C:\SMS\branches\Phoenix\Cert\depot\Phoenix\trunk\src\App\Builds\X64PhoenixPublishAVX\pCARS2AVX.pdb
Static task
static1
1 signatures
General
-
Target
pCARS2AVX.exe
-
Size
38.3MB
-
MD5
3050fbb84bfd7220e09a3d47d4588c98
-
SHA1
e1206bfac987b3a4be49af5d9b605195fc022197
-
SHA256
601a3db980618791c87eef33cf3944d36c94e8b6dd05d147a3651241bf29089d
-
SHA512
ac190786989399c56d4e7ce267b98036afa481b3f4f7ff91c87aa6ce014f6c15bc81565721c7f3bb05f4139c6b409882ab8f9279e44efaa52d9df0f1d082c4bc
-
SSDEEP
393216:FlK0aWKyjAfcanKWE8XiZybXNfvJWD+dLIVq4L8R8EotS:Fua3TBhzEN
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource pCARS2AVX.exe
Files
-
pCARS2AVX.exe.exe windows:6 windows x64 arch:x64
1983f92862c4dbd0cd0dc1d26decfdc2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
steam_api64
SteamAPI_RegisterCallback
SteamAPI_UnregisterCallback
SteamUtils
SteamFriends
SteamClient
SteamAPI_UnregisterCallResult
SteamMatchmakingServers
SteamMatchmaking
SteamAPI_RegisterCallResult
SteamNetworking
SteamAPI_Init
SteamAPI_Shutdown
SteamAPI_RunCallbacks
SteamUserStats
SteamHTTP
SteamUGC
SteamRemoteStorage
SteamApps
SteamUser
winmm
waveOutReset
waveOutOpen
waveOutGetDevCapsW
waveOutWrite
waveOutUnprepareHeader
waveOutClose
waveOutPrepareHeader
timeGetTime
waveOutGetPosition
waveOutGetNumDevs
timeBeginPeriod
timeEndPeriod
ws2_32
recvfrom
gethostname
gethostbyname
getnameinfo
accept
freeaddrinfo
getaddrinfo
WSAIoctl
ntohs
setsockopt
socket
closesocket
getsockopt
getsockname
shutdown
connect
bind
send
recv
WSASetLastError
select
inet_pton
__WSAFDIsSet
WSAGetLastError
getpeername
WSACleanup
WSAStartup
sendto
inet_addr
htons
listen
ioctlsocket
kernel32
LocalFree
GetTickCount64
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
Sleep
SleepEx
FormatMessageA
WaitForSingleObjectEx
GetStdHandle
GetFileType
PeekNamedPipe
FreeLibrary
GetProcAddress
WaitForMultipleObjects
ExpandEnvironmentStringsA
VerSetConditionMask
GetSystemDirectoryA
GetModuleHandleA
LoadLibraryA
VerifyVersionInfoA
GetEnvironmentVariableW
WideCharToMultiByte
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FormatMessageW
WriteFile
GetModuleHandleW
MultiByteToWideChar
GetSystemTimeAsFileTime
GetModuleHandleExW
GetCurrentProcessId
GetTickCount
GlobalMemoryStatus
SwitchToFiber
DeleteFiber
CreateFiber
LoadLibraryW
ConvertFiberToThread
ConvertThreadToFiber
GetConsoleMode
ReadConsoleA
ReadConsoleW
SetConsoleMode
GetSystemTime
SystemTimeToFileTime
GetTimeZoneInformation
HeapQueryInformation
HeapSize
SetFileAttributesW
GetFileAttributesExW
GetFullPathNameA
GetCommandLineW
SetCurrentDirectoryW
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
HeapFree
UnmapViewOfFile
HeapAlloc
MapViewOfFile
CreateFileMappingA
WaitForSingleObject
ReleaseSemaphore
QueryPerformanceCounter
CreateSemaphoreA
CloseHandle
LoadLibraryExA
ReadFile
GetFileSize
CreateFileA
DeleteFileW
MoveFileExW
CreateDirectoryW
FindFirstFileExA
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetConsoleCP
