c36f842eb4bd073ad1f8183ec1c22e1f766efd6bb864ecde5967651432679775

Sharing

Copy URL Twitter E-mail

General

Target

c36f842eb4bd073ad1f8183ec1c22e1f766efd6bb864ecde5967651432679775
Size

3.5MB
MD5

bbbea9c65b906915a52fb35425192c5f
SHA1

21a3408073e897f03bf832744ff5890e2dd383bf
SHA256

c36f842eb4bd073ad1f8183ec1c22e1f766efd6bb864ecde5967651432679775
SHA512

565b49805200d07bf2ffcddd237fec512146a98c357495dd96370cb2598baf34eec7b699be4983d4194261cf721b47c1a4f83f893bb2099a0aa2db762de7effe
SSDEEP

49152:aeEHCQ8i34Lgpipaq+ZUeURdt3ZwOSvIUVMtUyrJlDO1/DVx5t:5EHCQ8i7qaVZUeURdt3ZwOSvIUVMtUR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c36f842eb4bd073ad1f8183ec1c22e1f766efd6bb864ecde5967651432679775

Files

c36f842eb4bd073ad1f8183ec1c22e1f766efd6bb864ecde5967651432679775
.dll windows:6 windows x86 arch:x86

346403e2d2fb3cdb6abb55ca9a451761

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

d3d11

D3D11CreateDevice

d3dcompiler_47

D3DCompile
D3DDisassemble

api-ms-win-core-synch-l1-2-0

SleepConditionVariableSRW
WakeAllConditionVariable
Sleep

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress
FreeLibrary

api-ms-win-core-processenvironment-l1-1-0

GetEnvironmentVariableA

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-errorhandling-l1-1-0

RaiseException
GetLastError

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter
QueryPerformanceFrequency

api-ms-win-core-synch-l1-1-0

WaitForSingleObjectEx
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
CreateEventExW
SetEvent

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount

api-ms-win-core-file-l1-1-0

FindClose
FindNextFileW
GetFullPathNameW
FindFirstFileExW

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

api-ms-win-core-libraryloader-l2-1-0

LoadPackagedLibrary

api-ms-win-core-localization-l1-2-0

FormatMessageA

msvcp140_app

?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z
??0_Locinfo@std@@QAE@HPBD@Z
?unget@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?_Getname@_Locinfo@std@@QBEPBDXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@_N@Z
?_Makeloc@_Locimp@locale@std@@CAPAV123@ABV_Locinfo@3@HPAV123@PBV23@@Z
?_Xruntime_error@std@@YAXPBD@Z
?_Xinvalid_argument@std@@YAXPBD@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@MAE@XZ
?tolower@?$ctype@D@std@@QBEDD@Z
?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
_Strcoll
?id@?$collate@D@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
_Strxfrm
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Throw_C_error@std@@YAXH@Z
?_Xlength_error@std@@YAXPBD@Z
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_init_in_situ
_Mtx_unlock
?_Raise_handler@std@@3P6AXABVexception@stdext@@@ZA
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
_Thrd_hardware_concurrency
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_Schedule_chore@details@Concurrency@@YAHPAU_Threadpool_chore@12@@Z
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QAEX_N@Z
?_Release_chore@details@Concurrency@@YAXPAU_Threadpool_chore@12@@Z
?_Capture@_ContextCallback@details@Concurrency@@AAEXXZ
?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ
?_Reset@_ContextCallback@details@Concurrency@@AAEXXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QBEXV?$function@$$A6AXXZ@std@@_N@Z
??0task_continuation_context@Concurrency@@AAE@XZ
_Mtx_current_owns
_Cnd_unregister_at_thread_exit
?__ExceptionPtrCreate@@YAXPAX@Z
_Cnd_init_in_situ
?__ExceptionPtrCopy@@YAXPAXPBX@Z
_Query_perf_frequency
?_Throw_Cpp_error@std@@YAXH@Z
?_Xbad_function_call@std@@YAXXZ
?_Syserror_map@std@@YAPBDH@Z
_Cnd_timedwait
?__ExceptionPtrToBool@@YA_NPBX@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrRethrow@@YAXPBX@Z
_Cnd_register_at_thread_exit
_Cnd_wait
_Query_perf_counter
_Xtime_get_ticks
_Cnd_broadcast
_Cnd_destroy_in_situ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?in_avail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JXZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z

kernel32

InitOnceComplete
InitOnceBeginInitialize

vcruntime140_app

memset
memmove
memcpy
memchr
__RTDynamicCast
_except_handler4_common
_CxxThrowException
__std_type_info_destroy_list
__current_exception_context
__current_exception
strchr
__RTtypeid
__std_type_info_name
__std_type_info_compare
strstr
__std_terminate
_purecall
__std_exception_copy
__CxxFrameHandler3
__std_exception_destroy

