Foundation@shdfnd@physx@@QEAAAEAV?$Array@PEATTempAllocatorChunk@shdfnd@physx@@VAllocator@23@@23@XZ
?getTempAllocMutex@Foundation@shdfnd@physx@@QEAAAEAV?$MutexT@V?$ReflectionAllocator@VMutexImpl@shdfnd@physx@@@shdfnd@physx@@@23@XZ
?getWarnOnceTimestamp@Foundation@shdfnd@physx@@SAIXZ
?incRefCount@Foundation@shdfnd@physx@@SAXXZ
?integrateTransform@shdfnd@physx@@YAXAEBVPxTransform@2@AEBVPxVec3@2@1MAEAV32@@Z
?isEnabled@PAUtils@shdfnd@physx@@QEAA_NXZ
?isEventEnabled@PAUtils@shdfnd@physx@@QEAA_NG@Z
?kill@ThreadImpl@shdfnd@physx@@QEAAXXZ
?lock@MutexImpl@shdfnd@physx@@QEAAXXZ
?lock@PAUtils@shdfnd@physx@@QEAA_NXZ
?lockReader@ReadWriteLock@shdfnd@physx@@QEAAXXZ
?lockWriter@ReadWriteLock@shdfnd@physx@@QEAAXXZ
?mInstance@Foundation@shdfnd@physx@@0PEAV123@EA
?mRefCount@Foundation@shdfnd@physx@@0IA
?mWarnOnceTimestap@Foundation@shdfnd@physx@@0IA
?optimizeBoundingBox@shdfnd@physx@@YA?AVPxVec3@2@AEAVPxMat33@2@@Z
?peekElapsedSeconds@Time@shdfnd@physx@@QEAANXZ
?pop@SListImpl@shdfnd@physx@@QEAAPEAVSListEntry@23@XZ
?push@SListImpl@shdfnd@physx@@QEAAXPEAVSListEntry@23@@Z
?quit@ThreadImpl@shdfnd@physx@@QEAAXXZ
?quitIsSignalled@ThreadImpl@shdfnd@physx@@QEAA_NXZ
?rawEvent@PAUtils@shdfnd@physx@@QEAAXGIIE@Z
?rawEventWithTimestamp@PAUtils@shdfnd@physx@@QEAA_NG_KIIE@Z
?registerErrorCallback@ErrorHandler@shdfnd@physx@@QEAAHAEAVPxErrorCallback@3@@Z
?registerEvent@PAUtils@shdfnd@physx@@QEAAGPEBD@Z
?release@Foundation@shdfnd@physx@@UEAAXXZ
?reportError@ErrorHandler@shdfnd@physx@@QEAAXW4Enum@PxErrorCode@3@PEBD1H@Z
?reset@SyncImpl@shdfnd@physx@@QEAAXXZ
?sNumTensOfNanoSecondsInASecond@Time@shdfnd@physx@@2_KB
?set@SyncImpl@shdfnd@physx@@QEAAXXZ
?setAffinityMask@ThreadImpl@shdfnd@physx@@QEAAII@Z
?setErrorLevel@Foundation@shdfnd@physx@@UEAAXW4Enum@PxErrorCode@3@@Z
?setName@ThreadImpl@shdfnd@physx@@QEAAXPEBD@Z
?setPriority@ThreadImpl@shdfnd@physx@@QEAAXW4Enum@ThreadPriority@23@@Z
?setReportAllocationNames@Foundation@shdfnd@physx@@UEAAX_N@Z
?signalQuit@ThreadImpl@shdfnd@physx@@QEAAXXZ
?sleep@ThreadImpl@shdfnd@physx@@SAXI@Z
?slerp@shdfnd@physx@@YA?AVPxQuat@2@MAEBV32@0@Z
?start@ThreadImpl@shdfnd@physx@@QEAAXIPEAVRunnable@23@@Z
?startEvent@PAUtils@shdfnd@physx@@QEAAXGG@Z
?statEvent@PAUtils@shdfnd@physx@@QEAAXGI@Z
?statEvent@PAUtils@shdfnd@physx@@QEAAXGII@Z
?stopEvent@PAUtils@shdfnd@physx@@QEAAXGG@Z
?trylock@MutexImpl@shdfnd@physx@@QEAA_NXZ
?unRegisterErrorCallback@ErrorHandler@shdfnd@physx@@QEAAXAEAVPxErrorCallback@3@@Z
?unRegisterErrorCallback@ErrorHandler@shdfnd@physx@@QEAAXH@Z
?unlock@MutexImpl@shdfnd@physx@@QEAAXXZ
?unlock@PAUtils@shdfnd@physx@@QEAA_NXZ
?unlockReader@ReadWriteLock@shdfnd@physx@@QEAAXXZ
?unlockWriter@ReadWriteLock@shdfnd@physx@@QEAAXXZ
?wait@SyncImpl@shdfnd@physx@@QEAA_NI@Z
?waitForQuit@ThreadImpl@shdfnd@physx@@QEAA_NXZ
?waitForever@SyncImpl@shdfnd@physx@@2IB
?yield@ThreadImpl@shdfnd@physx@@SAXXZ
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
PxCreateFoundation
PxGetFoundation

Sections

.text
Size: 16.3MB - Virtual size: 16.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 586KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 837KB - Virtual size: 836KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.trace
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data1
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 341KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 165KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

749ea060ac70de19fb42b0ead509b0f3

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

hid

kernel32

user32

version

ole32

shlwapi

advapi32

gdi32

shell32

opengl32

winmm

ws2_32

oleaut32

imm32

dnsapi

iphlpapi

winhttp

Exports

Exports

Sections

.text Size: 16.3MB - Virtual size: 16.3MB

.rdata Size: 2.9MB - Virtual size: 2.9MB

.data Size: 586KB - Virtual size: 1.5MB

.pdata Size: 837KB - Virtual size: 836KB

.rodata Size: 3KB - Virtual size: 2KB

text Size: 13KB - Virtual size: 12KB

data Size: 32KB - Virtual size: 32KB

.trace Size: 3KB - Virtual size: 2KB

.data1 Size: 512B - Virtual size: 64B

_RDATA Size: 4KB - Virtual size: 4KB

.rsrc Size: 341KB - Virtual size: 340KB

.reloc Size: 165KB - Virtual size: 164KB

.text
Size: 16.3MB - Virtual size: 16.3MB

.rdata
Size: 2.9MB - Virtual size: 2.9MB

.data
Size: 586KB - Virtual size: 1.5MB

.pdata
Size: 837KB - Virtual size: 836KB

.rodata
Size: 3KB - Virtual size: 2KB

text
Size: 13KB - Virtual size: 12KB

data
Size: 32KB - Virtual size: 32KB

.trace
Size: 3KB - Virtual size: 2KB

.data1
Size: 512B - Virtual size: 64B

_RDATA
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 341KB - Virtual size: 340KB

.reloc
Size: 165KB - Virtual size: 164KB