GetACP
SetConsoleCtrlHandler
ExitProcess
SystemTimeToTzSpecificLocalTime
GetCommandLineA
GetEnvironmentStringsW
CreateFileW
SetFilePointerEx
FreeLibraryAndExitThread
ExitThread
CreateThread
RtlUnwindEx
LoadLibraryExW
InterlockedFlushSList
InterlockedPushEntrySList
RtlPcToFileHeader
GetCPInfo
GetStringTypeW
GetLocaleInfoW
LCMapStringW
CompareStringW
DecodePointer
EncodePointer
GetStartupInfoW
InitializeSListHead
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
GetUserGeoID
GetFullPathNameW
GetModuleFileNameA
LockResource
LoadResource
FindResourceA
GetFileInformationByHandleEx
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetProcessHeap
OutputDebugStringW
WriteConsoleW
GetTempPathW
GetSystemDirectoryW
GetFileAttributesW
LocalAlloc
SetCurrentDirectoryA
ReleaseMutex
InitializeCriticalSection
CreateMutexA
MoveFileA
ReplaceFileA
GetExitCodeThread
DuplicateHandle
CreateProcessW
OpenProcess
GetCurrentDirectoryW
GetModuleFileNameW
WriteFileEx
SetEndOfFile
ReadFileEx
RtlCaptureContext
GetDiskFreeSpaceExA
SetThreadAffinityMask
CreateFiberEx
GetTempPathA
GetFileTime
SetFilePointer
FlushFileBuffers
RemoveDirectoryA
GetCurrentDirectoryA
SetThreadIdealProcessor
SuspendThread
ResumeThread
SetThreadPriority
RaiseException
GetCurrentThread
lstrcmpA
VerifyVersionInfoW
CreateProcessA
SearchPathW
OpenEventW
SetFileInformationByHandle
DeviceIoControl
TerminateThread
FindFirstFileW
TryEnterCriticalSection
CreateEventW
CreateSemaphoreW
SetUnhandledExceptionFilter
IsDebuggerPresent
GetDriveTypeW
VirtualQuery
VirtualProtect
GlobalMemoryStatusEx
GetLocalTime
FileTimeToLocalFileTime
GetDiskFreeSpaceExW
FileTimeToSystemTime
HeapReAlloc
LocalFileTimeToFileTime
GetLogicalDriveStringsW
GetVolumeNameForVolumeMountPointW
GetEnvironmentVariableA
VirtualAlloc
GetCurrentProcess
VirtualFree
GetVolumeInformationW
QueryPerformanceFrequency
FindClose
FindNextFileA
DeleteFileA
FindFirstFileA
OutputDebugStringA
GetSystemInfo
CreateEventA
SwitchToThread
ResetEvent
SetEvent
user32
GetMonitorInfoA
EnumDisplayMonitors
EnumDisplayDevicesA
RegisterWindowMessageW
MessageBoxW
GetUserObjectInformationW
GetProcessWindowStation
SetCursorPos
DefWindowProcW
PostQuitMessage
SetForegroundWindow
ShowWindow
LoadCursorA
SetCursor
EndPaint
BeginPaint
MessageBoxA
SetFocus
BringWindowToTop
SetWindowPos
GetCursorPos
SendMessageW
DialogBoxParamW
EndDialog
SetDlgItemTextA
SendInput
UnregisterDeviceNotification
GetActiveWindow
RegisterDeviceNotificationW
PostMessageW
GetWindowThreadProcessId
FindWindowW
AdjustWindowRectEx
GetWindowRect
DestroyWindow
CreateWindowExW
RegisterClassExW
DispatchMessageW
PeekMessageW
TranslateMessage
LoadIconW
ClipCursor
UnregisterClassA
SystemParametersInfoA
GetCursorInfo
ShowCursor
GetSystemMetrics
GetClientRect
GetDesktopWindow
EnumDisplaySettingsA
gdi32
BitBlt
GetStockObject
advapi32
CryptGenRandom
DeregisterEventSource
RegQueryInfoKeyA
RegEnumKeyExA