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
realloc
free

api-ms-win-crt-utility-l1-1-0

rand
srand

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
feof
fopen_s
fputc
fseek
__acrt_iob_func
__stdio_common_vsnprintf_s
__stdio_common_vfprintf
fflush
fclose
__stdio_common_vsprintf_s
fgetc
_get_stream_buffer_pointers
_fseeki64
fread
fsetpos
ungetc
setvbuf
fgetpos
fwrite

api-ms-win-crt-convert-l1-1-0

strtoul
mbsrtowcs
wcstombs
mbstowcs_s
wcstombs_s
atoi
strtol

api-ms-win-crt-runtime-l1-1-0

_invoke_watson
_set_errno
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e
terminate
abort
exit
_invalid_parameter_noinfo_noreturn
_errno

api-ms-win-crt-string-l1-1-0

tolower
strncmp
toupper
isdigit
strncpy
_strdup
isspace
_stricmp

api-ms-win-crt-math-l1-1-0

_CIatan2
_CIcosh
_CIsinh
round
log2
_CItanh
modf
lroundf
asinhf
atanhf
acoshf
truncf
_fdsign
exp2f
_libm_sse2_acos_precise
_libm_sse2_asin_precise
_libm_sse2_atan_precise
roundf
_libm_sse2_cos_precise
fmax
fmaxf
hypot
_libm_sse2_exp_precise
_libm_sse2_log10_precise
_libm_sse2_log_precise
_libm_sse2_pow_precise
_libm_sse2_sin_precise
_libm_sse2_sqrt_precise
ceil
ldexp
floor
_libm_sse2_tan_precise