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExW
RegisterEventSourceW
ReportEventW
CryptAcquireContextW
CryptReleaseContext
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
CryptGetUserKey
CryptExportKey
CryptDecrypt
CryptCreateHash
CryptSignHashW
CryptDestroyHash
CryptEnumProvidersW
shell32
SHCreateDirectoryExA
SHGetFolderPathA
SHGetSpecialFolderPathA
SHGetSpecialFolderPathW
SHGetKnownFolderPath
SHFileOperationA
CommandLineToArgvW
ShellExecuteA
dinput8
DirectInput8Create
setupapi
CM_Get_Device_ID_Size
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiGetDriverInfoDetailA
SetupDiEnumDriverInfoA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
CM_Get_Device_IDW
SetupDiBuildDriverInfoList
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceInstallParamsA
SetupDiSetDeviceInstallParamsA
xinput9_1_0
XInputSetState
XInputGetState
shlwapi
PathCombineW
SHGetValueW
SHSetValueW
SHEnumKeyExW
SHDeleteKeyW
PathQuoteSpacesW
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
iphlpapi
GetAdaptersInfo
GetAdaptersAddresses
wsock32
htonl
ntohl
bugsplat64
?setMiniDumpType@MiniDmpSender@@QEAAXW4_BS_MINIDUMP_TYPE@1@@Z
?setCallback@MiniDmpSender@@QEAAXP6A_NIPEAX0@Z@Z
??0MiniDmpSender@@QEAA@PEB_W000K@Z
?sendAdditionalFile@MiniDmpSender@@QEAAXPEB_W@Z
?setFlags@MiniDmpSender@@QEAA_NK@Z
?createReport@MiniDmpSender@@QEAAXXZ
?createReportAndExit@MiniDmpSender@@QEAAXXZ
??1MiniDmpSender@@UEAA@XZ
amd_ags_x64
agsDriverExtensionsDX11_CreateBuffer
agsDriverExtensionsDX11_DeInit
agsInit
agsDriverExtensionsDX11_IASetPrimitiveTopology
agsDriverExtensionsDX11_NotifyResourceEndWrites
agsDriverExtensionsDX11_NotifyResourceBeginAllAccess
agsDriverExtensionsDX11_CreateTexture1D
agsDriverExtensionsDX11_NotifyResourceEndAllAccess
agsDriverExtensionsDX11_CreateTexture3D
agsDeInit
agsDriverExtensionsDX11_CreateTexture2D
agsDriverExtensionsDX11_SetDepthBounds
agsGetEyefinityConfigInfo
agsDriverExtensionsDX11_Init
agsGetCrossfireGPUCount
oo2core_4_win64
OodleLZ_Decompress
physx3_x64
??0PxRigidDynamicGeneratedInfo@physx@@QEAA@XZ
??0PxArticulationLinkGeneratedInfo@physx@@QEAA@XZ
??0PxConvexMeshGeometryGeneratedInfo@physx@@QEAA@XZ
??0PxCapsuleGeometryGeneratedInfo@physx@@QEAA@XZ
??0PxMaterialGeneratedInfo@physx@@QEAA@XZ
??0PxClothMotionConstraintConfigGeneratedInfo@physx@@QEAA@XZ
??0PxRigidStaticGeneratedInfo@physx@@QEAA@XZ
??0PxClothFabricGeneratedInfo@physx@@QEAA@XZ
??0PxMeshScaleGeneratedInfo@physx@@QEAA@XZ
?getGeometry@PxShapeGeometryPropertyHelper@physx@@QEBA_NPEBVPxShape@2@AEAVPxBoxGeometry@2@@Z
?getGeometry@PxShapeGeometryPropertyHelper@physx@@QEBA_NPEBVPxShape@2@AEAVPxSphereGeometry@2@@Z
?getGeometry@PxShapeGeometryPropertyHelper@physx@@QEBA_NPEBVPxShape@2@AEAVPxCapsuleGeometry@2@@Z
?getGeometry@PxShapeGeometryPropertyHelper@physx@@QEBA_NPEBVPxShape@2@AEAVPxPlaneGeometry@2@@Z
??0PxClothGeneratedInfo@physx@@QEAA@XZ
?getGeometry@PxShapeGeometryPropertyHelper@physx@@QEBA_NPEBVPxShape@2@AEAVPxConvexMeshGeometry@2@@Z
PxCreateBasePhysics
PxRegisterArticulations
PxRegisterHeightFields
PxRegisterCloth
PxRegisterParticles
?getGeometry@PxShapeGeometryPropertyHelper@physx@@QEBA_NPEBVPxShape@2@AEAVPxTriangleMeshGeometry@2@@Z
?getGeometry@PxShapeGeometryPropertyHelper@physx@@QEBA_NPEBVPxShape@2@AEAVPxHeightFieldGeometry@2@@Z
??0PxPlaneGeometryGeneratedInfo@physx@@QEAA@XZ
??0PxClothStretchConfigGeneratedInfo@physx@@QEAA@XZ
??0PxShapeGeneratedInfo@physx@@QEAA@XZ
??0PxParticleSystemGeneratedInfo@physx@@QEAA@XZ
??0PxHeightFieldDescGeneratedInfo@physx@@QEAA@XZ
??0PxBoxGeometryGeneratedInfo@physx@@QEAA@XZ
??0PxHeightFieldGeometryGeneratedInfo@physx@@QEAA@XZ
??0PxArticulationGeneratedInfo@physx@@QEAA@XZ
??0PxTriangleMeshGeometryGeneratedInfo@physx@@QEAA@XZ
??0PxParticleFluidGeneratedInfo@physx@@QEAA@XZ
??0PxAggregateGeneratedInfo@physx@@QEAA@XZ
??0PxClothTetherConfigGeneratedInfo@physx@@QEAA@XZ
??0PxArticulationJointGeneratedInfo@physx@@QEAA@XZ
??0PxSphereGeometryGeneratedInfo@physx@@QEAA@XZ
physx3common_x64
PxGetFoundation
?getAllocator@shdfnd@physx@@YAAEAVPxAllocatorCallback@2@XZ
?getInstance@Foundation@shdfnd@physx@@SAAEAV123@XZ
?error@Foundation@shdfnd@physx@@QEAAXW4Enum@PxErrorCode@3@PEBDH1ZZ
?allocate@Allocator@shdfnd@physx@@QEAAPEAX_KPEBDH@Z
??0Allocator@shdfnd@physx@@QEAA@PEBD@Z
?PxTransformFromPlaneEquation@physx@@YA?AVPxTransform@1@AEBVPxPlane@1@@Z
?start@ThreadImpl@shdfnd@physx@@QEAAXIPEAVRunnable@23@@Z
?getId@ThreadImpl@shdfnd@physx@@SA_KXZ
?findOverlapTriangleMesh@PxMeshQuery@physx@@SAIAEBVPxGeometry@2@AEBVPxTransform@2@AEBVPxTriangleMeshGeometry@2@1PEAIIIAEA_N@Z
?getWorldBounds@PxGeometryQuery@physx@@SA?AVPxBounds3@2@AEBVPxGeometry@2@AEBVPxTransform@2@M@Z
?PxDiagonalize@physx@@YA?AVPxVec3@1@AEBVPxMat33@1@AEAVPxQuat@1@@Z
PxCreateFoundation
?deallocate@Allocator@shdfnd@physx@@QEAAXPEAX@Z
?getDefaultStackSize@ThreadImpl@shdfnd@physx@@SAIXZ
?getSize@SListImpl@shdfnd@physx@@SAAEBIXZ
?pop@SListImpl@shdfnd@physx@@QEAAPEAVSListEntry@23@XZ
?overlap@PxGeometryQuery@physx@@SA_NAEBVPxGeometry@2@AEBVPxTransform@2@01@Z
?push@SListImpl@shdfnd@physx@@QEAAXPEAVSListEntry@23@@Z
?incRefCount@Foundation@shdfnd@physx@@SAXXZ
?setName@ThreadImpl@shdfnd@physx@@QEAAXPEBD@Z
?setAffinityMask@ThreadImpl@shdfnd@physx@@QEAAII@Z
?waitForQuit@ThreadImpl@shdfnd@physx@@QEAA_NXZ
?wait@SyncImpl@shdfnd@physx@@QEAA_NI@Z
??0ThreadImpl@shdfnd@physx@@QEAA@XZ
??1ThreadImpl@shdfnd@physx@@QEAA@XZ
?quitIsSignalled@ThreadImpl@shdfnd@physx@@QEAA_NXZ
?quit@ThreadImpl@shdfnd@physx@@QEAAXXZ
?getSize@ThreadImpl@shdfnd@physx@@SAAEBIXZ
??0SyncImpl@shdfnd@physx@@QEAA@XZ
??1SyncImpl@shdfnd@physx@@QEAA@XZ
?set@SyncImpl@shdfnd@physx@@QEAAXXZ
?reset@SyncImpl@shdfnd@physx@@QEAAXXZ
?getSize@SyncImpl@shdfnd@physx@@SAAEBIXZ
??0SListImpl@shdfnd@physx@@QEAA@XZ
??1SListImpl@shdfnd@physx@@QEAA@XZ
?signalQuit@ThreadImpl@shdfnd@physx@@QEAAXXZ
?decRefCount@Foundation@shdfnd@physx@@SAXXZ
physx3cooking_x64
PxCreateCooking
crypt32
CertGetCertificateContextProperty