api-ms-win-crt-filesystem-l1-1-0

_unlock_file
_lock_file

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

Exports

Exports

??0BeatDetect@@QAE@PAVPCM@@@Z
??0Func@@QAE@ABV0@@Z
??0Func@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@P6AMPAM@ZHH@Z
??0PCM@@QAE@XZ
??0PlatformMethods@angle@@QAE@XZ
??0PresetInputs@@QAE@ABV0@@Z
??0PresetOutputs@@QAE@ABV0@@Z
??0projectM@@QAE@USettings@0@H@Z
??0projectM@@QAE@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
??1BeatDetect@@QAE@XZ
??1Func@@QAE@XZ
??1PCM@@QAE@XZ
??1projectM@@UAE@XZ
??4BeatDetect@@QAEAAV0@ABV0@@Z
??4Func@@QAEAAV0@ABV0@@Z
??4PCM@@QAEAAV0@ABV0@@Z
??4PlatformMethods@angle@@QAEAAU01@$$QAU01@@Z
??4PlatformMethods@angle@@QAEAAU01@ABU01@@Z
??4PresetInputs@@QAEAAV0@ABV0@@Z
??4PresetOutputs@@QAEAAV0@ABV0@@Z
??_7PresetInputs@@6B@
??_7PresetOutputs@@6B@
??_7projectM@@6B@
?FLAG_DISABLE_PLAYLIST_LOAD@projectM@@2HB
?FLAG_NONE@projectM@@2HB
?_initPCM@PCM@@AAEXH@Z
?addPCM16@PCM@@QAEXQAY0CAA@F@Z
?addPCM16Data@PCM@@QAEXPBFF@Z
?addPCM8@PCM@@QAEXQAY0EAA@E@Z
?addPCM8_512@PCM@@QAEXQAY0CAA@$$CBE@Z
?addPCMfloat@PCM@@QAEXPBMH@Z
?addPCMfloat_2ch@PCM@@QAEXPBMH@Z
?addPresetURL@projectM@@QAEIABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0ABV?$vector@HV?$allocator@H@std@@@3@@Z
?changeHardcutDuration@projectM@@QAEXH@Z
?changePresetDuration@projectM@@QAEXH@Z
?changePresetName@projectM@@QAEXIV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?changePresetRating@projectM@@QAEXIHW4PresetRatingType@@@Z
?changeTextureSize@projectM@@QAEXH@Z
?clearPlaylist@projectM@@QAEXXZ
?default_key_handler@projectM@@QAEXW4projectMEvent@@W4projectMKeycode@@@Z
?deleteSearchText@projectM@@QAEXXZ
?destroyPresetTools@projectM@@AAEXXZ
?detectFromSamples@BeatDetect@@QAEXXZ
?evaluateSecondPreset@projectM@@QAEXXZ
?freePCM@PCM@@QAEXXZ
?getBeatVals@BeatDetect@@QAEXMIPAM0@Z
?getErrorLoadingCurrentPreset@projectM@@QBE_NXZ
?getMeshSize@projectM@@QAEXPAH0@Z
?getName@Func@@QBEABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getNumArgs@Func@@QBEHXZ
?getPCM@PCM@@QAEXPAMHHHMH@Z
?getPCMScale@BeatDetect@@QAEMXZ
?getPCMnew@PCM@@QAEHPAMHHMHH@Z
?getPlaylistSize@projectM@@QBEIXZ
?getPresetIndex@projectM@@QBEIAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?getPresetName@projectM@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z
?getPresetRating@projectM@@QBEHIW4PresetRatingType@@@Z
?getPresetURL@projectM@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z
?getSearchIndex@projectM@@QBEIAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?getWindowHeight@projectM@@QAEHXZ
?getWindowWidth@projectM@@QAEHXZ
?initPresetTools@projectM@@AAEHHH@Z
?initRenderToTexture@projectM@@QAEIXZ
?insertPresetURL@projectM@@QAEXIABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0ABV?$vector@HV?$allocator@H@std@@@3@@Z
?isPresetLocked@projectM@@QBE_NXZ
?isShuffleEnabled@projectM@@QBE_NXZ
?isTextInputActive@projectM@@QBE_N_N@Z
?key_handler@projectM@@QAEXW4projectMEvent@@W4projectMKeycode@@W4projectMModifier@@@Z
?maxsamples@PCM@@2HA
?pcm@projectM@@QAEPAVPCM@@XZ
?pipelineContext2@projectM@@QAEAAVPipelineContext@@XZ
?pipelineContext@projectM@@QAEAAVPipelineContext@@XZ
?populatePresetMenu@projectM@@QAEXXZ
?presetPositionValid@projectM@@QBE_NXZ
?presetRatingChanged@projectM@@UBEXIHW4PresetRatingType@@@Z
?presetSwitchFailedEvent@projectM@@UBEX_NIABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?presetSwitchedEvent@projectM@@UBEX_NI@Z
?projectM_init@projectM@@AAEXHHHHHH@Z
?projectM_reset@projectM@@AAEXXZ
?projectM_resetGL@projectM@@QAEXHH@Z
?projectM_resetTextures@projectM@@QAEXXZ
?projectM_resetengine@projectM@@AAEXXZ
?projectM_setTitle@projectM@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?readConfig@projectM@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?readSettings@projectM@@AAEXABUSettings@1@@Z
?removePreset@projectM@@QAEXI@Z
?renderFrame@projectM@@QAEXXZ
?renderFrameEndOnSeparatePasses@projectM@@QAEXPAVPipeline@@@Z
?renderFrameOnlyPass1@projectM@@QAEPAVPipeline@@PAV2@@Z
?renderFrameOnlyPass2@projectM@@QAEXPAVPipeline@@HHH@Z
?reset@BeatDetect@@QAEXXZ
?resetSearchText@projectM@@QAEXXZ
?selectNext@projectM@@QAEX_N@Z
?selectPreset@projectM@@QAEXI_N@Z
?selectPresetByName@projectM@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
?selectPresetPosition@projectM@@QAEXI@Z
?selectPrevious@projectM@@QAEX_N@Z
?selectRandom@projectM@@QAEX_N@Z
?selectedPresetIndex@projectM@@QBE_NAAI@Z
?setHelpText@projectM@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setPresetLock@projectM@@QAEX_N@Z
?setSearchText@projectM@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setShuffleEnabled@projectM@@QAEX_N@Z
?setToastMessage@projectM@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?settings@projectM@@QBEABUSettings@1@XZ
?shuffleEnabledValueChanged@projectM@@UBEX_N@Z
?startPresetTransition@projectM@@AAE_N_N@Z
?switchToCurrentPreset@projectM@@AAE?AV?$unique_ptr@VPreset@@U?$default_delete@VPreset@@@std@@@std@@XZ
?toggleSearchText@projectM@@QAEXXZ
?touch@projectM@@QAEXMMHH@Z
?touchDestroy@projectM@@QAEXMM@Z
?touchDestroyAll@projectM@@QAEXXZ
?touchDrag@projectM@@QAEXMMH@Z
?writeConfig@projectM@@SA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABUSettings@1@@Z
ADDON_Create
ADDON_GetTypeMinVersion
ADDON_GetTypeVersion
_ANGLEGetDisplayPlatform@20
_ANGLEResetDisplayPlatform@4

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 714KB - Virtual size: 714KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 514KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 154KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

346403e2d2fb3cdb6abb55ca9a451761

Headers

DLL Characteristics

File Characteristics

Imports

d3d11

d3dcompiler_47

api-ms-win-core-synch-l1-2-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-processenvironment-l1-1-0

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-core-winrt-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-com-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-libraryloader-l2-1-0

api-ms-win-core-localization-l1-2-0

msvcp140_app

kernel32

vcruntime140_app

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-core-interlocked-l1-1-0

api-ms-win-core-processthreads-l1-1-1

Exports

Exports

Sections

.text Size: 2.5MB - Virtual size: 2.5MB

.rdata Size: 714KB - Virtual size: 714KB

.data Size: 134KB - Virtual size: 514KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 154KB - Virtual size: 154KB

.text
Size: 2.5MB - Virtual size: 2.5MB

.rdata
Size: 714KB - Virtual size: 714KB

.data
Size: 134KB - Virtual size: 514KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 154KB - Virtual size: 154KB