CertGetNameStringA
CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CryptVerifyMessageSignature
wintrust
WinVerifyTrust
imagehlp
ImageEnumerateCertificates
ImageGetCertificateHeader
ImageGetCertificateData
hid
HidD_GetHidGuid
binkw64
BinkClose
BinkGetFrameBuffersInfo
BinkOpen
BinkSetSoundTrack
BinkSetFrameRate
BinkGetRects
BinkWait
BinkRegisterFrameBuffers
BinkGoto
BinkDoFrame
BinkShouldSkip
BinkSetIOSize
BinkNextFrame
BinkOpenDirectSound
BinkSetSoundSystem
BinkSetVolume
BinkSetSpeakerVolumes
BinkPause
msacm32
acmStreamSize
acmStreamConvert
acmStreamUnprepareHeader
acmStreamPrepareHeader
acmFormatSuggest
acmStreamOpen
ole32
CreateStreamOnHGlobal
CoInitialize
CoInitializeEx
PropVariantClear
CoSetProxyBlanket
CoCreateInstance
CoUninitialize
CoTaskMemFree
CLSIDFromString
CoInitializeSecurity
oleaut32
SysFreeString
SysAllocString
VariantClear
SysAllocStringLen
vcomp140
_vcomp_for_static_end
_vcomp_for_static_simple_init
_vcomp_fork
Exports
Exports
?Activate@CInGameSection@SMS@MWL@@EEAA?AW4tRetCode@3@XZ
?Create@_BSystemPool@Base@MWL@@QEAAXXZ
?Create@cGameApp@SMS@MWL@@UEAA?AW4tRetCode@3@XZ
?DoNextLoad@CWeatherSystemExtraLoadingPhase@MWL@@UEAA?AW4tPhaseState@2@XZ
?DoNextLoad@IGPhaseLiveGrassLoad@SMS@MWL@@UEAA?AW4tPhaseState@3@XZ
?DoNextLoad@IGPhaseTrack@SMS@MWL@@UEAA?AW4tPhaseState@3@XZ
?Load@IGPhaseVehicle@SMS@MWL@@UEAA?AW4tPhaseState@3@XZ
?_Create@_BaseLib@Base@MWL@@AEAAXXZ
?_LoadConfig@_BTitleConfig@Base@MWL@@AEAAXXZ
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
curl_easy_cleanup
curl_easy_duphandle
curl_easy_escape
curl_easy_getinfo
curl_easy_init
curl_easy_pause
curl_easy_perform
curl_easy_recv
curl_easy_reset
curl_easy_send
curl_easy_setopt
curl_easy_strerror
curl_easy_unescape
curl_escape
curl_formadd
curl_formfree
curl_formget
curl_free
curl_getdate
curl_getenv
curl_global_cleanup
curl_global_init
curl_global_init_mem
curl_maprintf
curl_mfprintf
curl_mprintf
curl_msnprintf
curl_msprintf
curl_multi_add_handle
curl_multi_assign
curl_multi_cleanup
curl_multi_fdset
curl_multi_info_read
curl_multi_init
curl_multi_perform
curl_multi_remove_handle
curl_multi_setopt
curl_multi_socket
curl_multi_socket_action
curl_multi_socket_all
curl_multi_strerror
curl_multi_timeout
curl_multi_wait
curl_mvaprintf
curl_mvfprintf
curl_mvprintf
curl_mvsnprintf
curl_mvsprintf
curl_share_cleanup
curl_share_init
curl_share_setopt
curl_share_strerror
curl_slist_append
curl_slist_free_all
curl_strequal
curl_strnequal
curl_unescape
curl_version
curl_version_info
Sections
.text Size: 28.3MB - Virtual size: 28.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6.7MB - Virtual size: 6.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 515KB - Virtual size: 5.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 948KB - Virtual size: 948KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bind Size: 174KB - Virtual size: 174KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